ISO 22301 Lead Auditor - Puerto Rico

ISO 22301 Lead Auditor Course Outline

Module 1: Introduction to Business Continuity Management Systems

• What is a BCMS?
• Scope of a BCMS
• Management Systems
• BCM System Process
• Business Continuity Management (BCM)
• BCMS Benefits
• Business Continuity Management Lifecycle
• Applicability and Objectives

Module 2: Fundamental Principles and Concepts of Business Continuity

• Fundamental Principles
  • Build a Comprehensive Plan
  • Implement Each Step of the Action Plan
  • Check and Evaluate Results
  • Review and Make Improvements
• Business Continuity

Module 3: Clauses 4 to 8 of ISO 22301

• Introduction
• Clauses of ISO 22301
  • Clause 4 – Context of the Organisation
  • Clause 5 – Leadership
  • Clause 6 – Planning
  • Clause 7 – Support
  • Clause 8 – Operations

Module 4: Overview of ISO 22301 Standard

• Introduction to ISO 22301
• 22301 Standard Progression
• 22301 High-level Methodology
• Implementation Cycle Times

Module 5: BCM Mandatory Documents

• Clause 4.2.2
• Clause 4.3
• Clause 5.3
• Clause 6.2
• Clause 7.2
• Clause 7.4
• Clause 8.2.1
• Clause 8.2.2
• Clause 8.2.3
• Clause 8.4.1
• Clause 8.4.2
• Clause 8.4.3
• Clause 8.4.4
• Clause 8.4.5
• Clause 9.1.1
• Clause 9.3
• Clause 10.1

Module 6: Leadership

• Leadership and Commitment
• Establishing the Business Continuity Policy
• Communicating the Business Continuity Policy

Module 7: Management Roles and Responsibilities

• Overview
• Impediments to Success
• Aids to Success

Module 8: Implementation Phases of the ISO 22301 Framework

• Management Support
• Identification of Requirements
• Business Continuity Policy and Objectives
• Support Documents for Management System
• Risk Assessment and Treatment
• Business Impact Analysis
• Business Continuity Strategy
• Business Continuity Plan
• Training and Awareness
• Documentation Maintenance
• Exercising and Testing
• Post-Incident Reviews
• Communication with Interested Parties
• Measurement and Evaluation
• Internal Audit
• Corrective Actions
• Management Review

Module 9: Continual Improvement of a BCMS

• Continual Improvement
• BCMS Control System
• Areas of Continual Improvement

Module 10: Audit and Auditing Principles

• Introduction to Audit
• Fundamental Principles of Auditing
• Scope of Auditing
• PDCA Cycle

Module 11: Auditing Roles

• What are the Roles?
• Organisational Context
• Management Responsibilities
• Planning, Support, and Operation
• Performance Evaluation
• Improvement

Module 12: Roles and Responsibilities of the Auditor

• Internal Auditing
• Roles and Responsibilities
• Typical Internal Audit

Module 13: Skills of an Internal Auditor

• Internal Auditing Goals
• Qualities of an Auditor
• Auditing Skills

Module 14: Purpose of Internal Auditing

• 22301 Mission
• Key Benefits of BCMS

Module 15: Audit Procedures

• BCMS Audit Process
• Elements of an Internal Audit
• Internal Audit Process
• Required Documentation
• Supporting Procedural Documentation
• Required Records and Documentation

Module 16: Audit Triangle

• Fraud Triangle
• Tackling the Fraud Triangle

Module 17: Auditing Techniques

• Classifying Audit Findings
• On-Site Auditing
• Remote Auditing Methods

Module 18: Work Document Approach

• Steps to Certification
• Certification Audits

Module 19: Business Continuity Control Best Practice

• Overview
• BCM Policy
• Management Commitment
• Plan How to Deal with an Emergency
• Impediments to Success
• Disaster Recovery

Module 20: Planning a Business Continuity Management System (BCMS)

• Planning a BCMS

Module 21: Implementation of Business Continuity and Writing Procedures

• Communication
• Writing a Scenario
• Delivering the Scenario

Module 22: Business Impact Analysis (BIA) and Risk Assessment

• Business Impact Analysis
• Risk Assessment
• Risk Assessment Methodologies and Implementation
• Risk Treatment Implementation

Module 23: Incident Management and Emergency Management

• Overview
  • Incident Management
  • Emergency Management
• Key Elements of Crisis Management Respond Process

Module 24: Operations Management of a BCMS

• Introduction to Operations Management of a BCMS

Module 25: Business Continuity Strategies and Solutions

• General
• Identification of Strategies and Solutions
• Selection of Strategies and Solutions
• Resource Requirements
• Implementation of Solutions

Module 26: Business Continuity Plans and Procedures

• General
• Response Structure
• Warning and Communication
• Business Continuity Plans
• Recovery
• Evaluation of Business Continuity Documentation and Capabilities

