ISO 22301 LA study plan

Explain, in writing, how the PDCA cycle drives a BCMS and where clause 4 (context), clause 5 (leadership) and clause 6 (planning) sit within it

Differentiate business continuity from disaster recovery, crisis management and incident management using three self-written examples

Map every requirement of clauses 4 to 6 of ISO 22301 to a one-line audit question you could ask a business continuity manager

Define business impact analysis (BIA) and risk assessment inputs and outputs well enough to describe the sequence from BIA to strategy selection to solution implementation

Build a one-page glossary of at least 20 ISO 22301 terms (MTPD, RTO, MBCO, BCP, disruption, continuity strategy) with your own definitions

Work through clauses 7 to 10 (support, operation, performance evaluation, improvement) and list the documented information each clause requires

Trace how a completed BIA and risk assessment feed continuity strategies, plans and procedures in a worked scenario

Identify the exercise and test programme requirements and distinguish exercise, test and rehearsal

Write five short scenario answers explaining how a nonconformity in clause 8.3 (business continuity strategies and solutions) would be raised and closed

Draft a checklist of the minimum documented information an auditor would expect to see for a stage 2 audit

State the seven audit principles of ISO 19011 and give a concrete example of how each principle affects auditor behaviour

Distinguish first-party, second-party and third-party audits and explain the role of certification bodies versus internal audit

Explain the purpose of an audit programme, audit objectives, audit scope, audit criteria and audit evidence

Outline how competence, independence and impartiality are managed for a certification audit team

Describe the purpose of a stage 1 and stage 2 audit and the difference in evidence each seeks

Draft a complete audit plan for a hypothetical organisation covering objectives, scope, criteria, schedule, roles and reporting arrangements

Prepare an opening meeting agenda and a document review checklist for a stage 1 audit

Write at least 15 audit checklist questions mapped to clauses 4 to 10, phrased to seek evidence rather than yes/no answers

Identify how to use the BIA, risk assessment and continuity plan as audit criteria evidence during preparation

Explain how to select a sample of processes and sites for a multi-site audit and justify the sampling logic

Describe the purpose and structure of the opening meeting and the conduct rules for interviews with auditees

Explain how to gather, verify and record audit evidence and how to distinguish evidence from opinion

Classify findings as conforming, observation, minor nonconformity, major nonconformity or opportunity for improvement with worked examples

Write three nonconformity statements that cite the requirement, the objective evidence and the gap

Explain how to handle an auditee who challenges a finding and when to escalate

Explain the content and purpose of the closing meeting and the auditor's role in presenting findings

Describe how an audit report is structured and what it must contain to be usable by the client and certification decision maker

Explain the corrective action process, root cause analysis and how an auditor verifies effectiveness of corrective action

Distinguish suspension, withdrawal and reduction of scope of certification and the circumstances that trigger each

Describe the audit follow-up process and how to close out findings on time

Explain how an audit programme is established, implemented, monitored and reviewed, including the role of risk in scheduling

Describe how auditor competence is evaluated and maintained and how audit team performance is reviewed

Distinguish the roles of the audit programme manager, lead auditor, auditor and technical expert

Explain how to handle a complaint or appeal against an audit finding or decision

Outline how records of the audit programme are retained and what evidence demonstrates programme effectiveness

Complete a full timed mock exam and score at least 75 percent overall

Review every missed question and write a one-line explanation of the correct reasoning for each

Revisit the weakest two domains identified in the mock and re-read the relevant clauses

Practise writing two nonconformity statements and one audit plan under time pressure

Confirm exam-day logistics and build a final one-page revision sheet of key terms and clause numbers