ISO 22301 Lead Auditor - United Kingdom

ISO 22301 Lead Auditor Course Outline

The ISO 22301 Lead Auditor Training course covers:

Module 1: Introduction to Business Continuity Management Systems

• What is a BCMS?
• Management Systems
• Business Continuity Management System
• BCM System Process
• Business Continuity Management (BCM)
• BCMS Benefits
• Business Continuity Management Lifecycle
• Applicability and Objectives

Module 2: Scope of a BCMS

• BCMS Scope

Module 3: Fundamental Principles and Concepts of Business Continuity

• Fundamental Principles
• Business Continuity

Module 4: Clauses 4 to 8 of ISO 22301

• General Requirements: Clauses 4 to 8 of ISO 22301
1. Introduction
2. Clauses of ISO 22301

Module 5: Overview of ISO 22301 Standard

• Introduction to ISO 22301
• 22301 Standard
• 22301 Standard Progression
• 22301 High-Level Methodology
• Implementation Cycle Times

Module 6: BCM Mandatory Documents

• Clauses of BCM Mandatory Documents

Module 7: Management Roles and Responsibilities

• Management Roles and Responsibilities
• Impediments to Success
• Aids to Success

Module 8: Implementation Phases of the ISO 22301 Framework

• Phases of Implementation in ISO 22301

Module 9: Continual Improvement of a BCMS

• Continual Improvement
• BCMS Control System
• Areas of Continual Improvement

Module 10: Audit

• Introduction to Audit

Module 11: Auditing Principles

• Fundamental Principles
• Internal Auditing
• Scope
• PDCA Cycle

Module 12: Auditing Roles

• What are the Roles?
• Organisational Context
• Management Responsibilities
• Planning, Support, and Operation
• Performance Evaluation
• Improvement

Module 13: Roles and Responsibilities of the Auditor

• Internal Auditing
• Roles and Responsibilities
• Typical Internal Audit

Module 14: Skills of an Internal Auditor

• Internal Auditing Goals
• Qualities of an Auditor
• Auditing Skills

Module 15: Purpose of Internal Auditing

• 22301 Mission
• Key Benefits of BCMS

Module 16: Audit Procedures

• BCMS Audit Process
• Elements of an Internal Audit
• Internal Auditing
• Internal Audit Process
• Required Documentation
• Supporting Procedural Documentation
• Required Records and Documentation

Module 17: Audit Triangle

• Fraud Triangle
• Tackling the Fraud Triangle

Module 18: Auditing Techniques

• Classifying Audit Findings
• On-Site Auditing
• Remote Auditing Methods

Module 19: Work Document Approach

• Steps to Certification
• Certification Audits

Module 20: Business Continuity Control Best Practice

• Overview
• BCM Policy
• Management Commitment
• Plan How to Deal with an Emergency
• Impediments to Success
• Disaster Recovery

Module 21: Planning a Business Continuity Management System (BCMS)

• Planning a BCMS
• Steps to Plan a BCMS

Module 22: Implementation of Business Continuity Processes and Writing Procedures

• Communication
• Writing a Scenario
• Delivering the Scenario
• Implementing a BCMS

Module 23: Business Impact Analysis (BIA) and Risk Assessment

• Business Impact Analysis
• Risk Assessment Methodologies and Implementation
• Risk Treatment Implementation

Module 24: Incident Management and Emergency Management

• Incident Management and Emergency Management
• Key Elements of Crisis Management Respond Process

Module 25: Operations Management of a BCMS

• Introduction to Operations Management of a BCMS

Module 26: Performance Evaluation, Monitoring, and Measurement of a BCMS

• Performance Evaluation, Monitoring, and Measurement of a BCMS
• Key Performance Indicators (KPI)
• Identifying Indicators of an Organisation
• Critical Success Factors (CSFs)
• Writing an Effective Critical Success Factor
• CSFs for Strategic Planning
• Performance Evaluation
• Case Study: Telefonica
• Cutting Complexity
• Taking Actions

Module 27: Development of Metrics, Performance Indicators, and Dashboards

• Development of Metrics
• KPI Dashboards
• Steps to Create KPI Dashboards

Module 28: Internal Audit and Management Review of a BCMS

• Internal Audit
• Introduction to Management Review
• Purpose of Management Review

Module 29: Implementation of a Continual Improvement Program

• Continual Improvement
1. Lifelong Learning
2. Tone from the Top
3. Let’s have a Plan
4. Second Opinion
5. Catching Up
6. Takeaway

Module 30: Preparing for a BCMS Certification Audit

• BCMS Certification Audit

Module 31: Development of a BCMS and Business Continuity Policies

• Development of a BCMS
• Business Continuity Policies

Module 32: Planning and Initiating an ISO 22301 Audit

• Conducting an Audit
• Core Audit Principles and Concepts
• Evidence and Risk
• Preparation of an Audit
• BCMS Documentation Audit
• Opening Meeting

Module 33: Directing an ISO 22301 Audit

• Communication During the Audit
• Audit Actions
• Findings from the Audit

Module 34: Manage Auditing Teams and Improve Analysing and Reporting Skills

• Introduction
• Management Audit Procedure
• Improvement Analysing
• Data Analyses
• Root Cause Analysis
• Reporting Skills

Module 35: Ending the Audit and Follow-Up

• Components of the Documentation
• Supporting Procedural Documentation
• Closing Meeting
• Assessing Corrective Action Plans
• ISO 22301 Surveillance Audit
• Internal Audit Management Program
• Second Party Audits