Practice Test Geeks(DRI) Disaster Recovery Institute International Certification Practice Test
← All DRI Flashcard Decks

ISO 22301 Business Continuity Management Standard Flashcards

6 cards from real DRI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 ISO 22301 Business Continuity Management Standard flashcards as text

  1. What is the relationship between ISO 22301 and ISO 31000 in business continuity management?

    Answer: ISO 31000 provides the risk management framework and principles that ISO 22301's risk assessment requirements are designed to align with

    ISO 31000 is the international risk management standard providing principles, framework, and process guidance. ISO 22301's risk assessment requirements reference and align with ISO 31000, which provides the risk management methodology framework that BCM risk assessment should follow.

  2. What is 'scope exclusion' in ISO 22301 and what are the limitations on its application?

    Answer: Organizations may exclude specific parts of the organization from the BCMS scope, but only if those exclusions do not affect conformance to requirements or the ability to achieve intended outcomes

    ISO 22301 permits organizations to define a BCMS scope that excludes specific parts of the organization, but exclusions must be justified and cannot include parts that affect the organization's ability to conform to requirements or achieve the BCMS's intended outcomes.

  3. How does ISO 22301 address the requirement for 'organizational resilience' beyond traditional business continuity?

    Answer: ISO 22301 takes a management system approach that embeds continuity principles into organizational culture, strategy, and governance—building adaptive capacity beyond specific plan activation

    ISO 22301's management system approach embeds business continuity into organizational governance, culture, and strategy—creating adaptive capacity and resilience as an organizational characteristic rather than just a set of plans activated during declared disasters.

  4. What is the 'stage 1 audit' in the ISO 22301 certification process and what does it assess?

    Answer: A documentation review and readiness assessment conducted before the main certification audit to determine if the organization is ready to proceed to stage 2

    The Stage 1 audit is a documentation review and readiness assessment conducted by the certification body to evaluate whether the BCMS is sufficiently developed and implemented to proceed to the Stage 2 on-site certification audit.

  5. What is the role of 'interested parties' analysis in ISO 22301 implementation?

    Answer: Determining which external stakeholders have requirements that affect BCMS scope and objectives, ensuring the BCMS addresses their needs

    Interested parties analysis (Clause 4.2) identifies external and internal stakeholders with requirements relevant to business continuity—customers with contractual uptime requirements, regulators with compliance obligations, shareholders with resilience expectations—ensuring the BCMS addresses their needs.

  6. How does ISO 22301 define the relationship between recovery time objectives (RTOs) and the Business Continuity Management System?

    Answer: RTOs determined through BIA are requirements that drive BCMS strategy and resource decisions, and the BCMS must demonstrate through exercise that RTOs are achievable

    In ISO 22301, RTOs are requirements derived from BIA that drive all downstream BCMS strategy and resource decisions—strategies must be designed to meet RTOs, and exercises must demonstrate that RTOs are achievable in practice.