Scenario:Teleconn, a UK-based telecommunications provider, initiated a BCMS based on ISO 22301 to ensure reliable...

ISO 22301 Clause 9.2.2:

ISO 22301 allows the internal audit function to be outsourced, provided it remains effective, independent, and impartial​​.

Independence and Access Requirements:

Outsourcing can ensure independence if the auditor has unrestricted access to the necessary resources, employees, and documented information​.

Other Options:

Option A:Internal audits do notalwaysneed to be outsourced.

Option C:Prohibiting outsourcing contradicts ISO 22301’s flexibility in audit functions.

Conclusion:

Outsourcing internal audits is permissible under ISO 22301.

ISO 22301 Clause 9.2.2:

ISO 22301 allows the internal audit function to be outsourced, provided it remains effective, independent, and impartial​​.

Independence and Access Requirements:

Outsourcing can ensure independence if the auditor has unrestricted access to the necessary resources, employees, and documented information​.

Other Options:

Option A:Internal audits do notalwaysneed to be outsourced.

Option C:Prohibiting outsourcing contradicts ISO 22301’s flexibility in audit functions.

Conclusion:

Outsourcing internal audits is permissible under ISO 22301.