This site uses cookies to collect information about your browsing activities in order to provide you with more relevant content and promotional materials, and help us understand your interests and enhance the site. By continuing to browse this site you agree to the use of cookies. Visit our cookie policy to learn more.
Auditing a Business Continuity Program
ISO 22301
ISO 22301
Duration: 4 Days (Four full days of instruction from 8.30 am to 5 pm, followed by a half-day ISO 22301 audit examination from 8.30 am to 12 pm).
32 Continuing Education Activity Points (CEAPs) may be awarded towards recertification.
Description
This brand new version of BCLE AUD (ISO 22301) provides education, hands-on experience using a case study, and a guide to performing audits of business continuity management systems and programs using ISO 22301, 2019 edition.
Auditing business continuity management systems using a recognized international standard is the best method to identify opportunities to enhance and improve performance. Auditing supplier business continuity management systems is a requirement for some industries and for organizations that have certified, or are seeking certification of, their business continuity management systems and programs. Auditing is also a must for organizations seeking to identify the resiliency of critical suppliers, those with low tolerance for risk, and those seeking to enhance organizational resilience.
DRI's ISO 22301 audit course is designed for business continuity professionals, risk managers, internal auditors, and consultants. The course provides the foundation for auditing — the collection of evidence using interviews, reviewing documents, and surveying properties, as well as the use of ISO 22301 as criteria to evaluate each aspect of a business continuity management system (BCMS).
The course begins with the basics of auditing using ISO standards and the Institute of Internal Auditor's International (IIA) Professional Practices Framework. Students will learn how to develop an audit work plan beginning with assembling a team, researching applicable requirements, requesting documents for review, and scheduling site surveys and interviews.
An overview of ISO 22301 is followed by 10 lessons providing clause-by-clause explanations of the standard's BCMS requirements, auditing techniques, and evidence of conformity. Each lesson includes interactive class activities and hands-on auditing of a hypothetical company using ISO 22301 as criteria. Students compile audit findings during each of these lessons.
The course wraps up with a hands-on lesson on report writing, including an extended class activity with students organizing findings from all lessons, prioritizing their recommendations, developing an auditor's opinion on the conformity of the case study BCMS to ISO 22301, and presenting their opinion and recommendations to the instructor.
Course materials include a comprehensive audit guide for students to use when preparing for and conducting an audit. The audit guide identifies documents to review, people to interview, questions to ask, regulations, best practices, and more in-depth guidance. A practice exam that is the subject of the final class lesson is also provided to prepare students for the qualifying exam.
Topic areas:
- Business continuity management system (BCMS) as defined by ISO 22301, 2019
- Context of the organization, leadership, risk assessment, business impact analysis, business continuity plans, competence, exercise program, - performance evaluation, and improvement
- Auditing fundamentals, including planning an audit, gathering evidence, determining findings, developing an auditor's opinion of conformity, and compiling an audit report
Testimonials
"I found the class to be extremely useful, drawing from [the instructor's] vast subject matter expertise…" - CBCP & CBCLA, USA
"DRI courses are well-structured to provide the requisite information at a pace that is appropriate for the learner. The instructor was very knowledgeable and provided 'real world' examples to ensure the best understanding." - CBCP, MBCP, CBCLA, & CRMP, USA
Objectives
1. Understand the requirements for a business continuity management system (BCMS) as defined by ISO 22301.
2. Understand fundamental auditing requirements from ISO and IIA.
3. Define the role of an auditor to develop an audit plan.
4. Identify the tasks to conduct an audit including reviewing documents, interviewing, and surveying facilities.
5. Define reporting requirements including identifying findings, developing an auditor's opinion on conformity to the audit standard, and preparing recommendation for continual improvement.
6. Take the DRI Audit Examination - ISO 22301
Outline
- Introduction
- Auditing basics
- Understanding ISO 22301
- Context of the organization
- Leadership, planning, support, and operation
- Risk assessment
- Business impact analysis (BIA)
- Continuity strategies and solutions
- Business continuity plans
- Education and training
- Exercise program
- Audit findings, recommendations, and auditor's opinion
- Exam Preparation
- DRI Audit Examination - ISO 22301
For in person courses:
This course will be held in person, with four full days of instruction from 8.30 am to 5 pm, followed by a half-day ISO 22301 audit examination from 8.30 am to 12 pm on the final day. A computer is required for this course for you to take the exam. The system requirements will be sent to you via email together with information about how to access the course materials before the start of the course.
