ISO 22301 (BCMS)

This five-day intensive course enables participants to develop the necessary expertise to support an organization in implementing and managing a Business Continuity Management System (BCMS) based on ISO 22301:2012. Participants will also gain a thorough understanding of best practices used to implement business continuity processes from the ISO 22399. This training is consistent with the project management practices established in ISO 10006 (Quality Management Systems - Guidelines for Quality Management in Projects). This training is fully compatible with BS 25999 (Business continuity management specification) and ISO 27031 (Guidelines for information and communication technology readiness for business continuity).

Day 1: Introduction to Business Continuity Management System (BCMS) concepts as required by ISO 22301; Initiating a BCMS

• Introduction to management systems and the process approach
• Presentation of the standards ISO 22301, ISO/PAS 22399, ISO 27031, BS 25999 and regulatory framework
• Fundamental principles of Business continuity
• Preliminary analysis and establishment of the maturity level of the existing Business Continuity Management System based upon ISO 21827
• Writing a business case and a project plan for the implementation of a BCMS

Day 2: Planning a BCMS based on ISO 22301

• Definition of the scope of a BCMS
• Definition of quality policy and objectives
• Development of a BCMS and business continuity policies
• Business impact analysis (BIA) and risk assessment

Day 3: Implementing a BCMS based on ISO 22301

• Implementation of a document management framework
• Design of business continuity processes and writing procedures
• Implementation of business continuity processes
• Development of a training & awareness program and communicating about the business continuity
• Incident management and emergency management
• Operations management of a BCMS

Day 4: Controlling, monitoring and measuring and improving a BCMS and certification audit of a BCMS

• Controlling and Monitoring a BCMS
• Development of metrics, performance indicators and dashboards
• ISO 22301 internal Audit
• Management review of a BCMS
• Implementation of a continual improvement program
• Preparing for an ISO 22301 certification audit

Day 5: Certification Exam

ISO 22301 Foundation Certification or basic knowledge of ISO 27031 or BS 25999 and business continuity concepts is recommended.

This five-day intensive course enables participants to develop the necessary expertise to audit a Business Continuity Management System (BCMS) and to manage a team of auditors by applying widely recognized audit principles, procedures and techniques. During this training, the participant will acquire the necessary knowledge and skills to proficiently plan and perform internal and external audits in compliance with ISO 19011 the certification process according to 17021. Based on practical exercises, the participant will develop the skills (mastering audit techniques) and competencies (managing audit teams and audit program, communicating with customers, conflict resolution, etc.) necessary to efficiently conduct an audit. This training is compatible with BS 25999 audit (Business continuity management specification) and ISO 27031 (Guidelines for information and communication technology readiness for business continuity).

Day 1: Introduction to Business Continuity Management System (BCMS) concepts as required by ISO 22301

• Presentation of the standards ISO 22301, ISO 27031, ISO/PAS 22399, BS 25999 and regulatory framework
• Fundamental principles of business continuity
• ISO 22301 certification process
• Business Continuity Management System (BCMS)
• Detailed presentation of the clauses 4 to 10 of ISO22301

Day 2: Planning and Initiating an ISO 22301 audit

• Fundamental audit concepts and principles
• Audit approach based on evidence and on risk
• Preparation of an ISO 22301 certification audit
• BCMS documentation audit
• Conducting an opening meeting

Day 3: Conducting an ISO 22301 audit

• Communication during the audit
• Audit procedures: observation, document review, interview, sampling techniques, technical verification, corroboration and
• evaluation
• Audit test plans
• Formulation of audit findings
• Documenting of nonconformities

Day 4: Concluding and ensuring the follow-up of an ISO 22301 audit

• Audit documentation
• Quality review
• Conducting a closing meeting and conclusion of an ISO 22301 audit
• Evaluation of corrective action plans
• ISO 22301 surveillance audit
• ISO 22301 internal audit management program

Day 5: Certification Exam

ISO 22301 Foundation Certification or basic knowledge of BS 25999 or ISO 27031 and business continuity concepts is recommended.