ISO 22301 Foundation

ISO 22301 Foundation Course deepens the practical application of business continuity concepts and requirements, clarifying how ISO 22301 translates into the structure and operation of a BCMS. The training supports the transition from conceptual understanding to the organised application of requirements in an organisational context.

Register
Companies: request a proposal

Quick Access:   Introduction· Why this course exists· What this course enables· Frameworks and standards· Value· Objectives· Target audience· Programme· Exam & Certification· Other information· Benefits· Logistics· FAQs· Registration

Upcoming dates

Confirmed dates.
Synchronous, live training. Interaction with the trainer and the group.

26 March
Live Online • next edition
8 June
Live Online • base price
Duration: 2 days / 16h
Language: available in Portuguese or English
Training: practical and case-study based
Exam: 1h
PROFESSIONAL LEVEL — practical application of methods in a professional context.

Why this course exists

To create a practical foundation and a common language in ISO 22301, BCMS and implementation/operationalisation through a case study.

Many organisations start business continuity initiatives without a consistent basis of concepts, terminology and operational understanding of the structure and requirements of ISO 22301.

This course establishes a fundamental and applicable level of knowledge, supported by theoretical and practical sessions and by a case study, enabling professionals from different areas to understand, apply and support the implementation and operation of a BCMS, while also framing essential audit principles based on ISO 19011.

What this course enables you to do

Understand

Master fundamental business continuity concepts and interpret ISO 22301 in the context of a BCMS.

Apply

Apply concepts and requirements in a real scenario through a case study, with high-level guidance for implementation.

Correlate

Relate the ISO 22300 family of standards, including ISO 22313, ISO/TS 22317, ISO/TS 22318, ISO/TS 22331, ISO/TS 22332 and ISO 22398, and other relevant references.

Audit (fundamentals)

Understand concepts, principles and best practices for auditing a BCMS, based on ISO 19011, to support audits and continuous improvement.

Frameworks, standards and best practices addressed throughout the course

ISO 22301 — requirements & structure
BCMS — fundamental concepts
Clause-by-clause overview
ISO 22313 — guidance for use/implementation
ISO/TS 22317 — BIA
ISO/TS 22318 — supply chain
ISO/TS 22331 — strategy
ISO/TS 22332 — plans and procedures
ISO 22398 — exercises
ISO 19011 — audit principles
Compliance, related legislation and regulation
Correlated best practices

Value for the organisation

  • Creates a common and applicable basis for teams involved in the implementation, operation and continuous improvement of a BCMS.
  • Accelerates internal alignment on ISO 22301 requirements, processes and typical deliverables, reducing noise and divergent interpretations.
  • Supports preparation for ISO 22301 certification, strengthening understanding of requirements and supporting standards from the ISO 22300 family.
  • Introduces audit fundamentals based on ISO 19011 to improve coordination between internal teams and internal/external audits.

Introduction

The ISO 22301 Foundation course is based on the international standard ISO 22301 and follows a practical approach supported by a case study, in which participants are invited to apply business continuity concepts and requirements in a real scenario.

The course prepares participants to support the implementation and operation of a Business Continuity Management System (BCMS), and provides fundamental knowledge on audit concepts, principles and best practices based on ISO 19011.

As participants progress through the course topics, the main supporting standards from the ISO 22300 family are presented, including, among others, guidance on the use of ISO 22301 (ISO 22313), guidance for Business Impact Analysis (ISO/TS 22317), supply chain continuity (ISO/TS 22318), strategy (ISO/TS 22331), plans and procedures (ISO/TS 22332) and exercise programmes (ISO 22398), as well as additional relevant references, including best practices, legislation and regulation.

This course prepares participants for the Certified Business Continuity 22301 Foundation personal certification.

This Training Plan and all associated documents are protected by Copyright and registered as a literary work with IGAC.

