Free PECB ISO-22301-Lead-Auditor Exam Actual Questions

The questions for ISO-22301-Lead-Auditor were last updated On Nov 20, 2024

Question No. 1

The PDCA paradigm cycle is widely recognized as a process-centric approact?

Show Answer Hide Answer
Correct Answer: A

The PDCA paradigm cycle is widely recognized as a process-centric approach. The PDCA cycle, also known as the Deming cycle or the Shewhart cycle, is a four-step model for carrying out change and improvement in a systematic and consistent way. The PDCA cycle consists of the following phases: Plan, Do, Check, and Act. The Plan phase involves identifying the problem, setting the objectives, and developing the plan for improvement. The Do phase involves implementing the plan and carrying out the actions. The Check phase involves monitoring and measuring the results and comparing them with the objectives. The Act phase involves taking corrective actions, standardizing the improvement, and reviewing the process. The PDCA cycle is a process-centric approach because it focuses on the processes and their interactions that deliver the desired outcomes and performance. The PDCA cycle helps to ensure that the processes are planned, executed, evaluated, and improved in a continuous and consistent manner. The PDCA cycle is also aligned with the process approach principle of ISO 22301, the international standard for business continuity management systems. ISO 22301 requires the organization to apply the PDCA cycle to its business continuity management system, as well as to its individual processes and activities. The PDCA cycle helps the organization to establish, implement, operate, monitor, review, maintain, and continually improve its business continuity management system and its ability to respond to and recover from disruptive incidents.Reference:

ISO 22301 Auditing eBook, Chapter 1: Introduction to Business Continuity Management Systems, Section 1.3: PDCA Cycle1

ISO 22301:2019 - Security and resilience --- Business continuity management systems --- Requirements, Clause 0.3: The Plan-Do-Check-Act cycle2

What is the Plan-Do-Check-Act (PDCA) Cycle?3


Question No. 2

Which step in PDCA Cycle Formulate and implement a management plan with actions?

Show Answer Hide Answer
Correct Answer: B

The step in the PDCA cycle that formulates and implements a management plan with actions is the Do step. The Do step is the second phase of the PDCA cycle, following the Plan step. In the Do step, the organization executes the plan that was developed in the Plan step, based on the objectives, policies, and procedures of the business continuity management system (BCMS). The Do step involves implementing the new or improved processes, controls, activities, and measures that are designed to achieve the desired outcomes and performance of the BCMS. The Do step also involves documenting the results and outcomes of the implementation, as well as any problems or deviations that occurred. The Do step provides the basis for the Check step, where the organization monitors and evaluates the effectiveness and efficiency of the implemented plan.Reference:

ISO 22301 Auditing eBook, Chapter 1: Introduction to Business Continuity Management Systems, Section 1.3: PDCA Cycle1

ISO 22301:2019 - Security and resilience --- Business continuity management systems --- Requirements, Clause 8: Operation2


Question No. 3

The Act phase of PDCA cycle consists of improvement?

Show Answer Hide Answer
Correct Answer: A

The Act phase of the PDCA cycle consists of improvement. The Act phase is the fourth and final phase of the PDCA cycle, following the Check phase. In the Act phase, the organization takes action based on what it learned from the Check phase, where it monitored and evaluated the results of the Do phase, where it implemented the plan developed in the Plan phase.The action can be one of the following options1:

If the change was successful, the organization can standardize and stabilize the change, and communicate and document the results and the lessons learned. The organization can also identify opportunities for further improvement and start a new PDCA cycle with a different plan.

If the change was not successful, the organization can identify the root causes of the failure and revise the plan accordingly. The organization can also start a new PDCA cycle with the revised plan or a different plan. The Act phase is the phase where the organization improves its processes and performance by incorporating the learning from the previous phases. The Act phase also helps the organization to sustain the improvement and prevent the recurrence of problems.The Act phase is aligned with the clause 10 of ISO 22301, the international standard for business continuity management systems, which requires the organization to improve its business continuity management system by taking corrective actions, addressing nonconformities, and enhancing customer satisfaction2.Reference:

ISO 22301 Auditing eBook, Chapter 1: Introduction to Business Continuity Management Systems, Section 1.3: PDCA Cycle1

ISO 22301:2019 - Security and resilience --- Business continuity management systems --- Requirements, Clause 10: Improvement2


Question No. 4

Which of the following is an objective approach that assesses the organisational activities?

Show Answer Hide Answer
Correct Answer: B

Business Impact Analysis (BIA) is an objective approach that assesses the organisational activities and determines their criticality, dependencies, and recovery priorities. BIA is a key process in developing a business continuity management system (BCMS) according to ISO 22301. BIA helps to identify the potential impacts of disruptions to the organisation's critical functions and processes, such as financial losses, reputational damage, legal liabilities, regulatory penalties, customer dissatisfaction, etc. BIA also helps to determine the recovery time objectives (RTOs), recovery point objectives (RPOs), and minimum business continuity objectives (MBCOs) for each critical function and process. BIA provides the basis for developing business continuity strategies and plans that ensure the continuity and resilience of the organisation.Reference:

ISO 22301 Auditing eBook, Chapter 2: Business Continuity Concepts and Principles, Section 2.3: Business Impact Analysis1

ISO/TS 22317:2021(en), Security and resilience --- Business continuity management systems --- Guidelines for business impact analysis2