ISO 22301 Lead Implementation Course Outline

Module 1: Introduction to Business Continuity Management Systems

• Definition of a BCMS
• Overview of Management Systems
• Explanation of the Business Continuity Management System
• Process of the BCM System
• Understanding Business Continuity Management (BCM)
• Benefits of BCMS
• Lifecycle of Business Continuity Management
• Applicability and Objectives

Module 2: Scope of a BCMS

• General Overview

Module 3: Fundamental Principles and Concepts of Business Continuity

• Key Principles
  
• Develop a Comprehensive Plan
• Execute Each Step of the Action Plan
• Assess and Evaluate Outcomes
• Review and Enhance
• Overview of Business Continuity

Module 4: Clauses 4 to 8 of ISO 22301

• Introduction
• Breakdown of ISO 22301 Clauses
  
• Clause 4 – Context of the Organization
• Clause 5 – Leadership
• Clause 6 – Planning
• Clause 7 – Support
• Clause 8 – Operations

Module 5: Overview of the ISO 22301 Standard

• Introduction to ISO 22301
• Details of the 22301 Standard
• Progression of the 22301 Standard
• High-level Methodology of 22301
• Duration of Implementation Cycles

Module 6: Mandatory BCM Documents

• Clause 4.2.2
• Clause 4.3
• Clause 5.3
• Clause 6.2
• Clause 7.2
• Clause 7.4
• Clause 8.2.1
• Clause 8.2.2
• Clause 8.2.3
• Clause 8.4.1
• Clause 8.4.2
• Clause 8.4.3
• Clause 8.4.4
• Clause 8.4.5
• Clause 9.1.1
• Clause 9.3
• Clause 10.1

Module 7: Leadership

• Commitment and Leadership
• Establishing the Business Continuity Policy
• Communicating the Business Continuity Policy

Module 8: Management Roles and Responsibilities

• Overview of Roles
• Challenges to Success
• Supports for Success

Module 9: Implementation Phases of the ISO 22301 Framework

• Support from Management
• Identifying Requirements
• Business Continuity Policy and Objectives
• Supporting Documents for Management System
• Risk Assessment and Treatment
• Conducting Business Impact Analysis
• Developing Business Continuity Strategy
• Creating the Business Continuity Plan
• Training and Awareness Initiatives
• Documentation Maintenance
• Testing and Exercising
• Post-Incident Reviews
• Communication with Stakeholders
• Measurement and Evaluation
• Internal Auditing
• Corrective Actions
• Management Review

Module 10: Ongoing Improvement of a BCMS

• Concept of Continual Improvement
• Control System for BCMS
• Areas for Continuous Enhancement

Module 11: Audit

• Introduction to Auditing

Module 12: Principles of Auditing

• Fundamental Principles
• Overview of Internal Auditing
• Scope of Auditing
• PDCA Cycle

Module 13: Roles in Auditing

• Definition of Roles
• Context within the Organization
• Responsibilities of Management
• Planning, Support, and Execution
• Evaluation of Performance
• Improvement Strategies

Module 14: Auditor's Roles and Responsibilities

• Overview of Internal Auditing
• Roles and Responsibilities of Auditors
• Typical Internal Audit Process

Module 15: Skills Required for Internal Auditors

• Goals of Internal Auditing
• Essential Qualities of an Auditor
• Skills Necessary for Auditing

Module 16: Objective of Internal Auditing

• Mission of 22301
• Key Advantages of BCMS

Module 17: Audit Procedures

• Process of BCMS Auditing
• Components of an Internal Audit
• Steps in the Internal Audit Process
• Necessary Documentation
• Supporting Procedural Documentation
• Required Records and Documentation

Module 18: Audit Triangle

• Understanding the Fraud Triangle
• Strategies for Addressing the Fraud Triangle

Module 19: Techniques in Auditing

• Classifying Audit Findings
• On-Site Auditing Techniques
• Remote Auditing Methods

Module 20: Documenting Work Approach

• Steps Towards Certification
• Audits for Certification

Module 21: Best Practices in Business Continuity Control

• Overview
• BCM Policy
• Commitment from Management
• Planning for Emergencies
• Challenges to Success
• Disaster Recovery

Module 22: Planning a Business Continuity Management System (BCMS)

• Process of Planning a BCMS
• Steps for BCMS Planning

Module 23: Implementation of Business Continuity and Procedure Writing

• Effective Communication
• Scenario Development
• Scenario Delivery
• Implementing a BCMS

Module 24: Business Impact Analysis (BIA) and Risk Assessment

• Overview of Business Impact Analysis
• Conducting Risk Assessments
• Methodologies for Risk Assessment and Implementation
• Risk Treatment Strategies

Module 25: Incident and Emergency Management

• Overview of Incident and Emergency Management
• Key Elements of Crisis Management Response Processes

Module 26: Operations Management of a BCMS

• Introduction to Operations Management for a BCMS

Module 27: Business Continuity Strategies and Solutions

• General Overview
• Identification of Strategies and Solutions
• Selection of Strategies and Solutions
• Resource Requirements
• Implementation of Solutions

Module 28: Business Continuity Plans and Procedures

• General Overview
• Response Structure
• Warning and Communication Procedures
• Business Continuity Plans
• Recovery Strategies
• Evaluation of Business Continuity Documentation and Capabilities

Module 29: Performance Evaluation, Monitoring, and Measurement of a BCMS

• Evaluating Performance, Monitoring, and Measurement of a BCMS
• Key Performance Indicators (KPI)
• Identifying Organizational Indicators
• Critical Success Factors (CSFs)
• Writing Effective Critical Success Factors
• CSFs for Strategic Planning
• Performance Evaluation
• Case Study: Telefonica
• Simplifying Complexity
• Action Steps

Module 30: Developing Metrics, Performance Indicators, and Dashboards

• Development of Metrics
• KPI Dashboards
• Steps for Creating KPI Dashboards

Module 31: Internal Audit and Management Review of a BCMS

• Overview of Internal Audit
• Introduction to Management Review
• Purpose of Management Review
• Inputs for Management Review
• Outputs from Management Review

Module 32: Improvement and Implementation of a Continual Improvement Program

• Addressing Nonconformity and Corrective Action
• Continual Improvement Concepts
  
• Lifelong Learning
• Leadership Commitment
• Strategic Planning
• Seeking External Perspectives
• Continuous Development
• Key Takeaways

Module 33: Preparing for a BCMS Certification Audit

• Overview of BCMS Certification Audit
  
• Selecting a Certification Body
• Understanding Certification Audits
• Surveillance Visits

Module 34: Developing a BCMS and Business Continuity Policies

• Steps for Developing a BCMS
• Creation of Business Continuity Policies 

1. 3 days interactive instructor-led training 

2. Training provided by highly qualified, certified, and accredited trainers from PECB

3. Certificate of ISO 22301 Lead Implementer course by PECB 

4. Certification