ISO 22301 Lead Auditor Training
Lead certification audits of a business continuity management system against ISO 22301:2019, with a relentless focus on what counts as evidence that an untested capability would actually work.
29
Lessons
~16h
Study time
30
Exam questions
Earns a QR-verifiable Certificate of Training
Overview
About this course
ISO 22301:2019 poses a problem no other management system standard poses so sharply: almost everything in clause 8 describes what an organisation says it would do in a disruption that has not happened. A procurement process leaves purchase orders behind; a recovery capability that has never been invoked leaves only a document. This course trains auditors to close that gap, and to tell a capability that is documented, resourced and exercised from one that is merely written down.
The programme works through clauses 4 to 10, with clause 8 taught in full: business impact analysis at 8.2.2, risk assessment at 8.2.3, strategies and solutions at 8.3, plans and procedures at 8.4, and exercising and evaluation at 8.5 and 8.6. It defines precisely the terms auditors muddle — MTPD, RTO, RPO, MBCO and prioritised activities — draws the boundary between continuity, disaster recovery and crisis management, and uses ISO 22313, ISO/TS 22317 and ISO/TS 22318 as guidance without treating guidance as requirement. Four pathologies recur throughout: the BIA never revisited, the strategy never costed, the out-of-date call tree, and the exercise programme that only rehearses the easy scenario.
The closing modules cover lead auditor practice: audit team competence and leadership, Stage 1 and Stage 2 under ISO/IEC 17021-1:2015, sampling across sites and prioritised activities, observing or reviewing an exercise, interviewing incident response roles, grading findings, the report and the certification recommendation.
It is written for business continuity and risk managers, internal auditors and certification body auditors. Assessment is online: a 30-question exam with a 70% pass mark, leading to a verifiable certificate. Around 16 hours of self-paced study.
Practise the audit before you do it for real
Reading a clause and auditing against it are different skills. Enrol on this course and you also get 6 months of AuditVerse, our interactive practice platform — you work through ISO audit scenarios, decide what to sample, and see how a finding holds up when it is challenged.
Sign in with the same email address and password you use here. Access runs for 6 months from the day you enrol, and there is nothing to buy or activate.
Open AuditVerseWhat you earn
A certificate anyone can verify in seconds
Score 70% or better on the final exam and Skedmia issues your Certificate of Training with a unique certificate number. Every certificate carries a QR code that resolves to our public register, so an employer or auditor can confirm it is genuine without contacting anyone.
Verified at skedmia.com/verify
Certified by
Syllabus
Course content
10 modules · 29 lessons · ~16h
01Module 1 — ISO 22301:2019 and the Business Continuity Audit Problem3 lessons
- ISO 22301:2019 — Origins, Structure and Scope of Certification33 min
- The Evidence Problem — Auditing a Capability That Has Not Been UsedPreview35 min
- Business Continuity, Disaster Recovery and Crisis Management — Drawing the Boundary30 min
02Module 2 — Terminology and Metrics — MTPD, RTO, RPO, MBCO and Prioritised Activities3 lessons
- Prioritised Activities, MTPD and MBCO — Defining the Tolerances31 min
- RTO and RPO — Recovery Targets and the Evidence Behind Them35 min
- Using ISO 22313, ISO/TS 22317 and ISO/TS 22318 in an Audit30 min
03Module 3 — Clauses 4 and 5 — Context, Scope, Leadership and Policy3 lessons
- Clause 4.1 and 4.2 — Context, Interested Parties and Legal Requirements32 min
- Clause 4.3 and 4.4 — Scope of the BCMS and What May Be Excluded30 min
- Clause 5 — Leadership, Policy, Roles and Authority to Invoke35 min
04Module 4 — Clauses 6 and 7 — Planning, Objectives, Support and Competence3 lessons
- Clause 6 — Risks and Opportunities, Objectives and Planning of Changes30 min
- Clause 7.1 to 7.3 — Resources, Competence and Awareness30 min
- Clause 7.4 and 7.5 — Communication and Documented Information30 min
05Module 5 — Clause 8.2 — Business Impact Analysis and Risk Assessment3 lessons
- Clause 8.2.2 — Business Impact Analysis Done Properly31 min
- Clause 8.2.3 — Risk Assessment of Disruption35 min
- Auditing a BIA That Was Done Once and Never Revisited35 min
06Module 6 — Clauses 8.3 and 8.4 — Strategies, Solutions, Plans and Procedures3 lessons
- Clause 8.3 — Identifying, Selecting and Implementing Solutions32 min
- Clause 8.4 — Plans, Procedures and the Incident Response Structure40 min
- Auditing Plans, Call Trees and Third-Party Dependencies35 min
07Module 7 — Clauses 8.5 and 8.6 — Exercising and Evaluating Capability3 lessons
- Clause 8.5 — The Exercise Programme32 min
- Observing or Reviewing an Exercise as the Audit Team35 min
- Clause 8.6 — Evaluation of Business Continuity Documentation and Capabilities30 min
08Module 8 — Clauses 9 and 10 — Performance Evaluation and Improvement3 lessons
- Clause 9.1 — Monitoring, Measurement and Metrics That Mean Something30 min
- Clause 9.2 and 9.3 — Internal Audit and Management Review35 min
- Clause 10 — Nonconformity, Corrective Action and Continual Improvement30 min
09Module 9 — Leading the Certification Audit — Stage 1 to Recommendation3 lessons
- Audit Programme, Team Leadership and Stage 134 min
- Stage 2 — Sampling, Interviewing and Gathering Evidence of Capability40 min
- Findings, the Report and the Certification Recommendation40 min
10Course materials & downloads2 lessons
- Continuity Metrics Comparison Chart — MTPD, RTO, RPO, MBCO and Prioritised Activities (PDF)
- ISO 22301:2019 Lead Auditor Evidence Checklist, Clauses 4 to 10 (PDF)
Free Zone
Free documents for this standard
Keep browsing
More quality & management training
Certification Programs
ISO 9001 Awareness
Certified Quality Engineer
TrendingNewISO 9001AwarenessQuality Management