ISO-22301-Lead-Auditor Exam Dumps : PECB Certified ISO 22301 Lead Auditor Exam

Reviewing is the stage that helps management to define where focus and resources should be invested. According to ISO 22301, reviewing is the process of evaluating the performance and effectiveness of the business continuity management system (BCMS) and identifying opportunities for improvement. Reviewing can be done through internal audits, management reviews, performance evaluations, and corrective actions. Reviewing can help management to ensure that the BCMS is aligned with the organization’s strategic objectives, meets the needs and expectations of interested parties, complies with the applicable requirements, andcontinually improves its resilience and capability to respond to disruptive incidents. References: ISO 22301 Auditing eBook, page 171; ISO 22301:2019, clause 92

 Corporate Services and Information Technology are the functions that provide a range of physical and technological infrastructure services to all other functions, such as human resources, finance, legal, procurement, facilities, security, IT systems, networks, applications, databases, etc. These functions are essential for the continuity of the organization’s operations, as they support the delivery of products and services to customers and stakeholders. Therefore, they need to be included in the scope and objectives of the business continuity management system (BCMS), and their roles and responsibilities need to be defined and communicated. References: ISO 22301 Auditing eBook, Chapter 2: Business Continuity Management System (BCMS), Section 2.1: Scope and Objectives, page 23.

The Do phase in the PDCA cycle consists of operation, which means implementing and operating the business continuity policy, controls, processes, and procedures that have been planned in the previous phase. The Do phase also involves establishing the necessary resources, competencies, awareness, communication, and documentation to support the effective operation of the business continuity management system (BCMS). The Do phase aims to ensure that the organization is prepared to respond to and recover from disruptive incidents in a timely and effective manner. References: ISO 22301 Auditing eBook, pages 9, 10, 11, 22, 23, and 24.