Most government policies have direct influences on how organizations shape their business strategies and plans.

The statement is True. Government policies, including legal, statutory, and regulatory requirements, directly dictate the boundaries within which an organization must operate. Under ISO 22301 Clause 4.1 (Understanding the organization and its context) and Clause 4.2.2 (Legal and regulatory requirements), organizations are mandated to identify and integrate these external factors into their Business Continuity Management System (BCMS). Government policies shape business strategies by imposing compliance mandates, operational restrictions, and reporting obligations that must be accounted for in strategic planning and continuity objectives.

B. False: This is incorrect because failing to align business strategies with government policies leads to regulatory non-compliance, legal penalties, and strategic failure. Government policies are primary drivers of organizational strategy.

1. International Organization for Standardization. (2019). ISO 22301:2019 Security and resilience — Business continuity management systems — Requirements. Clause 4.1 (Understanding the organization and its context) and Clause 4.2.2 (Legal and regulatory requirements).

2. PECB. (2022). ISO 22301 Lead Auditor Training Course. Module 3: Planning a BCMS (Legal and Regulatory Frameworks).