BCMS Business Continuity Management System auditor in accordance with ISO 22301 (in collaboration with CIS Spółka z o.o.)

Training for business continuity auditors to prepare them for this role, based on the latest edition of the PN-EN ISO 22301:2020-04 standard.

Duration of the training course: 3 days / 24 hours

Supporting document: „Business Continuity Auditor” Certificate”

This is a three-day (24-hour) practical training course, during which:

• You will learn how to carry out internal audits of the Business Continuity Management System in accordance with ISO 22301
• You will gain practical auditing skills based on ISO 19011:2018
• Under the guidance of a trainer, you will practise the key tools required for the role of an auditor
• You’ll learn practical tips on how to handle common audit situations
• You will obtain the ISO 22301 internal auditor certificate, which is highly sought after in the market

By taking part in this training, you’ll save time that would otherwise be spent on „trial and error”, as you’ll learn to focus on what really matters. An experienced trainer and auditor will guide you through the process, share case studies and clarify any doubts. Through exercises and the exchange of experiences, you will acquire practical auditing skills.

Who might benefit from taking part in the training course?:

• Business continuity managers who would like to expand their skills to include the ability to audit the Business Continuity Management System (BCMS) within their organisation
• Internal auditors planning to update and/or expand their knowledge of the Business Continuity Management System and how to audit it
• Management staff who are keen to enhance their skills in the effective management of the company and in ensuring its business continuity
• Staff in IT departments responsible for information security within the company and involved in ensuring its business continuity

Module I: INTRODUCTION TO THE BUSINESS CONTINUITY MANAGEMENT SYSTEM (BCMS)
1) Introduction:

• Identifying participants’ needs and expectations

2) Overview of the key requirements of ISO 22301
3) Context and stakeholder requirements
4) Leadership
5) Approach to risks and opportunities

Module II: PLANNING A BUSINESS CONTINUITY MANAGEMENT SYSTEM (BCMS)
1) Business Impact Analysis (BIA)
2) Risk assessment
3) Business continuity strategies
4) Business continuity plans and testing
5) Incident/disruption management
6) Monitoring and evaluating effectiveness
7) Reviews and improvement measures
8) Basic concepts and principles of BCMS auditing in accordance with ISO 19011:2018

MODULE III: BUSINESS IMPACT ANALYSIS (BIA) AND RISK ASSESSMENT (RA), EXAMPLE ANALYSES, THREATS AND VULNERABILITIES
1) Preparing for the audit
2) Objectives, scope and criteria of the BCMS audit
3) Audit planning
4) Competency requirements
5) Planning the audit programme
6) Opening meeting
7) Audit activities
8) Auditing techniques
9) Post-audit actions
10) Closing meeting
11) Preparation of the audit findings
12) Taking audit samples
13) Writing an audit report

Module IV: TRAINING SUMMARY AND EXAM
Training summary – assessment of effectiveness.
Exam – It lasts one hour and consists of two parts: a single-choice test and an essay section, during which candidates must apply the recommendations set out in the standard and use the tools provided.