The course teaches you to plan and lead BCMS certification audits under ISO 22301 and ISO 19011: scoping, evidence, interviews, formulating findings, managing the audit team and following up nonconformities.
The course walks through the full professional audit cycle: planning and scoping, preparing the team, document review, the opening meeting, on-site execution with sampling and interview techniques, formulating findings and nonconformities, the closing meeting, report writing and follow-up of corrective action plans.
The approach combines ISO 22301 with ISO 19011 and includes discussion of how certification bodies evaluate auditor performance under ISO 17021-1. Participants practise on an end-to-end case study that reproduces real decisions: how to set the scope, how to handle contradictory evidence, and how to write defensible findings.
By the end, the emphasis is on judgement rather than checklists. The weakest ISO 22301 audits verify that documents exist without questioning operational viability, so the course deliberately trains auditors to distinguish "having a plan" from "being able to execute it under pressure".
The weakest ISO 22301 audits are those that verify documentary existence without questioning operational viability. The course trains auditors who distinguish between "having a plan" and "being able to execute it under pressure".
“Lead Auditor develops the judgement that separates a solid certification audit from a mere document review.”
This two day foundation course introduces the structure, intent, and practical application of a Business Continuity Management System aligned with ISO 22301:2019. Participants learn how continuity requirements fit into governance, risk, and operational control without treating BCMS as a standalone.
View courseThis intensive 4-day training prepares participants to implement and manage a Business Continuity Management System (BCMS) compliant with ISO 22301:2019. It covers planning, deployment, monitoring, updates, and continual improvement, with a focus on context analysis, business impact analysis, risk.
View courseThis course prepares participants to design, implement, test, and improve an operational resilience management framework. It addresses the growing pressure to maintain critical services through cyber incidents, supplier failures, technology outages, regulatory scrutiny, and physical disruptions. Participants learn how to identify critical business services, set impact tolerances, assess risk, and coordinate response and recovery decisions. Abilene Academy teaches through consultant-led case work, realistic evidence review, and exam-focused coaching built from field practice. It is designed for resilience leaders, risk managers, business continuity professionals, internal consultants, and managers responsible for disruption readiness.
View courseIt is designed for auditors who lead BCMS certification audits, for business continuity audit managers and consultants, for BCMS compliance professionals, and for technical experts involved in audits.
The exam is multiple-choice, lasts three hours and requires a minimum score of 70% to pass. It covers seven domains spanning both the BCMS under ISO 22301 and the full audit lifecycle, and leads to a professional certification valid for three years.
ISO 22301 defines the requirements of the BCMS being audited. ISO 19011 sets the audit methodology. ISO 17021-1 governs the conduct of certification bodies. All three apply in every professional BCMS audit.
An ISO 22301 audit verifies BCMS effectiveness and conformity. It identifies gaps and supports continual improvement.
Browse all FAQs →
Full knowledge base
Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.