top of page
Contents
  • Overview
  • Who should attend
  • Learning objectives
  • Course agenda and content
  • Prerequisites
  • Training approach
  • Examination
  • Competence domains being tested
  • Certification
  • General course information

ISO 22301: Security and Resilience - Business Continuity Management Systems - Requirements)

Overview

 

This 5-day intensive course enables participants to gain the knowledge, develop the skills, competencies, and the necessary expertise to:

  • Apply widely recognized audit principles, procedures, tools and techniques

  • Proficiently plan and perform internal (1st party) audits, and external (2nd and 3rd party) audits of Business Continuity Management System (BCMS) in compliance with ISO 19011 (note 1) and ISO/IEC 17021-1: 2011 (note 2)

  • Manage a team of auditors

  • Manage an audit programme

  • Communicate with clients and other interested parties

  • Resolve conflicts.

Notes

  1. ISO 19011: 2011 Guidelines for auditing management systems

  2. ISO 17021: 2011 Conformity Assessment - Requirements for Bodies Providing Audit and Certification of Management Systems.

  Training Course details
  • 5 days (09.00 - 17.00 GMT)
  • Online instructor-led via zoom.us
  • £1190 + VAT per delegate
  • Deadline for payment/ registration: 2 calendar days before course start
  • Included: 5 days online instructor-led training, delegate workbook, online exam, and certificate.
Onsite training
 
Please refer to our Terms & Conditions:
  • Trainer's expenses for onsite training, paid by the client

  • Fixed onsite training expenses policy

This training course is compatible with the ISO 27031: 2011 Guidelines for Information and Communication Technology Readiness for Business Continuity.

 

Who should attend?

 

  • Internal auditors

  • Auditors aiming to perform and lead Business BCMS certification audits

  • Project managers or consultants who aim to master the BCMS audit process

  • Those responsible for the Business continuity conformity in an organization

  • Members of a business continuity team

  • Expert advisors in information technology

  • Technical experts who want to prepare for a Business continuity audit function.

 

Learning objectives

 

On completion of the course delegates will have acquired the expertise necessary to:

  • Perform an internal audit of a BCMS based on ISO 22301, following the guidelines of ISO 19011

  • Perform a certification audit of a BCMS based on ISO 22301, following the guidelines of ISO 19011 and the specifications of ISO 17021

  • Manage a BCMS audit team

  • Improve the ability to analyse the internal and external environment of an organization, risk assessment and audit decision-making in the context of a BCMS.

 

Also, delegates will understand:

  • The operation of the BCMS, in accordance with ISO 22301, and ISO 27031

  • The relationship between a BCMS, including risk management, controls, and compliance with the requirements of different stakeholders of the organization.

 

Course Agenda and Content

 

Day 1: Introduction to BCMS concepts as required by ISO 22301

  • Presentation of the ISO 22301, ISO 27031, and ISO/PAS 22399 standards, and regulatory framework

  • Fundamental principles of business continuity

  • Business Continuity Management System (BCMS)

  • Detailed presentation of the clauses 4 to 10 of ISO22301

  • ISO 22301 certification process.

 

Day 2: Planning and Initiating an ISO 22301 audit

 

  • Fundamental audit concepts and principles

  • Audit approach based on evidence and on risk

  • Preparation of an ISO 22301 certification audit

  • BCMS documentation audit

  • Conducting an opening meeting

 

Day 3: Conducting an ISO 22301 audit

 

  • Communication during the audit

  • Audit procedures: observation, document review, interview, sampling techniques, technical verification, corroboration and evaluation

  • Audit test plans

  • Formulation of audit findings

  • Documentation of non-conformities.

 

Day 4: Concluding and ensuring follow-up of an ISO 22301 audit

 

  • Audit documentation

  • Quality review

  • Conducting a closing meeting and conclusion of an ISO 22301 audit

  • Evaluation of corrective action plans

  • ISO 22301 surveillance audit

  • ISO 22301 internal audit management programme.

 

Day 5: Certification Exam

 

Prerequisites

The following are general prerequisites for attending our training courses:

  • Proficiency in the English language

  • Consideration for other course participants

  • Willingness to actively participate during the training sessions, and an open mind to learn new ways of working.

 

ISO 22301 Foundation Certification or basic knowledge of ISO 27031 and business continuity concepts is recommended.

 

Training Approach

 

The course covers both theory and practice:

  • Slide-based training sessions, supported by examples

  • Preparation for the Foundation exam

  • Practice test (mock exam) simulating the certification exam.

 

To benefit from the practical exercises, the number of training participants is limited.

 

Examination and Certification

 

Examination

Following are details of the ISO 22301 Lead Auditor exam:

  • Duration             90 min.

  • Format               Closed book               

  • Questions          60 multiple Choice

  • Pass mark         70% (42 correct answers).

 

Competence Domains Being Tested

 

The Lead Auditor exam covers the following domains:

 

  • Fundamental principles and concepts of business continuity

  • Business Continuity Management System (BCMS)

  • Fundamental audit concepts and principles

  • Preparation of an ISO 22301 audit

  • Conducting an ISO 22301 audit

  • Closing an ISO 22301 audit

  • Managing an ISO 22301 audit programme.
     

Certification

An ISO 22301 Lead Auditor certificate will be issued to delegates who successfully pass the

exam.

General Course Information

For general course information please click on the link here.

N.B. Please read our Terms & Conditions (T&Cs) and ask for clarifications, if any, before booking your training event.

Book now to reserve an on-site or online instructor-led training event of your choice.

For more details about our:

  • List of training courses please click here.

  • Consulting services please click here

  • Workshops please click here.

For queries, including non-obligation quotes, please contact us.

f4ccb2bb53fd46b3b122f5e5348d65ab-620x285
ISO 22301
Lead Auditor
bottom of page