Course overview

ISO 22301 sets out how to plan for, respond to and recover from disruptive incidents so that critical activities continue. This course teaches you to audit a business continuity management system and test whether it would really work in a crisis.

You will review a business impact analysis, risk assessment and continuity plans for a case-study organisation and evaluate exercise and testing evidence.

Key takeaways

01Interpret ISO 22301:2019 and related guidance such as ISO 22313

02Audit business impact analysis, risk assessment and continuity strategies

03Evaluate business continuity plans, exercises and testing

04Plan and lead first-, second- and third-party audits using ISO 19011

05Report findings that drive real corrective action

Accreditation

BEMCON management-system courses are built on the current ISO standards and assessed against recognised auditor competence criteria.

Learners who pass the examination and continuous assessment receive a ISO 22301 Lead Auditor certificate. It supports registration as an auditor of business continuity management systems with recognised certification and personnel bodies.

Course outline

Day 1

Business continuity and ISO 22301

Business continuity concepts and terminology
Context, scope and leadership
Business impact analysis and risk assessment

Day 2

Continuity strategies and plans

Continuity strategies and solutions
Incident response and business continuity plans
Exercising, testing and evaluation

Day 3

Audit principles and planning

ISO 19011 audit principles
Certification audits under ISO/IEC 17021-1
Audit programme, scope and plan

Day 4

Conducting the audit

Opening meeting and process-based interviews
Sampling and gathering objective evidence
Writing clear nonconformity statements

Day 5

Reporting and follow-up

Audit conclusions and closing meeting
Report writing and certification recommendation
Corrective-action follow-up and surveillance
Examination