Continuous Improvement & Auditing Flashcards
7 cards from real CRP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Continuous Improvement & Auditing flashcards as text
Which of the following scenarios BEST illustrates the concept of 'closing the loop' in a resilience continuous improvement cycle?
Answer: Verifying that a corrective action eliminated the root cause before formally closing the finding
Closing the loop means verifying that corrective actions actually resolved the underlying root cause before marking the finding as closed, not just completing the paperwork.
A resilience auditor uses the 'turtle diagram' technique. What does this tool PRIMARILY help assess?
Answer: The inputs, outputs, resources, and competencies associated with a specific process
The turtle diagram maps a process by identifying inputs, outputs, resources (with what), competencies (with whom), methods (how), and metrics (how well) to enable thorough process assessment.
In a resilience program, 'management of change' (MOC) is MOST directly relevant to continuous improvement because:
Answer: It captures and assesses how organizational changes affect existing resilience plans
MOC processes ensure that when the organization changes — new systems, restructured teams, new locations — resilience plans are updated to reflect those changes, preventing silent gaps.
Which of the following BEST represents the role of an audit program manager in an organization's resilience function?
Answer: Planning, establishing, implementing, and improving the overall internal audit program
The audit program manager is responsible for planning and governing the overall audit program — scope, schedules, resources, methods — not necessarily conducting every audit personally.
An organization wants to demonstrate that its resilience program improvements are sustainable over time. Which mechanism BEST provides this assurance?
Answer: Embedding improvement cycles into governance structures with tracked KPIs and management reviews
Sustainability of improvement requires institutionalized governance — recurring measurement, management review, and accountability — not one-time assessments or technology purchases.
During a surveillance audit, the auditor notes that the organization has added three new critical suppliers since the last audit but has not updated its supplier resilience assessments. This is MOST appropriately raised as:
Answer: A minor nonconformity related to incomplete scope management
Failing to assess three new critical suppliers represents an incomplete application of the supplier management process, which is a nonconformity, but confined in scope enough to be classified as minor.
Which of the following BEST describes the difference between 'validation' and 'verification' in the context of resilience plan testing?
Answer: Verification confirms plans are documented correctly; validation confirms plans achieve intended outcomes when tested
Verification checks that plans are complete and accurate as documented; validation tests whether the plans actually work and achieve their intended recovery objectives in practice.