Module 27: Performance Evaluation, Monitoring, and Measurement of a BCMS

• Performance Evaluation, Monitoring, and Measurement of a BCMS
• Key Performance Indicators (KPI)
• Identifying Indicators of an Organisation
• Critical Success Factors (CSFs)
• Writing an Effective Critical Success Factor
• CSFs for Strategic Planning
• Performance Evaluation
• Case Study: Telefonica
• Cutting Complexity
• Taking Actions

Module 28: Development of Metrics, Performance Indicators, and Dashboards

• Development of Metrics
• KPI Dashboards
• Steps to Create KPI Dashboards

Module 29: Internal Audit and Management Review of a BCMS

• Internal Audit
• Introduction to Management Review
• Purpose of Management Review
• Management Review Input
• Management Review Outputs

Module 30: Improvement and Implementation of a Continual Improvement Program

• Nonconformity and Corrective Action
• Continual Improvement
  • Lifelong Learning
  • Tone from the Top
  • Let’s have a Plan
  • Second Opinion
  • Catching up
  • Takeaway

Module 31: Preparing for a BCMS Certification Audit

• BCMS Certification Audit
  • Choose a Certification Body
  • Certification Audits
  • Surveillance Visits

Module 32: Development of a BCMS and Business Continuity Policies

• Development of a BCMS
  • Steps for Development of a BCMS
• Business Continuity Policies

Module 33: Purpose of Management Review

• Conducting an Audit
• Core Audit Principles and Concepts
• Evidence and Risk
• Preparation of an Audit
• BCMS Documentation Audit
• Opening Meeting

Module 34: Directing an ISO 22301 Audit

• Communication During the Audit
• Audit Actions
• Findings from the Audit
• Components of the Documentation
• Supporting Procedural Documentation
• Closing Meeting
• Assessing Corrective Action Plans
• ISO 22301 Surveillance Audit
• Internal Audit Management Programme
• Second Party Audits

Module 35: Manage Auditing Teams, Improve Analysing, and Reporting Skills

• Introduction
• Management Audit Procedure
• Improvement Analysing
• Data Analyses
• Root Cause Analysis
• Reporting Skills

Who should attend this ISO 22301 Lead Auditor Course?

The ISO 22301 Lead Auditor Training Course is designed to equip professionals to lead and conduct audits of Business Continuity Management Systems (BCMS) based on ISO 22301 standards. This ISO 22301 Certification Course can be beneficial for a wide range of professionals, including:

• Business Continuity Managers
• Risk Management Professionals
• Information Security Experts
• IT and Technology Continuity Specialists
• Senior Management and Decision-makers
• Quality Management Professionals
• Experienced Auditors

Prerequisites of the ISO 22301 Lead Auditor Course

There are no formal prerequisites for attending this ISO 22301 Lead Auditor Course. However, some knowledge of business continuity principles, risk management, and auditing techniques a greatly benefits a delegate.

ISO 22301 Lead Auditor Course Overview

The ISO 22301 Lead Auditor Course provides in-depth knowledge of auditing Business Continuity Management Systems (BCMS) based on ISO 22301 standards. It equips professionals with the expertise to assess, implement, and improve business continuity frameworks, ensuring organisations can effectively respond to disruptions and maintain operational resilience.

Proficiency in ISO 22301 auditing is crucial for professionals involved in risk management, compliance, and business continuity. Lead auditors play a vital role in assessing organisations' readiness for disruptions. This ISO 22301 Training  is ideal for business continuity managers, internal auditors, compliance officers, and professionals responsible for BCMS implementation and improvement.

This 5-day ISO 22301 Lead Auditor Course offered by The Knowledge Academy provides delegates with the skills to conduct ISO 22301 audits effectively, ensuring compliance with international standards. It enhances their ability to identify vulnerabilities, assess risks, and recommend improvements. Delegates will gain practical auditing expertise through real-world case studies , boosting their career opportunities in business continuity management.

Course Objectives

• To understand the key concepts and principles of ISO 22301
• To learn how to plan and conduct ISO 22301 audits effectively
• To acquire skills in identifying non-conformities and assessing compliance
• To develop the ability to report audit findings and recommend corrective actions
• To master the art of evaluating an organisation's business continuity management system
• To gain insights into the latest industry best practices in business continuity

Upon completion of the ISO 22301 Lead Auditor Course, delegates will be equipped with the knowledge, skills, and confidence needed to conduct audits of BCMS effectively. They will be better prepared to assess the maturity of their organisation's business continuity practices, identify gaps in compliance with ISO 22301 requirements, and implement measures to enhance organisational resilience and continuity in the face of disruptions.

What’s included in this ISO 22301 Lead Auditor Course?

• ISO 22301 Lead Auditor Examination   
• World-Class Training Sessions from Experienced Instructors 
• ISO 22301 Lead Auditor Certificate
• Digital Delegate Pack

ISO 22301 Lead Auditor Exam Information 

To achieve the ISO 22301 Lead Auditor, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice 
• Total Questions: 30 
• Total Marks: 30 Marks 
• Pass Mark: 50%, or 15/30 Marks 
• Duration: 40 Minutes
• Open Book/ Closed Book: Closed Book