Return to course: MSP Course #6 – ISO 22301:2019 Business Continuity
International Management System Institute
MSP Course #6 - ISO 22301:2019 Business Continuity
Introduction ISO 22301
ISO 22301 - Introduction and Overview
ISO 22301 Clause 4: Context
Lesson 1, ISO 22301 - Clause 4: Context
Quiz #1 - ISO 22301 Clause 4 Context
ISO 22301 Clause 5: Leadership
Lesson 2, ISO 22301 - Clause 5: Leadership
Quiz #2 - ISO 22301 Clause 5 Leadership
ISO 22301 Clause 6: Planning
Lesson 3, ISO 22301 - Clause 6 Planning
Quiz #3 - ISO 22301 Clause 6 Planning
ISO 22301 Clause 7: Resources
Lesson 4, ISO 22301 - Clause 7 Resources
Quiz #4 - ISO 22301 - Clause 7 Resources
ISO 22301 Clause 8: Operations
Lesson 5a, ISO 22301 - Clause 8.1-8.2 Operations
Quiz #5a, ISO 22301 - Clause 8.1-8.2 Operations
Lesson 5b, ISO 22301 - Clause 8.3 Operations
Quiz #5b, ISO 22301 - Clause 8.3 Operations
Lesson 5c, ISO 22301 - Clause 8.4 Business Continuity Plans and Procedures
Quiz #5c, ISO 22301 - Clause 8.4 Business Continuity Plans and Procedures
Lesson 5d, ISO 22301 - Clause 8.5 Exercise programme -8.6 Evaluation of Business Continuity Documentation and Capabilities
Quiz #5d, ISO 22301 - Clause 8.5-8.6
ISO 22301 Clause 9: Performance Evaluation
Lesson 6, ISO 22301 - Clause 9 Performance Evaluation
Quiz #6, ISO 22301 - Clause 9 Performance Evaluation
ISO 22301 Clause 10: Improvement
Lesson 7, ISO 22301 - Clause 10 Improvement
Quiz #7, ISO 22301 - Clause 10 Improvement
Claim Your Certificate
BACK TO IMSIPRO.ORG
Quiz #6, ISO 22301 – Clause 9 Performance Evaluation
When it comes to monitoring, measurement, analysis and evaluation, your organization will decide:
what needs to be monitored and measured.
the methods for monitoring, measurement, analysis and evaluation to ensure valid results.
when and by whom the monitoring and measuring shall be performed.
how to present the results of performance measurement in a way that makes management look like they’re doing a great job.
what documented information to keep as evidence of the evaluation results.
To have an effective Internal Audit program, your organization will…
take into consideration the importance of the processes concerned and the results of previous audits.
hire an outside auditing firm to ensure objectivity of the auditors.
ensure that the results of the audits are reported to relevant managers.
retain documented information (also known as ‘records’) as evidence of the audits and the audit results.
ensure that follow-up audit actions include the verification of the actions taken and the reporting of verification results.
Management review inputs need to include:
information from the business impact analysis and risk assessment.
output from the evaluation of business continuity documentation and capabilities.
risks or issues not adequately addressed in any previous risk assessment.
ideas to reduce the expenses related to ‘continuity’ so management will get a bigger bonus.
lessons learned and actions arising from near – misses and disruptions.
Your management review report needs to show that management reviewed:
the status of actions from previous management review.
changes in your organization’s ratings in social media.
trends in nonconformities and corrective actions.
feedback from interested parties.
the need for changes to the BCMS, including the policy and objectives.
Outputs of the management review will include any need for changes to the BCMS to improve its efficiency and effectiveness, including:
variations to the scope of the BCMS.
update of the business impact analysis, risk assessment, business continuity strategies and solutions, and business continuity plans.
modification of procedures and controls to respond to internal or external issues that may impact the BCMS.
how the effectiveness of controls will be measured.
none of the above – there are no outputs required from the Management Review meeting.