Sessions
Date, delivery mode, trainer and fee are specific to each session. Fees are per person.
Request a quote for a date for your organisation or for the next run.
Application formNo membership required
Get a quote
Training content
Overview
ISO 22301:2019 Business Continuity Management Systems Lead Auditor Training aims to train lead auditors who can assess organisations’ business continuity management systems against international standard requirements, plan and conduct audits, and manage audit teams.
The training covers the requirements of the ISO 22301:2019 standard, business continuity risk management, business impact analysis, business continuity strategies and plans, crisis and incident response, audit principles, audit planning, implementation, reporting and follow-up activities.
The programme is supported by case studies and practical audit exercises in addition to theoretical instruction.
Objectives and Outcomes
Aim of the Training
The aim is to provide participants with the knowledge and skills required to interpret the requirements of ISO 22301:2019, assess business continuity management systems, examine business continuity risks and control mechanisms, conduct risk-based audits and carry out lead auditor activities.
Learning Outcomes
Participants who complete the training are expected to acquire the following knowledge and skills:
- Interpret the requirements of ISO 22301:2019
- Assess business continuity management system processes
- Audit business impact analysis (BIA) and risk assessment processes
- Assess business continuity strategies and plans
- Examine crisis and incident response processes
- Assess business continuity exercises and test results
- Apply auditing principles within the scope of ISO 19011
- Prepare an audit programme and audit plan
- Manage an audit team
- Evaluate objective audit evidence
- Identify and report nonconformities
- Evaluate the effectiveness of corrective actions
- Prepare audit reports
Programme and Method
Day 1 – ISO 22301 Requirements and Business Continuity Management
- Purpose, scope and structure of the ISO 22301:2019 standard
- Requirements of ISO 22301 Clauses 4–10
- Business continuity policy, objectives and management system processes
- Business impact analysis (BIA) and risk assessment
- Business continuity strategies, plans and response processes
- Business continuity exercises and performance evaluation
Day 2 – Audit Principles and Conducting the Audit
- Audit principles within the scope of ISO 19011
- Duties and responsibilities of the lead auditor
- Preparation of the audit programme and audit plan
- Audit techniques and evaluation of objective evidence
- Auditing business continuity processes
- Formulation of audit findings and practical audit exercises
Day 3 – Audit Reporting and Lead Auditor Practices
- Identification and classification of nonconformities
- Preparation of the audit report
- Closing meeting and evaluation of audit results
- Corrective actions and follow-up audits
- Management of the audit team
- Case studies and final examination
Attendance and Certificate
Certificate Rule
A certificate of attendance is issued to all participants whose attendance has been confirmed. To receive a certificate of achievement, participants must achieve a passing grade in the examination at the end of the training; participants who use all their examination attempts but do not pass will be issued a certificate of attendance.
FAQ and Resources
1. Who is the ISO 22301 Lead Auditor Training suitable for?
It is suitable for management system auditors, internal auditors, risk management specialists, business continuity officers and professionals wishing to become lead auditors.
2. What is the purpose of the ISO 22301 standard?
It is to establish a management system that enables organisations to prepare for disruptions, maintain their critical activities and resume operations within acceptable time frames following a disruption.
3. What is a Business Impact Analysis (BIA)?
Business Impact Analysis is a method used to assess the effects over time of disruptions that may occur in an organisation’s activities and to identify priority activities and business continuity requirements.
4. What is the difference between the 5-day and 3-day training courses?
While the 5-day training comprehensively covers the standard requirements and audit processes, the 3-day training is an intensive programme for participants who already have auditing knowledge.
5. Does the training include practical exercises?
Yes. Exercises are conducted on audit planning, the assessment of business continuity scenarios, writing nonconformities and reporting.
6. Can the training be delivered online or face-to-face?
Yes. The training can be arranged online or face-to-face according to the requirements of the organisation and participants.
7. Is there an examination and certificate at the end of the training?
Yes. A final examination or assessment may be conducted at the end of the training. A certificate is issued based on participation and successful completion.
Resources
- ISO 22301:2019 – Security and Resilience – Business Continuity Management Systems – Requirements
- ISO 22301:2019/Amd 1:2024 – Climate Action Changes
- ISO 22313:2020 – Guidance on the Use of ISO 22301
- ISO 19011:2026 – Guidelines for Auditing Management Systems
- ISO/IEC 17021-1:2015 – Requirements for Bodies Providing Audit and Certification of Management Systems
- ISO/IEC TS 17021-6:2014 – Competence Requirements for Auditing and Certification of Business Continuity Management Systems