Risk, Security and Compliance
BCMS Business Continuity Auditor according to ISO 22301 (in cooperation with CIS Spółka z o. o.)
ON-SITE OR ONLINE | 3 days
Training for business continuity auditors preparing them to perform this function based on the latest edition of the PN-EN ISO 22301:2020-04 standard.
Training duration: 3 days / 24 hours
Confirmation document: Business Continuity Auditor Certificate„
This is a three-day (24-hour) practice-oriented training during which:
- You will learn how to conduct internal audits of the Business Continuity Management System according to ISO 22301
- You will gain practical auditing skills based on ISO 19011:2018
- Under the supervision of a Trainer, you will practice the most important tools necessary in the work of an auditor
- You will learn practical tips on how to deal with common audit situations
- You will obtain the ISO 22301 internal auditor certificate, which is highly sought after on the market.
By participating in this training, you'll save time spent on trial and error because you'll learn to focus on what's truly important. An experienced trainer and auditor will guide you, share case studies, and clarify any concerns. Through exercises and shared experiences, you'll acquire practical auditing skills.
Who might benefit from participating in the training?:
- Business continuity managers who would like to expand their competencies to include the ability to audit the Business Continuity Management System (BCMS) in their company
- Internal auditors planning to update and/or expand their knowledge of the Business Continuity Management System and methods of auditing this system
- Management staff who want to improve their qualifications in the field of effective company management and ensuring its business continuity
- IT department employees responsible for information security in the company and involved in ensuring its business continuity
Module I: INTRODUCTION TO BUSINESS CONTINUITY MANAGEMENT SYSTEM (BCMS)
1) Introduction:
- Identification of participants' needs and expectations
2) Overview of key requirements of ISO 22301
3) Context and stakeholder requirements
4) Leadership
5) Approach to risk and opportunity
Module II: PLANNING A BUSINESS CONTINUITY MANAGEMENT SYSTEM (BCMS)
1) Business Impact Analysis (BIA)
2) Risk assessment
3) Business Continuity Strategies
4) Business Continuity Plans and Testing
5) Incident/Disruption Management
6) Monitoring and evaluating effectiveness
7) Reviews and improvement activities
8) Basic concepts and principles of BCMS auditing in accordance with ISO 19011:2018
MODULE III: BUSINESS IMPACT ANALYSIS (BIA) AND RISK ASSESSMENT (RA), SAMPLE ANALYSES, THREATS AND VULNERABILITIES
1) Audit preparation
2) BCMS audit objectives, scope, criteria
3) Audit planning
4) Competency requirements
5) Planning the audit program
6) Opening meeting
7) Audit activities
8) Auditing techniques
9) Post-audit activities
10) Closing meeting
11) Preparation of audit findings
12) Taking audit samples
13) Writing an audit report
Module IV: TRAINING SUMMARY AND EXAMINATION
Training summary - effectiveness evaluation.
Exam – lasts an hour and consists of two parts: a single-choice test and a descriptive part during which the recommendations of the standard and the tool must be applied.
