Sessions
Date, delivery mode, trainer and fee are specific to each session. Fees are per person.
Request a quote for a date for your organisation or for the next run.
Application formNo membership required
Get a quote
Training content
Overview
ISO 22301:2019 Business Continuity Management Systems Lead Auditor Training aims to develop lead auditors who can assess organisations’ business continuity management systems against international standard requirements, plan and conduct audits, and manage audit teams.
The training covers the requirements of the ISO 22301:2019 standard, business continuity risk management, business impact analysis, business continuity strategies and plans, crisis and incident response, audit principles, and audit planning, implementation, reporting and follow-up activities.
The programme combines theoretical instruction with case study analyses and practical audit exercises.
Objectives and Outcomes
Aim of the Training
The aim is to equip participants with the knowledge and skills required to interpret the requirements of ISO 22301:2019, assess business continuity management systems, examine business continuity risks and control mechanisms, conduct risk-based audits and carry out lead auditor activities.
Learning Outcomes
Participants who complete the training are expected to acquire the following knowledge and skills:
- Interpret the requirements of ISO 22301:2019
- Assess business continuity management system processes
- Audit business impact analysis (BIA) and risk assessment processes
- Assess business continuity strategies and plans
- Examine crisis and incident response processes
- Assess business continuity exercises and test results
- Apply auditing principles within the scope of ISO 19011
- Prepare an audit programme and audit plan
- Manage an audit team
- Evaluate objective audit evidence
- Identify and report nonconformities
- Evaluate the effectiveness of corrective actions
- Prepare audit reports
Programme and Method
Day 1 – Introduction to the Business Continuity Management System
- Purpose, scope and structure of the ISO 22301:2019 standard
- Fundamental principles of the business continuity management system
- Concepts of business continuity, crisis management and organisational resilience
- Context of the organisation, leadership and business continuity policy
- Identification and assessment of risks and opportunities
Day 2 – ISO 22301 Requirements and Business Continuity Planning
- Review of ISO 22301:2019 Clauses 4–10 requirements
- Business impact analysis (BIA) and risk assessment
- Business continuity strategies and solutions
- Business continuity plans and response procedures
- Exercise, testing and performance evaluation processes
Day 3 – Audit Principles and Audit Planning
- Audit principles within the scope of ISO 19011
- Types of audit and management of the audit programme
- Duties and responsibilities of the lead auditor
- Determination of the audit scope, criteria and objectives
- Preparation of the audit plan and checklists
Day 4 – Conducting the Audit
- Opening meeting and audit interviews
- Audit techniques and sampling methods
- Collection and evaluation of objective audit evidence
- Auditing business continuity plans, risk analyses and exercise records
- Identification and evaluation of audit findings
Day 5 – Audit Reporting and Lead Auditor Practices
- Identification and classification of nonconformities
- Preparation of the audit report
- Conducting the closing meeting
- Evaluation of corrective actions and follow-up audits
- Lead auditor practices and case studies
- General assessment and final examination
Attendance and Certificate
Certification Rule
A certificate of attendance is issued to all participants whose attendance has been confirmed. To receive a certificate of achievement, participants must achieve a passing grade in the examination at the end of the course; participants who use all their examination attempts but do not pass will be issued a certificate of attendance.
FAQ and Resources
1. Who is the ISO 22301 Lead Auditor Training suitable for?
It is suitable for management system auditors, internal auditors, risk management specialists, business continuity officers and professionals seeking to become lead auditors.
2. What is the purpose of the ISO 22301 standard?
It is to establish a management system that enables organisations to prepare for disruptions, maintain their critical activities and resume operations within acceptable time frames following a disruption.
3. What is a Business Impact Analysis (BIA)?
Business Impact Analysis is a method used to assess the effects over time of potential disruptions to an organisation’s activities and to identify priority activities and business continuity requirements.
4. What is the difference between the 5-day and 3-day training courses?
The 5-day training course covers the standard requirements and audit processes comprehensively, while the 3-day training course is an intensive programme for participants who already have auditing knowledge.
5. Does the training include practical exercises?
Yes. Exercises are carried out on audit planning, the evaluation of business continuity scenarios, writing nonconformities and reporting.
6. Can the training be delivered online or face to face?
Yes. The training can be scheduled online or face to face according to the requirements of the organisation and participants.
7. Is there an examination and certificate at the end of the training?
Yes. A final examination or assessment may be conducted at the end of the training. A certificate is issued according to participation and successful completion.
Resources
- ISO 22301:2019 – Security and Resilience – Business Continuity Management Systems – Requirements
- ISO 22301:2019/Amd 1:2024 – Climate Action Changes
- ISO 22313:2020 – Guidance on the Use of ISO 22301
- ISO 19011:2026 – Guidelines for Auditing Management Systems
- ISO/IEC 17021-1:2015 – Requirements for Bodies Providing Audit and Certification of Management Systems
- ISO/IEC TS 17021-6:2014 – Competence Requirements for Auditing and Certification of Business Continuity Management Systems