Exam: ISO 22301:2019 Internal Auditor

Pytanie 1 of 32

Where can ISO 22301 be used?

In all organizations, regardless of the industry and legal personality

Poprawnie Niepoprawnie Correct answer

Tylko w organizacjach produkcyjnych

Poprawnie Niepoprawnie Correct answer

Only in limited liability companies

Poprawnie Niepoprawnie Correct answer

In all organizations except charities

Poprawnie Niepoprawnie Correct answer

Pytanie 2 of 32

What is business continuity management?

It is a process that takes place during a disaster

Poprawnie Niepoprawnie Correct answer

These are activities that are performed every day to prevent an emergency

Poprawnie Niepoprawnie Correct answer

It is a readiness to react immediately when an emergency occur

Poprawnie Niepoprawnie Correct answer

None of the above

Poprawnie Niepoprawnie Correct answer

Pytanie 3 of 32

Business Continuity Plan:

consists of procedures that do not need to be documented

Poprawnie Niepoprawnie Correct answer

consist of documented procedures that define how to respond in the event of an emergency

Poprawnie Niepoprawnie Correct answer

these are documented procedures that are implemented after an emergency occurs

Poprawnie Niepoprawnie Correct answer

these are documented procedures aimed at restoring processes to the agreed level after the occurrence of an emergency

Poprawnie Niepoprawnie Correct answer

Pytanie 4 of 32

Select the correct sentences.

A business continuity program is a process that should be supported by top management

Poprawnie Niepoprawnie Correct answer

An incident is a situation that always leads to a crisis

Poprawnie Niepoprawnie Correct answer

RTO – this is the time specified in the procedure, during which the failure must be absolutely removed

Poprawnie Niepoprawnie Correct answer

RPO – this is the acceptable level of data loss expressed over time

Poprawnie Niepoprawnie Correct answer

Pytanie 5 of 32

Complete the sentence: “In a business continuity system …”:

there is no obligation to define the context of the organization

Poprawnie Niepoprawnie Correct answer

the context of operation in relation to the environment in which the organization operates (both internal and external) should be defined

Poprawnie Niepoprawnie Correct answer

should take into account the requirements of interested parties when defining the objectives and scope of the BCMS

Poprawnie Niepoprawnie Correct answer

Organization may identify risks in relation to the environment in which it operates, but it is not an obligation

Poprawnie Niepoprawnie Correct answer

Pytanie 6 of 32

What are the responsibilities of top management?

Ensuring that the resources needed for the system are available

Poprawnie Niepoprawnie Correct answer

Ensuring that the business continuity system achieves the intended results

Poprawnie Niepoprawnie Correct answer

Supporting continuous improvement

Poprawnie Niepoprawnie Correct answer

None of the above

Poprawnie Niepoprawnie Correct answer

Pytanie 7 of 32

Business continuity management system policy:

must be documented, necessarily in paper form

Poprawnie Niepoprawnie Correct answer

must be consistent with the organisation's objectives

Poprawnie Niepoprawnie Correct answer

It would be good if it include a commitment to continual improvement

Poprawnie Niepoprawnie Correct answer

must be available inside the organization, but it is not advisable to leak it outside

Poprawnie Niepoprawnie Correct answer

Pytanie 8 of 32

Complete the sentence. When planning a business continuity management system:

it is not possible to determine the possibility of achieving the intended results

Poprawnie Niepoprawnie Correct answer

it is important to define activities aimed at maximizing risks and minimizing opportunities

Poprawnie Niepoprawnie Correct answer

we do not have to take into account the needs and expectations of interested parties

Poprawnie Niepoprawnie Correct answer

None of the above

Poprawnie Niepoprawnie Correct answer

Pytanie 9 of 32

Complete the sentence. Management review:

must be performed on a regular basis (at least once every 2 years)

Poprawnie Niepoprawnie Correct answer

must assess opportunities, improvements and the need for change, and records of the review must be kept for at least 1 year

Poprawnie Niepoprawnie Correct answer

is performed, inter alia, to discuss the audit results, opportunities for continual improvement and the audit results

Poprawnie Niepoprawnie Correct answer

may be performed, but there is no obligation to do it on a regular basis

Poprawnie Niepoprawnie Correct answer

Pytanie 10 of 32

Which of the following documents are required by ISO 22301?

Statement of Applicability

Poprawnie Niepoprawnie Correct answer

Incident response procedure

Poprawnie Niepoprawnie Correct answer

Preventive Action Procedure

Poprawnie Niepoprawnie Correct answer

Business continuity procedure

Poprawnie Niepoprawnie Correct answer

Pytanie 11 of 32

People working for the organization should be aware of:

the amount of penalties that will be imposed on them for actions not complying with the procedures

Poprawnie Niepoprawnie Correct answer

Business Continuity Policy

Poprawnie Niepoprawnie Correct answer

their contribution to the business continuity system

Poprawnie Niepoprawnie Correct answer

the benefits of using a business continuity system

Poprawnie Niepoprawnie Correct answer

Pytanie 12 of 32

Which sentences are true regarding the management of system documentation?

