Question 1 of 30
\"MediCorp Pharmaceuticals,\" a leading pharmaceutical manufacturer, is preparing for an ISO 22301:2019 surveillance audit of its Business Continuity Management System (BCMS). The audit team, led by principal auditor Isabella Rossi, is reviewing the organization\'s documented information, including the business continuity policy, risk assessments, business impact analyses (BIAs), and business continuity plans (BCPs). During the review, Isabella discovers that the business continuity policy, while comprehensive in its scope, has not been formally communicated to all employees across the organization. Furthermore, the risk assessments and BIAs, although detailed, have not been updated to reflect recent changes in the organization\'s supply chain and regulatory environment. Considering the requirements of ISO 22301:2019 and the importance of documented information in the BCMS, what is the MOST critical nonconformity that Isabella Rossi should highlight in the audit report?
Lack of formal communication of the business continuity policy to all employees and failure to update risk assessments and BIAs to reflect recent changes in the organization's environment.
Insufficient documentation of the incident response procedures and lack of clarity regarding roles and responsibilities during a business disruption.
Inadequate testing and simulation of the business continuity plans and failure to identify weaknesses and gaps in the existing plans.
Limited involvement of top management in the BCMS and lack of visible commitment to business continuity across the organization.

Preparing for ISO 27001:2022 Transition? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free