Which three (3) levels are Management activities of Incident Management Structure (IMS) ? (Choose three)
The Incident Management Structure (IMS) is a framework for organizing and managing the response to a disruptive incident. The IMS defines three levels of management activities: strategic, tactical, and operational. The strategic level is responsible for setting the overall direction and objectives of the response, as well as allocating resources and coordinating with external stakeholders. The tactical level is responsible for implementing the strategic decisions and managing the operational teams. The tactical level also monitors the situation and reports to the strategic level. The operational level is responsible for executing the specific tasks and actions required to achieve the objectives of the response. The operational level also provides feedback to the tactical level on the progress and issues encountered.Reference:
The organization should establish a formal evaluation process for determining continuity and recovery priorities and objectives.
What is one of the purposes of the Business Impact Analysis (BIA)?
One of the purposes of the business impact analysis (BIA) is to determine the minimal acceptable outage (MAO) for each critical function or process of the organization. The MAO is the maximum amount of time that a function or process can be disrupted before it causes unacceptable consequences for the organization. The MAO is used to define the recovery time objective (RTO) and the recovery point objective (RPO) for each function or process. The RTO is the time within which a function or process must be restored after a disruption, and the RPO is the point in time to which the data and information must be recovered. The BIA helps the organization to prioritize its recovery efforts and allocate the necessary resources for business continuity.Reference: ISO 22301 Auditing eBook, page 38; ISO 22301:2019 standard, clause 8.2.2
The actions of the media and press have a profound impact on the long-term performance, or in some cases.
The media and press have a profound impact on the long-term performance, or in some cases, the survival of an organization, especially in the aftermath of a disruptive incident. The media and press can influence the perception and reputation of the organization, as well as the expectations and satisfaction of its stakeholders, such as customers, suppliers, regulators, employees, and the general public. Therefore, it is important for the organization to establish and maintain a positive relationship with the media and press, and to communicate effectively and transparently during and after a crisis. ISO 22301:2019, Clause 8.4.3, requires the organization to establish, implement, and maintain a documented procedure to manage communications with relevant interested parties during a disruptive incident. The procedure should include the identification of the spokesperson(s) who will communicate with the media and press, the preparation of key messages and statements, the approval and distribution of information, and the monitoring and evaluation of the effectiveness of the communications. The organization should also consider the potential legal and ethical implications of its communications, and ensure that the information provided is accurate, consistent, and timely.Reference: ISO 22301:2019, Clause 8.4.3; ISO 22301 Auditing eBook, Chapter 4.3.3.
Edwin
4 days agoBoris
1 months agoSilva
2 months agoChanel
3 months agoNydia
3 months agoRuthann
4 months agoErasmo
4 months agoYen
5 months agoNieves
5 months agoIluminada
5 months agoSharita
6 months agoLakeesha
6 months agoPaulene
6 months agoCordelia
7 months agoJavier
7 months agoMicaela
7 months agoOliva
7 months agoCyril
8 months agoWillis
8 months agoCherry
8 months agoPenney
8 months agoGeraldo
9 months agoJacinta
10 months agoKristofer
10 months agoDaniel
10 months agoLouisa
10 months agoYasuko
11 months agoStephen
11 months agoMonroe
1 years ago