The latest versions of the documents must be available at the place of use

Poprawnie Niepoprawnie Correct answer

There is no need to re-approve documents when you update documents

Poprawnie Niepoprawnie Correct answer

Outdated documents must be kept for at least 6 months. During this time, they must be properly identified.

Poprawnie Niepoprawnie Correct answer

The document must be approved before issuing

Poprawnie Niepoprawnie Correct answer

Pytanie 13 of 32

Is there an obligation to assess business continuity risks?

Yes, we must establish a documented risk assessment process

Poprawnie Niepoprawnie Correct answer

Yes, we have to assess the risks. But we only need to document activities related to high-risk areas

Poprawnie Niepoprawnie Correct answer

Yes, we have to assess the risks. And if they indicate a real threat, we must implement appropriate preventive actions

Poprawnie Niepoprawnie Correct answer

There is no obligation, but it is wise to do so

Poprawnie Niepoprawnie Correct answer

Pytanie 14 of 32

What is one of the goals of Business Impact Analysis (BIA)?

Establish a business continuity strategy

Poprawnie Niepoprawnie Correct answer

Determining the minimum acceptable downtime

Poprawnie Niepoprawnie Correct answer

Risk identification

Poprawnie Niepoprawnie Correct answer

Defining priority processes for the organization

Poprawnie Niepoprawnie Correct answer

Pytanie 15 of 32

The organization shall establish, implement and maintain notification and communication procedures.
What procedure should be established for event and incident communication in a business continuity management system?

A procedure for interpreting, escalating, maintaining and improving

Poprawnie Niepoprawnie Correct answer

Procedure for organizing, prioritizing, approving and implementing

Poprawnie Niepoprawnie Correct answer

Detection, analysis, response and correction procedure

Poprawnie Niepoprawnie Correct answer

Procedure for detecting, monitoring, sharing and recording information

Poprawnie Niepoprawnie Correct answer

Pytanie 16 of 32

When can we conduct an internal audit?

Anytime, without notification

Poprawnie Niepoprawnie Correct answer

At least once a month in the entire company

Poprawnie Niepoprawnie Correct answer

At any time, after planning and sending notification

Poprawnie Niepoprawnie Correct answer

In accordance to the audit programme

Poprawnie Niepoprawnie Correct answer

Pytanie 17 of 32

What must be included in the audit report?

Nonconformities – if detected

Poprawnie Niepoprawnie Correct answer

Audit scope

Poprawnie Niepoprawnie Correct answer

The cause(s) of detected nonconformities

Poprawnie Niepoprawnie Correct answer

Criminal requests

Poprawnie Niepoprawnie Correct answer

Pytanie 18 of 32

When can corrective actions be taken?

Only after the audit

Poprawnie Niepoprawnie Correct answer

After each notification of noncompliance

Poprawnie Niepoprawnie Correct answer

After reporting by the customer or supplier a negative activity of the organization (e.g. through a complaint or remark to the way the organization operates)

Poprawnie Niepoprawnie Correct answer

Only after Insurance Institution control

Poprawnie Niepoprawnie Correct answer

Pytanie 19 of 32

What is audit?

It is an analysis of the occurrence of defects, their causes and people guilty of negligence

Poprawnie Niepoprawnie Correct answer

these are activities focused on targeting quality goals and defining the necessary operational processes and related resources to achieve quality goals.

Poprawnie Niepoprawnie Correct answer

It is a systematic, independent and documented process of obtaining audit evidence and its objective assessment in order to determine the degree of meeting the audit criteria

Poprawnie Niepoprawnie Correct answer

It is ensuring that the products delivered to the organization meet its needs

Poprawnie Niepoprawnie Correct answer

Pytanie 20 of 32

During the audit it is necessary to:

Check carefully all documents related to the QMS (quality management system)

Poprawnie Niepoprawnie Correct answer

Check 30% of documentation

Poprawnie Niepoprawnie Correct answer

Select a sample representing the activities

Poprawnie Niepoprawnie Correct answer

Check the knowledge of the requirements of the standard by employees

Poprawnie Niepoprawnie Correct answer

Pytanie 21 of 32

Who performs the first party audit?

It is performed by the organization for its own needs

Poprawnie Niepoprawnie Correct answer

It is performed by a certification body to determine whether the certification of the organisation's quality system can be maintained

Poprawnie Niepoprawnie Correct answer

It is performed by the company's customers

Poprawnie Niepoprawnie Correct answer

It is performed by the organization at its sub-suppliers

Poprawnie Niepoprawnie Correct answer

Pytanie 22 of 32

What are the advantages of conducting an internal audit?

