ISO 22301 LA
PECB Certified ISO 22301 Lead Auditor
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The PECB Certified ISO 22301 Lead Auditor credential is a professional certification for people who audit business continuity management systems (BCMS) against ISO 22301. PECB states that the ISO 22301 Lead Auditor training course equips participants to audit BCMSs based on best audit practices and principles, and that passing the exam earns the internationally recognized credential as evidence of expertise to audit organizations' compliance with ISO 22301 requirements. The course is aimed at auditors who want to perform and lead BCMS audits, managers and consultants who want to master the BCMS audit process, individuals responsible for maintaining conformity with BCMS requirements, technical experts preparing for BCMS audits, and expert advisors in business continuity management. The exam is a multiple-choice examination that PECB says fully meets the requirements of its Examination and Certification Program, and it covers seven competency domains: fundamental principles and concepts of a BCMS; BCMS requirements; fundamental audit concepts and principles; preparing an ISO 22301 audit; conducting an ISO 22301 audit; closing an ISO 22301 audit; and managing an ISO 22301 audit program. Training runs five days, with the certification exam on day five, and combines lectures, a case study with role-playing and discussions, and multiple-choice quizzes, some scenario-based, to prepare for the exam. Certification and examination fees are included in the training course price, and candidates who pass can apply for a credential tier by meeting its experience requirements.
What you'll study
About ISO 22301 LA preparation
What does the ISO 22301 Lead Auditor exam cover?
PECB states the exam covers seven competency domains: fundamental principles and concepts of a BCMS, BCMS requirements, fundamental audit concepts and principles, preparing an ISO 22301 audit, conducting an ISO 22301 audit, closing an ISO 22301 audit, and managing an ISO 22301 audit program. The course objectives map directly to these, so study each domain in order.
How long is the training course and when is the exam?
The course agenda runs five days. Days 1 to 4 cover the BCMS and ISO 22301, audit principles and audit initiation, on-site audit activities, and closing of the audit. Day 5 is the certification exam. Confirm specific session dates and delivery mode with your training provider, since PECB lists classroom and live virtual sessions.
What are the prerequisites before attending?
PECB requires participants to have a fundamental understanding of business continuity concepts and a comprehensive knowledge of BCMS audit principles. There is no stated requirement to hold a prior certification, but arriving without audit vocabulary will make the case study exercises and scenario-based quizzes hard to follow.
Is the exam multiple choice, and how do I prepare?
PECB describes the exam as multiple choice and says the course contains multiple-choice quizzes, some scenario-based, designed to help prepare for the certification exam. Course materials exceed 400 pages and include practical examples, exercises, and quizzes. Work through the quizzes repeatedly and be able to justify why each wrong option fails.
What happens if I fail the exam?
Candidates who completed the training course but failed the exam may retake it once for free within a 12 month period from the initial date of the exam. Plan your retake early, since the free attempt is tied to that 12 month window, and use the interval to revisit the domains where you scored weakest.
Which credential can I apply for after passing?
PECB lists four tiers: Provisional Auditor, which requires no experience; Auditor, requiring two years with one year in business continuity management and 200 hours of audit activities; Lead Auditor, requiring five years with two years in business continuity management and 300 audit hours; and Senior Lead Auditor, requiring ten years with seven years in business continuity management and 1,000 audit hours. All require signing the PECB Code of Ethics.
What counts as valid audit activity for certification?
PECB says valid audit activities must follow best audit practices and include planning an audit, preparing working papers or test plans, managing an audit program, reviewing documented information, conducting opening and closing meetings and interviews, collecting and analyzing evidence, documenting nonconformities, preparing reports, following up on nonconformities, and leading an audit team. Keep a log evidencing these tasks.
Are exam fees extra, and do I get CPD credit?
PECB states certification and examination fees are included in the training course price. Participants who attend receive an attestation of course completion worth 31 CPD (Continuing Professional Development) credits. Attending the course alone does not confer the credential; you must still pass the exam and meet the requirements of the tier you apply for.
What is the most common way candidates underprepare?
Candidates often memorize ISO 22301 clause content but neglect the audit process side, even though domains 3 to 7 concern audit concepts, preparation, conduct, closure, and program management. PECB ties the course to ISO 19011 guidelines and ISO/IEC 17021-1 requirements, so study how audits are planned, evidenced, reported, and followed up, not just the standard's requirements.