Duration
4.5 days
Learning Outcomes
This course will provide participants with the concept and knowledge, which will enable them to:
- Have good understanding of the ISO22301 Business Continuity Management System and its requirements.
- Differentiate the various types of audits.
- Have knowledge of the key attributes of the management system auditor/lead auditor.
- Understand the audit process and framework.
- Prepare an audit checklist and standardised audit program.
- Conducting pre-audit or opening meeting.
- Conduct site audits.
- Collect audit evidences.
- Determine non-conformities of BCMS requirements based on ISO22301.
- Write non-conformity audit reports.
- Know the areas for follow-up and corrective actions after the audit.
Day 1 BCM-230, BCM-8030 and BCM-8530
Introduction to BCM Fundamentals with ISO 22301
Introduce Course Overview and Objectives
Understand BCM Definitions & Terminologies
Have an overview of the International BCM Professional Practices
Walkthrough the BCM Implementation Methodology
Explain terminologies and BCM BOK
Anticipate the Key Success Factors
Introduction to ISO 22301
Have an overview to ISO22301
Map of ISO22301 component to the BCM Planning Process
Align the BCM Framework and PDCA Cycle
ISO22301 BCM Areas and Components
Understand the inter-relationships of the 6 BCM Areas and Components
Project Management
Establish Project Initiation and Management
Establish needs, project plan and budget
Identify teams and committees
Risk Analysis and Review
Understand risk management terminologies
Identify and determine threats and risk Implement controls and safeguards
Business Impact Analysis
Identify critical business functions and prioritized activities
Determine and quantify impact of outage
Identify minimum resources and tolerable downtime
Establish Business Continuity Objectives
Business Continuity Strategy
Understand the purpose of strategy development
Identify alternate processing capability
Develop strategy for units and corporate level
Plan Development
Identify incident, emergency responses, disaster declaration
Determine major plan component and its design for strategic, tactical and operational levels
Testing and Exercising
Develop test plan, scenario and evaluation criteria
Determine exercise requirement and program
DAY 2 BCM-8030, BCM-8530
Definition of Business Continuity Management System
Elements of ISO 22301 BCMS
Define audit terms
Identify different types of audits
Introduction to Auditing
Overview of Process Auditing
Plan an Audit Programme
Manage the Audit Programme
DAY 3 BCM-8030, BCM-8530
Managing an Audit Programme Process Flow
Attributes, competencies, roles and responsibilities of an Auditor
Do’s and Don’ts of an Auditor
Prepare work documents
Conduct a Documentation Review (Stage 1 Audit)
Conduct on-site audit (Stage 2 Audit)
Conduct an opening or entrance meeting
Confirm Audit techniques
Collect and verify audit information
Prepare audit conclusion, generate audit findings, identify and define nonconformities
Write an audit report
Conduct audit follow up and recommendation
Course end assessment
Day 4 BCM-8530
Prepare an audit programme
Prepare audit checklists
Conduct an audit using a “live” BCMS
Identify nonconformities against ISO22301 requirements
Writing nonconformity reports
Writing an audit report
Programme scope, delivery arrangements and suitability are confirmed during enquiry.