Continuous Improvement & Auditing Flashcards
7 cards from real CRP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Continuous Improvement & Auditing flashcards as text
When conducting an internal audit of a resilience program, which sampling approach is MOST effective for identifying systemic issues across a large organization?
Answer: Judgmental sampling based on prior audit findings and risk profile
Judgmental sampling uses auditor expertise and historical risk data to focus on higher-risk areas, increasing the likelihood of uncovering systemic issues.
A corrective action plan (CAP) developed after an audit should PRIMARILY include which of the following elements?
Answer: Identified root cause, action steps, owner, and target completion date
An effective CAP specifies what went wrong (root cause), what will be done (action steps), who is responsible (owner), and by when (target date).
How does benchmarking contribute to continuous improvement in resilience management?
Answer: It provides an objective external reference point to identify gaps and best practices
Benchmarking compares an organization's resilience practices against industry peers or standards, revealing gaps and improvement opportunities that internal review alone might miss.
Which standard provides specific guidance on management system auditing and is commonly applied when auditing ISO 22301 programs?
Answer: ISO 19011
ISO 19011 provides guidelines for auditing management systems, including audit principles, managing an audit program, and conducting audits — applicable across all ISO management system standards.
An organization's post-exercise review reveals that 40% of staff were unaware of their roles during activation. Which continuous improvement action is MOST directly indicated?
Answer: Enhance training and awareness programs targeting role clarity
Staff unawareness of roles is a training and communication gap, making enhanced training and awareness the most direct corrective action.
In continuous improvement frameworks, what is the purpose of a 'management review' in an ISO 22301-aligned program?
Answer: To ensure top management evaluates program performance and drives strategic improvements
Management reviews require top leadership to evaluate the BCMS performance against strategic objectives and make decisions to drive improvement at the organizational level.
What is the MOST significant risk of relying solely on tabletop exercises for continuous improvement without conducting full-scale tests?
Answer: Procedural gaps may go undetected because physical execution and logistics are not tested
Tabletop exercises test knowledge and decision-making but cannot reveal logistical failures, physical resource gaps, or execution problems that only emerge during full-scale testing.