This lesson develops practical capability in BCMS Requirements, Audit Principles, Programme, Scope, and Criteria within ISO 22301 Lead Auditor Training. Activities reflect a distributed organization with critical services, suppliers, recovery sites, crisis teams, and continuity obligations, so requirements, decisions, evidence, findings, and improvement actions remain connected.
The lesson supports the wider objective to plan and conduct ISO 22301 business continuity management system audits.
The instructor demonstrates the bcms requirements, audit principles, programme, scope, and criteria workflow, identifies applicable inputs and responsibilities, records checkpoints in BCMS audit programme and plan, and contrasts the accepted state with a condition where scope excludes a critical supplier.
Complete a controlled implementation, audit, analysis, or foundation exercise for BCMS Requirements, Audit Principles, Programme, Scope, and Criteria. Establish scope and criteria, collect or create evidence, examine “scope excludes a critical supplier,” reach a supported conclusion, and preserve the result in BCMS audit programme and plan.
Separate missing evidence from ineffective practice, and distinguish a documentation issue from a control, process, governance, or competence failure. Use BCMS audit programme and plan to trace the earliest divergence. Treat “scope excludes a critical supplier” as a hypothesis until the response is validated against the relevant requirement and intended outcome.
Learners can apply BCMS Requirements, Audit Principles, Programme, Scope, and Criteria, explain the reasoning, and defend the result through BCMS audit programme and plan.