Explanation
According to the ISO 22301 Auditing eBook, there are five types of strategies involved in the process-centric approach to business continuity management. They are:
Business continuity strategy: This is the overall approach that provides a framework for ensuring the continuity of an organization's critical functions in the event of a disruption. It defines the objectives, scope, principles, and policies of the business continuity management system (BCMS).
Recovery strategy: This is the specific approach that defines how an organization will restore its critical functions within a predefined time frame after a disruption. It identifies the resources, actions, and procedures required to recover the critical functions and resume normal operations.
Continuity strategy: This is the specific approach that defines how an organization will maintain its critical functions during a disruption. It identifies the alternative arrangements, methods, and modes of operation that will enable the organization to continue delivering its products or services at an acceptable level of performance.
Mitigation strategy: This is the specific approach that defines how an organization will reduce the likelihood and/or impact of a disruption. It identifies the preventive and protective measures that will minimize the exposure and vulnerability of the organization to potential threats and risks.
Response strategy: This is the specific approach that defines how an organization will react to a disruption. It identifies the roles, responsibilities, and authorities of the incident management team, the communication channels and protocols, and the escalation and notification procedures.
References: ISO 22301 Auditing eBook, pages 40-42

Explanation
Non-compliance can often lead to undesirable outcomes. Non-compliance means the failure or refusal to comply with the requirements and expectations of a standard, regulation, contract, policy, or other obligation.
Non-compliance can have negative consequences for an organization, such as:
Legal penalties: Non-compliance can result in fines, sanctions, lawsuits, or criminal charges from the authorities or other parties that have the power to enforce the compliance. For example, non-compliance with data protection laws can lead to hefty fines and reputational damage for the organization.
Loss of trust: Non-compliance can erode the confidence and trust of the stakeholders, such as customers, suppliers, employees, investors, regulators, etc. This can affect the organization's reputation, credibility, and competitiveness in the market. For example, non-compliance with quality standards can lead to customer dissatisfaction and defection.
Loss of business: Non-compliance can cause the organization to lose business opportunities, contracts, or partnerships with other organizations that require or expect compliance. For example, non-compliance with environmental standards can prevent the organization from entering certain markets or sectors that have strict sustainability criteria.
Loss of continuity: Non-compliance can expose the organization to increased risks and vulnerabilities that can disrupt its operations and performance. For example, non-compliance with business continuity standards can impair the organization's ability to respond to and recover from disruptive incidents, such as natural disasters, cyberattacks, supply chain failures, etc.
Therefore, non-compliance can often lead to undesirable outcomes that can harm the organization's interests, objectives, and values. To avoid these outcomes, the organization should establish, implement, and maintain a compliance management system that ensures the organization's adherence to the relevant standards, regulations, contracts, policies, and other obligations. The compliance management system should also include mechanisms for monitoring, measuring, reviewing, and improving the organization's compliance performance and effectiveness. References:
ISO 19600:2014 - Compliance management systems - Guidelines1
ISO 22301 Auditing eBook, Chapter 5: Audit Process, Section 5.2: Audit Objectives2 ISO 22301:2019 - Security and resilience - Business continuity management systems - Requirements, Clause 9.1: Monitoring, measurement, analysis and evaluation3