ISO 22301 Business Continuity (Internal Auditor level) course

970,00 € iva esclusa

A 24-hour course based on ISO 22301:2019 that trains internal auditors of the business continuity management system (BCMS). The programme covers audit planning, conduct and reporting and the verification of BIA, strategies, plans and exercises, with a ready-to-use audit kit.

Description

The ISO 22301 Business Continuity course (Internal Auditor level) trains internal auditors of the business continuity management system (BCMS) according to ISO 22301:2019 and ISO 19011, supported by the ISO 223xx family for BIA, strategies, procedures and emergencies.

Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person, and covers audit planning, conduct and reporting as well as the verification of BIA, strategies, plans and exercises, with practical exercises and case studies.

24
Hours
12
Modules
3
Lessons
Live
Synchronous
Course information
Instructor
Dott.ssa Valentina Grazia Sapuppo
Level
Internal Auditor
Training area
Audit
Delivery
Synchronous, online or in person
Schedule
Shared upon enrolment
Participants
Classes of 5 to 14 participants
Who it is for
  • Internal auditors
  • Business continuity managers
  • Risk and security managers
  • Management system managers
Objectives and expected outcomes

The course trains internal auditors to audit the business continuity management system according to ISO 22301:2019, verifying BIA, strategies, plans and exercises.

By the end of the course, participants will:

  • understand the structure of a BCMS under ISO 22301:2019 and the support provided by the ISO 223xx family;
  • apply the audit principles and techniques of ISO 19011;
  • verify the method and evidence behind BIA and risk assessment, continuity strategies and plans;
  • assess the effectiveness of the exercise and plan testing programme;
  • plan and conduct the internal audit, record findings and nonconformities and write the audit report.

Main topics

ā—BCMS and ISO 22301:2019 ā—ISO 19011 audit techniques
ā—Context, leadership and planning ā—BIA and risk assessment
ā—Continuity strategies and solutions ā—Procedures and emergency management
ā—Exercises and plan testing ā—Findings, nonconformities and audit report

Course programme

01 The business continuity management system (BCMS) and the structure of ISO 22301:2019
02 Audit principles and methodological references (ISO 19011)
03 Context, leadership and planning (clauses 4-6): auditing policy, objectives and risks
04 Business Impact Analysis (BIA) and risk assessment (ISO/TS 22317): auditing method and evidence
05 Business continuity strategies and solutions (ISO/TS 22331)
06 Business continuity procedures and response structure; emergency management (ISO/TS 22332; ISO 22320)
07 Support: resources, competence, awareness and communication (clause 7)
08 Operation and business continuity plans (clause 8)
09 Exercise programme and plan testing (clause 8.6): auditing effectiveness
10 Performance evaluation, monitoring and review (clause 9)
11 Nonconformity, corrective action and improvement (clause 10)
12 Internal audit programme, conduct, findings and report; exercises

The programme is complemented by exercises and case studies and by a final learning assessment.

Prerequisites

Knowledge of ISO 22301 (Foundation or Implementer level recommended). Audit experience is helpful. An ISO 19011 course is recommended. No specific digital skills are required.

Methodology and materials

Exercises
Practical exercises and BCMS audit case studies.
Audit kit
Ready-to-use checklist, audit plan, report and nonconformity template.
Downloadable materials
Slides and summary cards, case studies.
Assessment
Final learning assessment.

Certificate of attendance

A certificate of attendance is issued at the end of the course.