This checklist follows the ISO 22301:2019 clauses, from business impact analysis to the exercise programme, with a separate documentation checklist.
Prepared using the F-Q2 Audit Checklist form template.
The files are supplied in fully editable MS Word format and can be easily customised, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Checklist number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested audit checklists. No junk, jargon or unnecessary questions. Simple and usable audit checklists
developed over 25 years through practical use in the real world.
Further guidance on business continuity and internal auditing:
Download these audit checklists with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to these files please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. These checklists are also included in the ISO 22301 Toolkit and the integrated toolkits that include ISO 22301, so the toolkit route gives you these files plus everything else you need in one download.
If you'd like hands-on help completing your internal audits or training your internal auditors, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
ISO 22301:2019 Internal Audit Checklist Template
A full clause internal audit checklist for ISO 22301:2019, working through the business continuity standard from clause 4.1 to 10.2 with space to record the evidence viewed, responses and findings. It is set out on the F-Q2 Audit Checklist format, with the scope, criteria, auditor and date recorded at the top and space against each clause to record the evidence viewed, responses and findings.
A second checklist covers the documentation ISO 22301 requires, listing the mandatory documents and records with the clause each one comes from.
Note: ISO clause checklists only include the clause numbers and short prompts for each clause (due to copyright reasons) and therefore a full version of the ISO standard is required to be used in conjunction with these checklists.
What the Checklists Cover
- Context of the organisation - issues, interested parties including legal and regulatory requirements, scope and the business continuity management system
- Leadership - leadership and commitment, the business continuity policy and roles
- Planning - risks and opportunities, business continuity objectives and planning changes
- Support - resources, competence, awareness, communication and documented information
- Operation - business impact analysis and risk assessment, business continuity strategies and solutions, plans and procedures, the exercise programme, and evaluation of business continuity documentation and capabilities
- Performance evaluation and improvement - monitoring and measurement, internal audit, management review, nonconformity and corrective action, and continual improvement
- Documentation - the mandatory documents and records
Using the Checklists
The checklists can be used when first setting up an ISO 22301 management system to show that every clause has been met, and then as the record of internal audits. Record the scope and criteria at the top, then work through each clause, noting the evidence viewed and any findings, and follow findings up through corrective action. Audits can be spread across the year, with the full clause checklist covering the whole standard over the audit programme. The operation clauses carry most of the evidence, so allow the most time for the business impact analysis, the plans and the exercise records.
Planning the Audit
Have the business impact analysis, the risk assessment, the business continuity plans, exercise records and the record of the last management review to hand, along with the standard itself.
Completed Example
A completed example of the ISO 22301:2019 checklist is available with an alphaZ Subscription.
Included in the ISO 22301 Toolkit
These checklists are part of the ISO 22301 Toolkit and the integrated toolkits that include ISO 22301.
Related Documents
Documents that work alongside these checklists:
Would you rather we did it for you?
Our Internal Audit Training and Support service works through your internal audits with you while training your own people as internal auditors, so the audits are completed and the skills stay in the business.
Internal Audit Training and Support