General Objectives

At the end of this course, participants will be able to:

  • Understand the fundamental concepts of business continuity and the main requirements of ISO 22301.
  • Know and understand the correlation between standards in the ISO 22300 family, including ISO 22301, ISO 22313 and related standards, and other applicable best practices, legislation and regulation.
  • Support an organisation in the implementation and operation of a BCMS based on ISO 22301, either as part of a team and/or during an implementation project.
  • Understand the fundamental concepts and principles of auditing based on ISO 19011.
  • Understand the various sources of requirements related to business continuity, in order to discuss relevant matters with peers regarding the maintenance and improvement of business continuity within the organisation.
  • Support the organisation in achieving and maintaining ISO 22301 certification.
  • Possess the knowledge required to successfully take the Certified Business Continuity 22301 Foundation certification exam and obtain a personal certification.

Target Audience

  • Consultants, auditors, managers or risk professionals in business continuity and/or IT.
  • Executives and senior managers responsible for ensuring alignment and value delivery from business continuity to the organisation.
  • Professionals responsible for Business Continuity and/or IT Governance within the organisation.
  • Business continuity, IT, information security, business or other professionals involved in establishing, implementing, operating and/or continuously improving a BCMS based on ISO 22301.
  • Anyone wishing to learn the fundamentals of ISO 22301.

Prerequisites

There are no mandatory formal prerequisites. However, other specific requirements may apply, where relevant, depending on the quotation or proposal presented.

Note: All participants should have a copy of the ISO 22301:2019 standard, in English or Portuguese, licensed to themselves or to their company.

Programme

Introduction to the course
Introduction to business continuity, ISO 22301 and related best practices
  • Business continuity standards and compliance requirements
  • Moving towards ISO 22301 certification
  • Business continuity fundamentals
  • Presentation and overview of BCMS requirements (Part 1 — Clauses 4 to 7)
  • Business continuity context
  • Leadership and commitment
  • Planning — actions to address risks and opportunities, objectives and changes to the BCMS
  • Support
BCMS and audit concepts and principles
  • Presentation and overview of BCMS requirements (Part 2 — Clauses 8 to 10)
  • Operation — planning and control
  • Operation — Business Impact Analysis (BIA) and risk assessment
  • Operation — continuity strategies and solutions
  • Operation — continuity plans and procedures
  • Operation — exercise programme
  • Operation — evaluation of continuity documentation and capabilities
  • Performance evaluation
  • Improvement
  • Introduction to audit concepts and principles based on ISO 19011

Exam(s) and Certification

Exam “Certified Business Continuity 22301 Foundation”

The exam covers the following competence domains:

  • Domain 1: Business continuity fundamentals
  • Domain 2: Requirements of the ISO 22301 Business Continuity Management System
  • Domain 3: Fundamental audit concepts and principles based on ISO 19011

 

Language(s): Portuguese and English.
Duration: 1 hour.
Format: Multiple choice.
Number of questions: 40 questions.
Pass mark: 260/400 points.
Results: Pass or Fail.
Issuing entity: Behaviour (legal entity), through its certification service Behaviour Certification Services.
Retake: 1 free retake within a maximum period of 2 months after the result of the initial exam.

Certification

After successfully completing the exam and accepting or signing the applicable agreement and Code of Ethics, the candidate achieves the credential Certified Business Continuity 22301 Foundation.

A Certificate and a Digital Certification Badge will be issued to participants who successfully complete the certification exam and satisfy all requirements of the certification for which they are applying.

The personal certification programme Certified Business Continuity 22301 Foundation is developed and maintained in accordance with the international standard ISO/IEC 17024.

Certification programmes are valid only for individuals, and the award and maintenance of certification depend on the exam result, professional experience and compliance with the applicable agreement and Code of Ethics.

If the professional does not comply with the agreement or the Code of Ethics, the certification is not granted or is revoked.

