The exercise program and after action reports are required documents under ISO22301.

Question

Quizplus · Accepted Answer

ISO 22301, which specifies requirements for setting up and managing an effective Business Continuity Management System (BCMS), requires organizations to conduct exercises and tests to evaluate the effectiveness of their business continuity procedures and to maintain records of these activities and their outcomes, which includes exercise programs and after action reports.

The Exercise Program and After Action Reports Are Required Documents