Description

This training will allow you to acquire the necessary expertise to carry out audits in accordance with the ISO 19011 and 17021 standards, with a view to certifying a Business Continuity Management System in accordance with the ISO 22301 standard.

It will allow you also prepare and conduct internal and external audits. At the end of the training, you will be able to obtain ISO 22031 Lead Auditor certification.

Who is this training for ?

For whom ?

• Auditors wishing to carry out and lead certification audits of the Business Continuity Management System.
• Managers or consultants wishing to master the audit process of the Business Continuity Management System.
• Any person responsible for maintaining compliance with the requirements of the BCMS.
• Technical experts wishing to prepare an audit of the Business Continuity Management System.
• Advisors specialized in business continuity management.

Prerequisites

Training objectives

Acquire an in-depth understanding of the operation of a Business Continuity Management System (BCMS) compliant with the ISO 22301 standard

Explain how ISO 22301 correlates with other relevant standards and regulatory frameworks

Understand the role of the auditor in planning, directing and monitoring a management system audit in accordance with ISO 19011

Know how to lead an audit and an audit team in the context of a BCMS compliant with the ISO 22301 standard

Be able to interpret the requirements of ISO 22301 in the context of a BCMS audit

Acquire the skills of an auditor to plan an audit, lead an audit, write reports and follow up on an audit in accordance with the ISO 19011 standard

Training program

• Concept of Business Continuity Management System (BCMS)
  • Introduction to ISO 22301, ISO 27031 and ISO 22313 standards.
  • Fundamentals of business continuity.
  • ISO 22301 certification process.
  • Business continuity management system.
  • Detailed presentation of clauses 4 to 10 of ISO 22301.
• Planning and initializing an audit 22301
  • Fundamental auditing principles and concepts.
  • Evidence-based and risk-based auditing approach.
  • Preparing for an ISO 22301 certification audit .
  • Documentary audit of a SMCA.
  • Conduct an initialization meeting.
• Conduct an ISO 22301 audit
  • Communication during the audit.
  • Audit procedures: observation, documentary review, interviews, sampling techniques.
  • Audit procedures: technical verification , corroboration and evaluation.
  • Drafting audit test plans.
  • Formulating audit findings.
  • Drafting non-conformity reports.
• Closing and following up an ISO 22301 audit
  • Audit documentation.
  • Conduct a closing and end meeting of an audit 22301.
  • Evaluation of corrective action plans.
  • ISO 22301 surveillance audit, internal / 2nd party audit.
• Skill areas covered in the exam
  • Domain 1: Fundamental principles and concepts of business continuity.
  • Domain 2: Code of best practices for business continuity (ISO 22301).
  • Domain 3: planning a BCMS (ISO 22301).
  • Domain 4: implementing a BCMS (ISO 22301).
  • Domain 5: performance evaluation, monitoring and measurement of a SMCA (ISO 22301).
  • Domain 6: continuous improvement of a SMCA (ISO 22301).
  • Domain 7: preparation of the certification audit of a SMCA.