Other Information

General Information
  • Training available in Portuguese or English.
  • Online training materials available in English, with online access, in accordance with the awarded conditions.
  • Behaviour digital Training Attendance Certificate with 16 CPD/CPE credits.
  • Online Certification Exam, in Portuguese or English. The exam may be taken up to 2 months from the course start date.
  • If the candidate does not pass the exam, they are entitled to one free retake within a maximum period of 2 months from the release date of the initial exam result.
  • Digital Certification Diploma and Digital Certification Badge after successfully passing the exam and completing the application process. This process has no associated cost.
Trainer(s)
The trainers are consultants and auditors with experience in implementation, auditing and training in business continuity management systems based on ISO 22301 and the ISO 22300 family, with a focus on ISO 22313 and related standards and best practices, including audit guidance based on ISO 19011.

Benefits

View benefits
  • ISO 22301 defines requirements for an auditable and internationally recognised BCMS.
  • Supports organisational certification and international recognition, contributing to maturity, trust and optimisation of operational resilience capabilities.
  • The course is based on the BEHAVIOUR pedagogical model, with a personal certification programme in accordance with ISO/IEC 17024.
  • Addresses the knowledge required to support implementation and operation of a BCMS and provides an overview of the main supporting standards in the ISO 22300 family, including ISO 22313, ISO/TS 22317, ISO/TS 22331, ISO/TS 22332 and ISO 22398.
  • The exam is supervised by an official BEHAVIOUR administrator.
  • In case of failure, there is 1 free retake within a maximum period of 2 months after the initial exam result.

Logistics

Useful information
  • Live Online (synchronous time): 09h30–17h30 (Lisbon time), with lunch break and short breaks
  • Classroom (synchronous time): 09h30–17h30 (Lisbon time), with lunch break and short breaks
  • 14 hours of synchronous training, distributed across 2 consecutive days
  • Estimated 2 hours of guided autonomous work, intended for content consolidation and exam preparation, carried out flexibly outside synchronous sessions
  • Requirements: computer with stable internet, browser, PDF reader and audio/video
Hotels in Lisbon
Find out where you can stay in Lisbon, near Behaviour, for classroom training.

Frequently Asked Questions

Objective answers to the most common questions about the Foundation level and the framing of this course.

Is it mandatory to have completed the Essentials course first?
No. The Essentials level focuses on structured understanding of key concepts and fundamental principles. The Foundation level deepens the normative structure and respective requirements, providing a more detailed understanding that enables participants to understand, support and integrate implementation initiatives in an informed and consistent way.
Does this course address practical application?
Yes, from a perspective of framing and structured understanding of the requirements, controls and domains of the standard or framework, enabling participants to support implementation or audit teams based on solid normative knowledge.
Is the course more conceptual or technical?
The course has a conceptual and normative focus. It privileges understanding of the architecture of the standard or framework, the logic of its requirements, controls and domains, establishing a structured basis for implementation, audit or technical specialisation training.
Does this course replace implementation or audit training?
No. The Foundation course does not replace Lead Implementer or Lead Auditor courses. It functions as a structuring knowledge base, enabling those training paths to be attended with greater conceptual clarity, normative rigour and pedagogical effectiveness.
In which professional contexts is this course most useful?
It is particularly useful for professionals who:

  • need to understand the standard or framework to interact with technical teams;
  • participate in or follow compliance, governance or audit projects;
  • wish to frame themselves technically before assuming implementation, audit or decision-making responsibilities.
Does this course prepare participants to manage a business continuity system?
Yes. The ISO 22301 Foundation course helps participants understand the requirements and logic of a business continuity management system, making it suitable to support or integrate teams, but not to assume leadership responsibilities without additional training.

For general questions about registration, delivery modes, exams, certification and recertification, please consult the BEHAVIOUR® FAQs.

Registration

Complete the form to request your registration for the preferred edition. Check the upcoming dates.

Contact name
=

Request more information

If you would like help to frame the course within your professional or organisational context, contact us and we will indicate the most suitable path.
Request Information

Companies: request a proposal

For team registrations, we provide volume conditions and a proposal tailored to the organisational need.
Request Proposal

This course may be attended by individual professionals. It may also be integrated into foundation paths for teams involved in the implementation, operation or strengthening of a business continuity management system.