It provides information about the company

Poprawnie Niepoprawnie Correct answer

It gives information to the management about operation of the system

Poprawnie Niepoprawnie Correct answer

It locates possible problems and nonconformist, creates an opportunity to improve the management system

Poprawnie Niepoprawnie Correct answer

It ensures obtaining a certificate

Poprawnie Niepoprawnie Correct answer

Pytanie 23 of 32

During the audit, the argument about the impossibility of carrying out some activities in the system that are required by the standard may be justified:

Yes, due to lack of time or money

Poprawnie Niepoprawnie Correct answer

Yes, due to the lack of people or equipment

Poprawnie Niepoprawnie Correct answer

Yes, due to lack of knowledge

Poprawnie Niepoprawnie Correct answer

Such an action cannot be justified

Poprawnie Niepoprawnie Correct answer

Pytanie 24 of 32

What is included in the ISO 19011 standard?

Quality management system requirements

Poprawnie Niepoprawnie Correct answer

Guidelines for auditing management systems

Poprawnie Niepoprawnie Correct answer

Quality management system terminology

Poprawnie Niepoprawnie Correct answer

Guidelines for managing audit programs

Poprawnie Niepoprawnie Correct answer

Pytanie 25 of 32

Mark the correct sentences for monitoring, measurement, analysis and evaluation.

Preventive action

Poprawnie Niepoprawnie Correct answer

Corrective action

Poprawnie Niepoprawnie Correct answer

Correction

Poprawnie Niepoprawnie Correct answer

None of the above

Poprawnie Niepoprawnie Correct answer

Pytanie 26 of 32

Internal audit is an audit of which party?

First

Poprawnie Niepoprawnie Correct answer

Second

Poprawnie Niepoprawnie Correct answer

Third

Poprawnie Niepoprawnie Correct answer

Second, if it is provided by the supplier

Poprawnie Niepoprawnie Correct answer

Pytanie 27 of 32

What do we have to do at the end of the audit?

Closing meeting

Poprawnie Niepoprawnie Correct answer

Summary of the audit results

Poprawnie Niepoprawnie Correct answer

Determining the method and date of delivery of the audit report

Poprawnie Niepoprawnie Correct answer

Drink a coffee

Poprawnie Niepoprawnie Correct answer

Pytanie 28 of 32

When can corrective actions be taken?

Only after the audit

Poprawnie Niepoprawnie Correct answer

After each notification of noncompliance

Poprawnie Niepoprawnie Correct answer

After reporting by the customer or supplier a negative activity of the organization (e.g. through a complaint or remark to the way the organization operates)

Poprawnie Niepoprawnie Correct answer

only after Insurance Institution control

Poprawnie Niepoprawnie Correct answer

Pytanie 29 of 32

Which of below mentioned activities are the stages of the audit?

Opening meeting

Poprawnie Niepoprawnie Correct answer

Closing meeting

Poprawnie Niepoprawnie Correct answer

Preparation of the internal audit procedure

Poprawnie Niepoprawnie Correct answer

Preparation of the internal audit procedure

Poprawnie Niepoprawnie Correct answer

Pytanie 30 of 32

What principles should internal audit be based on?

Reliability, an evidence-based approach

Poprawnie Niepoprawnie Correct answer

Fair reporting of results

Poprawnie Niepoprawnie Correct answer

Due professional care

Poprawnie Niepoprawnie Correct answer

Confidentiality, independence

Poprawnie Niepoprawnie Correct answer

Pytanie 31 of 32

The organization shall define, plan, implement and control the operational activities necessary to achieve its business continuity policy and objectives. What process is recommended to control these activities?

Application management

Poprawnie Niepoprawnie Correct answer

Project management

Poprawnie Niepoprawnie Correct answer

Incident management

Poprawnie Niepoprawnie Correct answer

Service level management

Poprawnie Niepoprawnie Correct answer

Pytanie 32 of 32

Regarding business continuity awareness and training, what document is mandatory to define competence and performance?

Training plan

Poprawnie Niepoprawnie Correct answer

Business continuity strategy

Poprawnie Niepoprawnie Correct answer

Awareness Raising Plan

Poprawnie Niepoprawnie Correct answer

Risk assessment

Poprawnie Niepoprawnie Correct answer

Exam: ISO 22301:2019 Internal Auditor

Egzamin Summary

Informacje

Wyniki

Wyniki

Kategorie

1. Pytania

2. Pytania

3. Pytania

4. Pytania

5. Pytania

6. Pytania

7. Pytania

8. Pytania

9. Pytania

10. Pytania

11. Pytania

12. Pytania

13. Pytania

14. Pytania

15. Pytania

16. Pytania

17. Pytania

18. Pytania

19. Pytania

20. Pytania

21. Pytania

22. Pytania

23. Pytania

24. Pytania

25. Pytania

26. Pytania

27. Pytania

28. Pytania

29. Pytania

30. Pytania

31. Pytania

32. Pytania