PECB ISO-22301-Lead-Auditor Dumps Questions Answers

According to the ISO 22301 Auditing eBook, there are five types of strategies involved in the process-centric approach to business continuity management. They are:

• Business continuity strategy: This is the overall approach that provides a framework for ensuring the continuity of an organization’s critical functions in the event of a disruption. It defines the objectives, scope, principles, and policies of the business continuity management system (BCMS).
• Recovery strategy: This is the specific approach that defines how an organization will restore its critical functions within a predefined time frame after a disruption. It identifies the resources, actions, and procedures required to recover the critical functions and resume normal operations.
• Continuity strategy: This is the specific approach that defines how an organization will maintain its critical functions during a disruption. It identifies the alternative arrangements, methods, and modes of operation that will enable the organization to continue delivering its products or services at an acceptable level of performance.
• Mitigation strategy: This is the specific approach that defines how an organization will reduce the likelihood and/or impact of a disruption. It identifies the preventive and protective measures that will minimize the exposure and vulnerability of the organization to potential threats and risks.
• Response strategy: This is the specific approach that defines how an organization will react to a disruption. It identifies the roles, responsibilities, and authorities of the incident management team, the communication channels and protocols, and the escalation and notification procedures.

References: ISO 22301 Auditing eBook, pages 40-42

Suppliers are the role associated with specialist services offered by third parties, such as consultants, trainers, auditors, or certification bodies. Suppliers can provide external support and expertise to the organization in developing, implementing, maintaining, and improving its BCMS. Suppliers can also help the organization to demonstrate its conformance and competence to interested parties, such as customers, regulators, or investors. Suppliers are one of the key stakeholders of the BCMS, as they can influence or be influenced by the organization’s business continuity performance and objectives. References: ISO 22301 Auditing eBook, page 12 1; ISO 22301:2019, clause 4.2 2

A personal interview is a type of interview that employs verbal questioning as its principal technique of data collection. It is a face-to-face conversation between the interviewer and the interviewee, where the interviewer asks open-ended or closed-ended questions to obtain information from the interviewee. A personal interview can be conducted in various settings, such as at the interviewee’s workplace, home, or a neutral location. A personal interview can be structured, semi-structured, or unstructured, depending on the level of flexibility and standardization of the questions. A personal interview can be used for different purposes, such as to assess the interviewee’s competence, motivation, attitude, or opinion on a certain topic. A personal interview can also be used to establish rapport, trust, and credibility between the interviewer and the interviewee. A personal interview can have various advantages and disadvantages, such as:

Advantages:

• It allows the interviewer to observe the interviewee’s body language, facial expressions, and tone of voice, which can provide additional insights into the interviewee’s feelings, emotions, and reactions.
• It enables the interviewer to probe deeper into the interviewee’s responses, clarify ambiguities, and ask follow-up questions to obtain more detailed and comprehensive information.
• It gives the interviewer the opportunity to adapt the questions and the pace of the interview according to the interviewee’s level of knowledge, interest, and responsiveness.
• It can increase the interviewee’s willingness to participate, cooperate, and disclose information, as the interviewer can establish a personal connection and a positive atmosphere with the interviewee.
• It can reduce the possibility of misunderstanding, misinterpretation, or distortion of the information, as the interviewer can verify and confirm the interviewee’s answers immediately.

Disadvantages:

• It can be time-consuming, costly, and labor-intensive, as it requires the interviewer to travel to the interviewee’s location, schedule the interview, and conduct the interview.
• It can be influenced by various biases, such as the interviewer’s expectations, preferences, stereotypes, or prejudices, which can affect the interviewer’s choice of questions, interpretation of answers, and evaluation of the interviewee.
• It can be affected by various factors, such as the interviewer’s skills, personality, appearance, or mood, which can influence the interviewer’s performance, behavior, and interaction with the interviewee.
• It can be subject to various errors, such as the interviewer’s memory, recall, or transcription errors, which can result in the loss, omission, or alteration of the information.
• It can pose various challenges, such as the interviewer’s difficulty in maintaining control, neutrality, or objectivity, or the interviewee’s reluctance, resistance, or dishonesty, which can hinder the quality and validity of the information.

References:

• PECB Certified ISO 22301 Lead Auditor eLearning Training Course1, Module 5: Conducting an ISO 22301 audit, Lesson 5.2: Communication during the audit, Slide 8: Types of interviews
• ISO 22301 Auditing eBook2, Chapter 5: Conducting an ISO 22301 audit, Section 5.2: Communication during the audit, Subsection 5.2.1: Types of interviews