Scenario:
Teleconn, a UK-based telecommunications provider, initiated a BCMS based on ISO 22301 to ensure reliable and consistent services. To monitor the BCMS's performance, the internal audit function was outsourced to a company specializing in auditing services. The outsourced internal auditor was given unrestricted access to employees and documented information necessary for an effective audit.
An outsourced company conducts regular internal audits of Teleconn's BCMS. Is this acceptable?

• A. Yes, the internal audit function must always be outsourced to ensure its independence.
• B. No, the organization must not outsource the internal audit function.
• C. Yes, the organization is allowed to outsource the function of the internal audit.

Scenario:
Alex, the project manager of the BCMS implementation project at Company ZY, developed a process to identify the required resources for establishing the BCMS. He discovered that the company lacked a well- integrated communication and information system and also needed additional office space to accommodate new hires.
What resources did the company need?

• A. Infrastructure and logistic resources
• B. Equipment and financial resources
• C. Human and equipment resources

Scenario:
Teleconn, a UK-based telecommunications provider, initiated a BCMS based on ISO 22301 to ensure reliable and consistent services. To monitor the BCMS's performance, the internal audit function was outsourced to a company specializing in auditing services. The outsourced internal auditor was given unrestricted access to employees and documented information necessary for an effective audit.
Based on Scenario 6, the top management planned to conduct management reviews every three months. Is this compliant with ISO 22301?

• A. Yes, ISO 22301 requires organizations to conduct management reviews every three months.
• B. Yes, ISO 22301 does not provide any specific requirements regarding the frequency of management reviews.
• C. No, ISO 22301 requires organizations to conduct management reviews every six months.

Scenario:
Clicked is a law firm that handles complex clients' needs and offers a wide range of legal and tax services.
Clicked's professionals are equipped with an in-depth knowledge of the legal and regulatory requirements.
They are committed to providing their clients with the best services and legal advice. Considering that it is essential to meet their clients' needs, Clicked decided to implement a BCMS based on ISO 22301 to provide them uninterrupted services.
To implement the BCMS, the top management of Clicked decided to contract an external consultant, Tris, as the BCMS project manager, and assembled a team of four members to aid in the process. Prioritizing a smoother integration of the BCMS, the top management focused on incorporating it into the company's existing operational procedures. Additionally, the top management and the project team chose to adopt the Plan-Do-Check-Act (PDCA) model as theirimplementation approach, allowing for a systematic and phased approach to establishing and maintaining the BCMS.
Then, the top management and Tris compiled a document containing the financial benefits and consequences of every decision they were going to make during the implementation of the BCMS. The top management also agreed that the project implementation should be finalized within a six-month timeframe, encompassing planning through the completion of the last implementation stage.
The project team initiated the implementation process by analyzing the company's internal and external context. This involved evaluating Clicked's compliance with all applicable legal requirements and understanding the key services, necessary activities, and resource allocation, including staff expertise and technological tools. Based on this analysis, the top management and Tris established specific business continuity objectives. Their primary goal was to ensure that all critical legal services could be resumed within a two-hour timeframe following any disruptive incident to minimize client impact.
Clicked decided to contract an external consultant as project manager for the implementation of their BCMS.
Is this compliant with ISO 22301?

• A. No, an external consultant may only be hired as an advisor to the BCMS project team.
• B. Yes, organizations can contract an external consultant as project manager.
• C. No, the project manager responsible for implementation should be an employee of the organization.

Scenario:
Headquartered in Sri Lanka, Operons Inc. is a freight forwarding company that adopted a BCMS aligned with ISO 22301. Prior to the certification audit, Operons Inc. measured gaps between their BCMS and the standard's requirements to ensure compliance. The certification body was contracted to conduct the audit, and a biased auditor from a previous ISO 9001 audit was replaced upon request. During the audit, two minor nonconformities were identified, and the audit team issued a recommendation for certification.
In Scenario 8, the certification body accepts Operons Inc.'s rejection of the auditor and appoints another one.
Is this acceptable?

• A. Yes, previously displayed unprofessional conduct is a valid reason to replace an auditor.
• B. Yes, the auditor has previously audited the company against ISO 9001, which is a valid reason for replacing the auditor.
• C. No, the auditor can be rejected only if a conflict of interest situation is present.