How much does ISO 22301 training cost in Australia?
ISO 22301 Foundation is $600 + GST self-paced, or $680 + GST with guided eLearning. There is no separate ISO 22301 exam cost — the official PECB examination voucher is included, and so is a second attempt. You also get 12 months of myPECB access and 14 CPD credits. The course is delivered as ISO 22301 certification online — self-paced through the official PECB platform, sat from anywhere in Australia.
Compare that against classroom-based ISO 22301 training in Australia, which commonly runs from $2,695 for a three-day Foundation course and past $3,295 for Lead level — before travel and time away from work. Two things are worth checking on any quote. First, which body issues the certificate. Aegentra Academy is an official PECB authorised training partner, and Accreditation is program- and scope-specific; verify the applicable credential before enrolment. Several Australian business continuity courses certify against IRCA, the BCI (CBCI) or GAQM instead — those are different credentials, not cheaper versions of the same one. Second, whether the exam is included. A course fee with the examination billed separately is not the figure you end up paying.
What is a business continuity management system?
A BCMS is the management system that keeps an organisation delivering its critical activities through disruption — and gets it back to normal afterwards. ISO 22301:2019 is the international standard that defines one, and unlike some standards in this space it is certifiable: an accredited certification body audits it and issues a certificate.
The vocabulary matters more here than in most standards, because the terms are the deliverables:
- Business impact analysis (BIA) — working out which activities actually matter, what they depend on, and how quickly their loss starts to hurt. Everything else follows from this.
- Maximum tolerable period of disruption (MTPD) — the point beyond which the damage becomes unacceptable.
- Recovery time objective (RTO) — how quickly an activity must be back, set inside the MTPD.
- Recovery point objective (RPO) — how much data you can afford to lose, measured backwards from the moment of failure.
- Minimum business continuity objective — the reduced level of service that is still acceptable while you recover.
A business continuity plan (BCP) is the document that carries those decisions into action. Disaster recovery is a subset of it — the technology limb — not a synonym, which is the distinction most people arrive without.
What is on the ISO 22301 Foundation exam?
40 multiple-choice questions across 2 competency domains, closed book, 70% to pass. The two domains are the fundamental principles and concepts of a BCMS, and the ISO 22301 requirements for a BCMS across Clauses 4 to 10.
Foundation is the only ISO 22301 level sat closed book. Lead Implementer and Lead Auditor are both open book with 80 questions. That should shape how you study: at Foundation you are being tested on recall of the vocabulary above, so BIA, MTPD, RTO and RPO need to be genuinely memorised rather than looked up.
There are no prerequisites — no prior certification, no experience requirement.
Why Australian organisations are buying business continuity training now
One reason above all others: APRA CPS 230. The prudential standard on operational risk management requires regulated entities to identify their critical operations, set tolerance levels for how long each can be disrupted, and test that they can actually meet them. That is a business impact analysis and an exercised plan, described in different words.
Operational resilience is the phrase the regulator uses, and a BCMS is how you evidence it. The SOCI Act pushes the same way for critical infrastructure, requiring an all-hazards risk management program that covers disruption alongside cyber. Neither instrument names ISO 22301 — both assume what it produces.
Organisational resilience — organizational resilience in US spelling — is the broader idea these sit inside: the capacity to absorb a shock, whether that is a cyber incident, a supply chain disruption, a natural hazard or the loss of a key site.
Free business continuity templates to study alongside the course
Foundation teaches the vocabulary. Seeing it applied to a real organisation is the fastest way to make it stick, so we publish the working documents in full — no email required.
Foundation certifies you, not your organisation. Certifying a company is a separate project — the ISO 22301 certification guide for Australia covers what that costs and how long it takes.