ISO 22301 Lead Auditor Continuity Practice Questions

A company has a business continuity plan but has never tested it. What should an auditor recommend?

• AA. Conduct a risk assessment before testing the plan.
• BB. Test the plan immediately without preparation.
• CC. Implement a training program before testing.
• DD. Review the plan documentation only.

During an audit, a manager states they don't believe in the benefits of business continuity management. What should the auditor do?

• AA. Agree and move on.
• BB. Present case studies of other organizations.
• CC. Dismiss their opinion.
• DD. Recommend immediate training sessions.

What is the first step in conducting a business continuity risk assessment?

• AA. Identify stakeholders
• BB. Develop recovery strategies
• CC. Gather existing documentation
• DD. Establish the context and scope