Module 9: Continual Improvement of a BCMS

• Continual Improvement
• BCMS Control System
• Areas of Continual Improvement

Module 10: Audit and Auditing Principles

• Introduction to Audit
• Fundamental Principles of Auditing
• Scope of Auditing
• PDCA Cycle

Module 11: Auditing Roles

• What are the Roles?
• Organisational Context
• Management Responsibilities
• Planning, Support, and Operation
• Performance Evaluation
• Improvement

Module 12: Roles and Responsibilities of the Auditor

• Internal Auditing
• Roles and Responsibilities
• Typical Internal Audit

Module 13: Skills of an Internal Auditor

• Internal Auditing Goals
• Qualities of an Auditor
• Auditing Skills

Module 14: Purpose of Internal Auditing

• 22301 Mission
• Key Benefits of BCMS

Module 15: Audit Procedures

• BCMS Audit Process
• Elements of an Internal Audit
• Internal Audit Process
• Required Documentation
• Supporting Procedural Documentation
• Required Records and Documentation

Module 16: Audit Triangle

• Fraud Triangle
• Tackling the Fraud Triangle

Module 17: Auditing Techniques

• Classifying Audit Findings
• On-Site Auditing
• Remote Auditing Methods

Module 18: Work Document Approach

• Steps to Certification
• Certification Audits

Module 19: Business Continuity Control Best Practice

• Overview
• BCM Policy
• Management Commitment
• Plan How to Deal with an Emergency
• Impediments to Success
• Disaster Recovery

Module 20: Planning a Business Continuity Management System (BCMS)

• Planning a BCMS

Module 21: Implementation of Business Continuity and Writing Procedures

• Communication
• Writing a Scenario
• Delivering the Scenario

Module 22: Business Impact Analysis (BIA) and Risk Assessment

• Business Impact Analysis
• Risk Assessment
• Risk Assessment Methodologies and Implementation
• Risk Treatment Implementation

Module 23: Incident Management and Emergency Management

• Overview
  • Incident Management
  • Emergency Management
• Key Elements of Crisis Management Respond Process

Module 24: Operations Management of a BCMS

• Introduction to Operations Management of a BCMS

Module 25: Business Continuity Strategies and Solutions

• General
• Identification of Strategies and Solutions
• Selection of Strategies and Solutions
• Resource Requirements
• Implementation of Solutions

Module 26: Business Continuity Plans and Procedures

• General
• Response Structure
• Warning and Communication
• Business Continuity Plans
• Recovery
• Evaluation of Business Continuity Documentation and Capabilities

Module 27: Performance Evaluation, Monitoring, and Measurement of a BCMS

• Performance Evaluation, Monitoring, and Measurement of a BCMS
• Key Performance Indicators (KPI)
• Identifying Indicators of an Organisation
• Critical Success Factors (CSFs)
• Writing an Effective Critical Success Factor
• CSFs for Strategic Planning
• Performance Evaluation
• Case Study: Telefonica
• Cutting Complexity
• Taking Actions

Module 28: Development of Metrics, Performance Indicators, and Dashboards

• Development of Metrics
• KPI Dashboards
• Steps to Create KPI Dashboards

Module 29: Internal Audit and Management Review of a BCMS

• Internal Audit
• Introduction to Management Review
• Purpose of Management Review
• Management Review Input
• Management Review Outputs

Module 30: Improvement and Implementation of a Continual Improvement Program

• Nonconformity and Corrective Action
• Continual Improvement
  • Lifelong Learning
  • Tone from the Top
  • Let’s have a Plan
  • Second Opinion
  • Catching up
  • Takeaway

Module 31: Preparing for a BCMS Certification Audit

• BCMS Certification Audit
  • Choose a Certification Body
  • Certification Audits
  • Surveillance Visits

Module 32: Development of a BCMS and Business Continuity Policies

• Development of a BCMS
  • Steps for Development of a BCMS
• Business Continuity Policies

Module 33: Purpose of Management Review

• Conducting an Audit
• Core Audit Principles and Concepts
• Evidence and Risk
• Preparation of an Audit
• BCMS Documentation Audit
• Opening Meeting

Module 34: Directing an ISO 22301 Audit

• Communication During the Audit
• Audit Actions
• Findings from the Audit
• Components of the Documentation
• Supporting Procedural Documentation
• Closing Meeting
• Assessing Corrective Action Plans
• ISO 22301 Surveillance Audit
• Internal Audit Management Programme
• Second Party Audits

Module 35: Manage Auditing Teams, Improve Analysing, and Reporting Skills

• Introduction
• Management Audit Procedure
• Improvement Analysing
• Data Analyses
• Root Cause Analysis
• Reporting Skills