ISO 22301 LA study guide
ISO 22301 LA · Work through your exam, one topic at a time.
The PECB Certified ISO 22301 Lead Auditor credential is a professional certification for people who audit business continuity management systems (BCMS) against ISO 22301. PECB states that the ISO 22301 Lead Auditor training course equips participants to audit BCMSs based on best audit practices and principles, and that passing the exam earns the internationally recognized credential as evidence of expertise to audit organizations' compliance with ISO 22301 requirements. The ISO 22301 LA study guide has 7 sections and about 1,927 words.
01Fundamental Principles and Concepts of a Business Continuity Management System
Domain 1 tests the vocabulary and logic that every later clause depends on: what a BCMS is, how it differs from emergency response or IT disaster recovery, and how BIA outputs drive strategy, plans and exercises. Business continuity is the capability to continue delivering products and services at acceptable predefined levels during and after disruption.
343 words, about 2 min02Business Continuity Management System Requirements
Domain 2 tests clause-by-clause requirements of ISO 22301:2019 (Clauses 4–10) and whether an auditor can distinguish a conforming system from a documented but non-operational one. 4 Context: external and internal issues, interested parties and their requirements, BCMS scope, processes.
286 words, about 1 min03Fundamental Audit Concepts and Principles
Domain 3 tests ISO 19011:2018 principles and the auditor's professional judgement. You must know what an audit is, what evidence is, how findings are classified, and where independence and ethics bite.
266 words, about 1 min04Preparing an ISO 22301 Audit
Domain 4 tests whether you can turn an audit programme into a risk-based audit plan: scope, criteria, sampling, time, roles and logistics, supported by document review. Confirm audit objectives, scope, criteria, sites, dates and interfaces with the auditee.
259 words, about 1 min05Conducting an ISO 22301 Audit
Domain 5 tests evidence gathering and on-the-spot judgement: opening meeting, interviews, observation, sampling, documenting findings and maintaining control of the audit. Open with purpose, scope, criteria, method, confidentiality and safety; confirm logistics.
249 words, about 1 min06Closing an ISO 22301 Audit
Domain 6 tests how findings become conclusions: closing meeting, report, nonconformity classification and follow-up, within ISO 19011 and certification-body expectations. Consolidate findings; verify each has a requirement, evidence and significance.
249 words, about 1 min07Managing an ISO 22301 Audit Programme
Domain 7 tests the difference between an audit programme and an audit plan, and how to schedule, resource, monitor and improve a programme over time. An audit programme is the set of audits planned for a defined period, with objectives, scope, risks, schedule, resources and competence requirements.
275 words, about 1 min