Continuous Improvement & Auditing Flashcards
7 cards from real CRP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Continuous Improvement & Auditing flashcards as text
Which of the following BEST describes a 'maturity model' in the context of resilience program improvement?
Answer: A structured framework that defines progressive levels of program capability and sophistication
A maturity model defines ascending capability levels (e.g., initial, managed, optimized) to help organizations assess their current state and plan improvement trajectories.
During an audit, an auditor finds that corrective actions from the previous audit cycle were closed without verified evidence of implementation. This MOST likely indicates:
Answer: An immature corrective action management process
Closing corrective actions without verified evidence suggests the organization lacks a rigorous process for validating that fixes were actually implemented and effective.
Which of the following audit evidence types is considered MOST reliable?
Answer: Documentary evidence directly observed and collected by the auditor
Evidence directly observed and collected by the auditor — such as records reviewed on-site — is most reliable because it is not filtered or interpreted by the auditee.
The concept of 'continual improvement' in ISO 22301 differs from 'continuous improvement' primarily in that:
Answer: Continual improvement implies ongoing but not necessarily uninterrupted improvement, allowing for planned cycles
ISO management systems use 'continual improvement' to indicate progress over time through planned iterations, not necessarily an unbroken real-time process.
An organization uses key performance indicators (KPIs) for its resilience program. Which KPI would MOST directly measure recovery capability?
Answer: Percentage of critical processes meeting their RTO during exercises
RTO attainment during exercises directly measures whether the organization can actually recover within its defined targets, making it the most direct measure of recovery capability.
What is the PRIMARY purpose of an audit trail in a resilience management program?
Answer: To provide a chronological record supporting accountability, traceability, and verification of actions
An audit trail creates a chronological, tamper-evident record that allows auditors and management to verify that processes were followed and actions were taken as required.
When assessing the effectiveness of a resilience program improvement initiative, which approach BEST validates that changes achieved the intended outcome?
Answer: Comparing pre- and post-improvement performance data against defined success criteria
Comparing pre- and post-improvement performance data against defined success criteria is the most objective method for validating that the improvement achieved its intended outcome.