Continuous Improvement & Auditing Flashcards
7 cards from real CRP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Continuous Improvement & Auditing flashcards as text
Which audit methodology is most appropriate when an organization wants to assess compliance against the ISO 22301 standard for business continuity?
Answer: Third-party certification audit
A third-party certification audit conducted by an accredited certification body is required to formally assess and certify compliance against ISO 22301.
In the PDCA (Plan-Do-Check-Act) cycle applied to resilience programs, what is the primary purpose of the 'Check' phase?
Answer: Monitor and measure program performance against objectives
The Check phase involves monitoring, measuring, analyzing, and evaluating results against the planned objectives to determine if goals are being met.
What does a 'lessons learned' process in resilience management primarily help an organization achieve?
Answer: Identify gaps and embed improvements after incidents or exercises
Lessons learned processes capture what worked, what failed, and what should change, directly feeding continuous improvement into resilience programs.
An auditor discovers that a business continuity plan has not been updated in 36 months despite two significant organizational changes. This finding would MOST likely be classified as:
Answer: Major nonconformity
A plan that fails to reflect significant organizational changes over an extended period represents a systemic failure of the maintenance process, qualifying as a major nonconformity.
Which metric BEST measures the effectiveness of a business continuity training program over time?
Answer: Reduction in plan errors identified during exercises following training
Reduction in errors identified during exercises directly measures whether training is translating into improved competency and plan execution.
Root cause analysis (RCA) in a resilience context is BEST described as:
Answer: A structured method to identify underlying causes of failures or incidents
RCA identifies the fundamental cause of a problem — not just symptoms — so that corrective actions address the source and prevent recurrence.
Which of the following BEST represents a leading indicator for resilience program health?
Answer: Percentage of plans tested and updated within the required cycle
Leading indicators predict future performance; plan testing and update completion rates signal program maintenance health before an incident occurs.