For courses held online:
All online courses are held via Zoom and a computer is required for this course. The system requirements will be sent to you via email together with information about how to access the course materials prior to the start of the course. You will also be provided with instructions for how to take the exam online, at leisure following the course.
Contact us to discuss how we could help your organisation.
32 Continuing Education Activity Points (CEAPs) may be awarded towards recertification.
Description
This brand new version of BCLE AUD (ISO 22301) provides education, hands-on experience using a case study, and a guide to performing audits of business continuity management systems and programs using ISO 22301, 2019 edition.
Auditing business continuity management systems using a recognized international standard is the best method to identify opportunities to enhance and improve performance. Auditing supplier business continuity management systems is a requirement for some industries and for organizations that have certified, or are seeking certification of, their business continuity management systems and programs. Auditing is also a must for organizations seeking to identify the resiliency of critical suppliers, those with low tolerance for risk, and those seeking to enhance organizational resilience.
DRI's ISO 22301 audit course is designed for business continuity professionals, risk managers, internal auditors, and consultants. The course provides the foundation for auditing — the collection of evidence using interviews, reviewing documents, and surveying properties, as well as the use of ISO 22301 as criteria to evaluate each aspect of a business continuity management system (BCMS).
The course begins with the basics of auditing using ISO standards and the Institute of Internal Auditor's International (IIA) Professional Practices Framework. Students will learn how to develop an audit work plan beginning with assembling a team, researching applicable requirements, requesting documents for review, and scheduling site surveys and interviews.
An overview of ISO 22301 is followed by 10 lessons providing clause-by-clause explanations of the standard's BCMS requirements, auditing techniques, and evidence of conformity. Each lesson includes interactive class activities and hands-on auditing of a hypothetical company using ISO 22301 as criteria. Students compile audit findings during each of these lessons.
The course wraps up with a hands-on lesson on report writing, including an extended class activity with students organizing findings from all lessons, prioritizing their recommendations, developing an auditor's opinion on the conformity of the case study BCMS to ISO 22301, and presenting their opinion and recommendations to the instructor.
Course materials include a comprehensive audit guide for students to use when preparing for and conducting an audit. The audit guide identifies documents to review, people to interview, questions to ask, regulations, best practices, and more in-depth guidance. A practice exam that is the subject of the final class lesson is also provided to prepare students for the qualifying exam.
Topic areas:
- Business continuity management system (BCMS) as defined by ISO 22301, 2019
- Context of the organization, leadership, risk assessment, business impact analysis, business continuity plans, competence, exercise program, - performance evaluation, and improvement
- Auditing fundamentals, including planning an audit, gathering evidence, determining findings, developing an auditor's opinion of conformity, and compiling an audit report
Testimonials
"I found the class to be extremely useful, drawing from [the instructor's] vast subject matter expertise…" - CBCP & CBCLA, USA
"DRI courses are well-structured to provide the requisite information at a pace that is appropriate for the learner. The instructor was very knowledgeable and provided 'real world' examples to ensure the best understanding." - CBCP, MBCP, CBCLA, & CRMP, USA
Objectives
1. Understand the requirements for a business continuity management system (BCMS) as defined by ISO 22301.
2. Understand fundamental auditing requirements from ISO and IIA.
3. Define the role of an auditor to develop an audit plan.
4. Identify the tasks to conduct an audit including reviewing documents, interviewing, and surveying facilities.
5. Define reporting requirements including identifying findings, developing an auditor's opinion on conformity to the audit standard, and preparing recommendation for continual improvement.
6. Take the DRI Audit Examination - ISO 22301
Outline
- Introduction
- Auditing basics
- Understanding ISO 22301
- Context of the organization
- Leadership, planning, support, and operation
- Risk assessment
- Business impact analysis (BIA)
- Continuity strategies and solutions
- Business continuity plans
- Education and training
- Exercise program
- Audit findings, recommendations, and auditor's opinion
- Exam Preparation
- DRI Audit Examination - ISO 22301
For in person courses:
This course will be held in person, with four full days of instruction from 8.30 am to 5 pm, followed by a half-day ISO 22301 audit examination from 8.30 am to 12 pm on the final day. A computer is required for this course for you to take the exam. The system requirements will be sent to you via email together with information about how to access the course materials before the start of the course.
For courses held online:
All online courses are held via Zoom and a computer is required for this course. The system requirements will be sent to you via email together with information about how to access the course materials prior to the start of the course. You will also be provided with instructions for how to take the exam online, at leisure following the course.
Contact us to discuss how we could help your organisation.