ISO 22301 Lead Auditor training enables you to develop the necessary expertise to perform a Business Continuity Management System (BCMS) audit by applying widely recognized audit principles, procedures and techniques. During this training course, you will acquire the knowledge and skills to plan and carry out internal and external audits in compliance with ISO 19011 and ISO/IEC 17021-1 certification process.
Based on practical exercises, you will be able to master audit techniques and become competent to manage an audit program, audit team, communication with customers, and conflict resolution.
Course objectives:
Audience:
Prerequisites: 
The course begins with an overview of the course objectives and structure, providing participants with a clear understanding of the training pathway and certification expectations.
Participants are introduced to relevant standards and regulatory frameworks that influence business continuity and organisational resilience. The certification process is explained to clarify requirements and assessment criteria.
The day continues with an exploration of the fundamental principles of Business Continuity Management Systems (BCMS) and a detailed overview of ISO 22301 requirements. Participants gain a solid understanding of how a BCMS is structured and how it supports organisational preparedness and operational continuity.
Day two focuses on fundamental audit concepts and principles applicable to ISO 22301. Participants explore auditing ethics, independence, objectivity and structured methodologies.
An evidence-based audit approach is introduced, emphasising how to collect, verify and evaluate audit evidence effectively.
The session continues with guidance on initiating the audit, conducting a Stage 1 audit and preparing for the Stage 2 on-site audit.
The first part of the Stage 2 audit process is introduced, helping participants understand how to structure and plan on-site audit activities.
This day is dedicated to the practical execution of on-site audit activities. Participants continue with Stage 2 audit activities and learn how to conduct interviews, review documentation and evaluate operational controls.
Communication during the audit is emphasised, ensuring participants understand how to interact professionally with auditees and management.
Audit procedures and the creation of audit test plans are explored to ensure systematic evaluation of conformity.
The day concludes with drafting audit findings and non-conformity reports, focusing on clarity, objectivity and alignment with ISO 22301 requirements.
Day four focuses on formal audit closure activities. Participants learn how to document the audit and perform quality reviews of audit findings.
The process of formally closing the audit is addressed, including conducting closing meetings and presenting conclusions to stakeholders.
Participants examine how to evaluate corrective action plans and assess their adequacy.
The benefits of the initial audit are discussed, along with managing an internal audit programme to ensure ongoing conformity and continual improvement.
The day also covers competence requirements and evaluation of auditors to maintain professional standards.
The final day is dedicated to exam preparation and completion of the certification examination. Participants review key topics and clarify complex concepts before sitting the official exam in accordance with certification body procedures.

After successfully completing the exam, you can apply for the credentials shown on the table below. You will receive a certificate once you comply with all the requirements related to the selected credential. For more information about ISO 22301 certifications and the PECB certification process, please refer to the Certification Rules and Policies.
The requirements for PECB Auditor Certifications are:

Exam
The exam is will take place at the end of the course on onsite classroom courses
For Virtual courses we will send out a voucher that gives you access to an online exam. This can be booked and taken home monitored by a proctor via camera. More information about the exam rules will be send from PECB.
Test details:
As the exam is an Multiple Choice Open book exam, candidates are authorized to use:
Examination rules and policies
RECEIVE YOUR EXAM RESULTS
Results will be communicated by email in a period of 6 to 8 weeks, after taking the exam. The results will not include the exact grade of the candidate, only a mention of pass or fail.
Candidates who successfully complete the examination will be able to apply for a certified scheme which is explained in the course description.
In the case of a failure, the results will be accompanied with the list of domains in which the candidate had failed to provide guidance for exams’ retake preparation.
Candidates, who disagree with the exam results, may file a complaint by writing to examination@pecb.com or through PECB ticketing system.
There is no limit on the number of times a candidate may retake an exam. However, there are some limitations in terms of allowed time-frame in between exam retakes, such as:
After the fourth attempt, a waiting period of 12 months from the last session date is required, in order for candidate to sit again for the same exam. Regular fee applies.
For the candidates that fail the exam in the 2nd retake, PECB recommends to attend an official training in order to be better prepared for the exam.
To arrange exam retakes (date, time, place, costs), the candidate needs to contact Glasspaper.

Duration: 5 days
Price: 29 900 NOK
Language: English
Format: Open course and corporate training
Hva lærer jeg på dette kurset?
Du lærer hvordan du planlegger, gjennomfører, rapporterer og følger opp revisjoner av et Business Continuity Management System i tråd med ISO/IEC 22301.
Hva kreves for å delta?
Det anbefales at du har god kjennskap til ISO/IEC 22301, enten gjennom Foundation-kurs eller praktisk erfaring med business continuity og beredskapsarbeid.
Hvordan gjennomføres eksamen?
Eksamen gjennomføres enten fysisk på kursstedet eller online med voucher og online eksamensvakt, avhengig av kursformat.
Hva skjer hvis jeg ikke består første eksamen?
Du får vanligvis ett nytt eksamensforsøk som gjennomføres online i henhold til sertifiseringsorganets regler.
Får jeg ekstra tid på eksamen?
Ja, ekstra tid kan gis dersom engelsk ikke er ditt morsmål, i tråd med sertifiseringsreglene.
Hvilken sertifisering får jeg?
Etter godkjent eksamen oppnår du PECB Certified ISO 22301 Provisional Auditor sertifiseringen. For å få full sertifisering kan det også stilles krav til dokumentert arbeidserfaring. Sjekk tabellen under sertifisering for mer informasjon.
Får jeg ISO-standaren?
Nei, men du får tilgang til en lånestandar som du kan bruke under kurset og eksamen.
Hva er forskjellen på Lead Implementer og Lead Auditor?
Lead Implementer fokuserer på å etablere og drifte et BCMS, mens Lead Auditor fokuserer på å evaluere og revidere systemet i henhold til ISO 22301.
Er dette kurset relevant for ledere?
Ja, kurset er relevant for ledere, internrevisorer, compliance-ansvarlige og fagpersoner med ansvar for revisjon, kvalitet og kontinuitetsstyring.
Kan jeg ta dette kurset som e-læring eller selvstudium?
Ja, dette kurset tilbys også som e-læring. Påmelding kan registreres på høyre side.
