Plan, conduct, and lead audits of a business continuity management system against ISO 22301, in line with ISO 19011 and ISO/IEC 17021-1. Published Self-Study or eLearning enrolment starts from $980 + GST and includes the official exam access stated on this page. Instructor-led delivery for organisations can be scoped on request; no public cohort is implied unless confirmed dates, mode, venue and trainer are shown.
Available Australia-wide, in New Zealand and across Asia Pacific — and, because self-study and eLearning are delivered online through the myPECB platform, from anywhere in the world. Instructor-led organisational delivery can be scoped on request; no public cohort or classroom venue is implied unless confirmed details are shown. Base prices are published in AUD, and every course page supports available local currencies including NZD. An Australian billing address adds 10% GST; a non-Australian billing address has no Australian GST.
The PECB ISO 22301 Lead Auditor Self-Study course costs A$980 excluding GST (A$1,078.00 including 10% GST for an Australian billing address) through Aegentra Academy, an official PECB authorised training partner in Australia. That price includes the official PECB examination voucher, the full course materials, 12 months of myPECB access, and one free exam resit within 12 months. Typical total learning effort is 35–45 hours. The eLearning format is A$1,060 excluding GST (A$1,166.00 including Australian GST), with 35–45 hours of typical total learning effort. For non-Australian billing addresses, Australian GST is not charged and any applicable local taxes are determined at checkout.
Instructor-led delivery is enquiry-only. Aegentra Academy is not currently publishing scheduled live online or classroom cohorts. Contact us to arrange a class for your organisation; Self-Study and eLearning are available without waiting for a cohort.
Australian totals above include 10% GST. For non-Australian billing addresses, Australian GST is not charged; any applicable local taxes are determined at checkout.
Online classes are arranged through the Aegentra Academy team for individual learners and groups.
Contact us for online classAsk about prerequisites, delivery, employer invoicing, or which course fits your goal.
We normally reply within one Australian business day.
Learn · Implement
Official PECB training is included. The practical ISO 22301 resources are free to use after the course, with no email required.
Learn
Included with courseThis is what the A$980 + GST Self-Study price covers, or A$1,060 + GST with PECB eLearning.
Choose your courseImplement
Free · No email requiredGo beyond passing the exam. Practical resources built around the work itself — the documents you will actually have to produce.
Explore free ISO 22301 resources$980 + GST self-paced, or $1,060 + GST with guided eLearning. The official PECB examination voucher and two attempts are included, along with 12 months of myPECB access, over 400 pages of course material and 31 CPD credits. The course is equivalent to five days of classroom training, and there is no separate ISO 22301 exam cost.
| Course | Course focus | Exam | Self-Study | eLearning |
|---|---|---|---|---|
| Foundation | Understand a BCMS — the clause structure, BIA, RTO and RPO | 40 questions, closed book | $600 + GST | $680 + GST |
| Lead Implementer | Build the BCMS — business impact analysis, strategy, plans, exercising, certification readiness | 80 questions, open book | $980 + GST | $1,060 + GST |
| Lead Auditor | Audit the BCMS — plan and lead audits against ISO 19011 and ISO/IEC 17021-1 | 80 questions, open book | $980 + GST | $1,060 + GST |
Compare that against classroom-based ISO 22301 training in Australia, which commonly runs from $2,695 for a three-day Foundation course and past $3,295 for Lead level — before travel and time away from work. Two things are worth checking on any quote. First, which body issues the certificate. Aegentra Academy is an official PECB authorised training partner, and Accreditation is program- and scope-specific; verify the applicable credential before enrolment. Several Australian business continuity courses certify against IRCA, the BCI (CBCI) or GAQM instead — those are different credentials, not cheaper versions of the same one. Second, whether the exam is included. A course fee with the examination billed separately is not the figure you end up paying.
80 multiple-choice questions across 7 competency domains, open book, 3 hours, 70% to pass. The seven domains follow the audit lifecycle:
Note that domains 3 to 7 do not appear on the Lead Implementer paper at all — that exam follows the implementation lifecycle instead. Same question count, same format, different ground. The course is taught against ISO 19011 (auditing management systems) and ISO/IEC 17021-1 (requirements for certification bodies).
Different jobs, and the distinction decides which course to buy.
An internal auditor audits their own organisation’s BCMS against Clause 9.2, checking that what the plans claim is what actually happens — before a certification body arrives. The course covers this audit context; competence, independence, experience and organisational requirements still apply.
A lead auditor plans and leads audits of other organisations — as a consultant, in supplier assurance, or on a certification body assessment team. That is what ISO/IEC 17021-1 competence requirements exist for, and it is the ground domains 4 to 7 cover. There is no separate PECB "internal auditor" credential for ISO 22301; the Lead Auditor course covers both contexts, and the credential awarded depends on attested audit experience.
Business continuity audits fail in predictable places, and knowing them is most of the job.
The business impact analysis. Was it done on activities or on systems? A BIA that lists servers rather than the things the organisation does cannot produce a defensible recovery time objective.
Whether the plan has been exercised. Clause 8.5 requires it. An untested business continuity plan (BCP) is an assumption, and the exercise record is the first thing to request.
Whether RTO and RPO are achievable. Stating a four-hour RTO is easy; evidencing a four-hour recovery is not. Where disaster recovery capability has never been failed over end to end, the objective is aspiration rather than fact.
Supplier dependency. Clause 8.3 covers it, and supply chain disruption is where most modern outages actually originate — a critical single-source provider with no alternative and no contractual right to audit.
Demand concentrates in four places, and APRA CPS 230 is behind most of it. The prudential standard requires regulated entities to identify critical operations, set tolerance levels and test them — which creates internal audit work, second-line assurance work, and external review work.
The four: internal audit and operational risk teams in APRA-regulated entities; supplier assurance functions testing whether critical providers can actually recover; consultancies running pre-certification reviews; and certification body assessment teams, where ISO/IEC 17021-1 competence requirements make the credential close to mandatory. The SOCI Act adds the same pressure across critical infrastructure, and operational resilience is increasingly its own job title.
The artefacts an auditor asks for first, published in full and free.
Building a BCMS rather than auditing one is the Lead Implementer track. For organisational certification, see the ISO 22301 certification guide for Australia.
The official PECB course and exam package starts at A$980 + GST — with no separate exam fee after enrolment. Optional Aegentra Labs exam preparation is clearly priced separately.
The exam voucher is included in your enrolment, and so is one free resit if you don’t pass first time. Both the exam and the credential are issued directly by PECB.
PECB credential ladder: Provisional Auditor (no experience) → Auditor (2 years, 1 in business continuity, 200 audit hours) → Lead Auditor (5 years, 2 in business continuity, 300 audit hours) → Senior Lead Auditor (10 years, 7 in business continuity, 1,000 audit hours). Taught against ISO 19011 and ISO/IEC 17021-1. All tiers require signing the PECB Code of Ethics.
An exam pass is the first step. You must submit PECB's certification application and required declarations and references. PECB decides whether the requirements for the requested credential tier are met.
/ Before you enrol
These answers use this course's current catalogue record and PECB's published exam, certification, and maintenance policies.
The published price is A$980 for Self-Study or A$1,060 for eLearning, before tax. It includes the official PECB course materials, 12 months of access, the first exam attempt, one free retake, and the certification application fee. PECB’s partner-course policy also includes the first year of the Annual Maintenance Fee where maintenance applies; Foundation and Provisional credentials are maintenance-exempt. There is no separate first-exam or certification-application charge after enrolment.
PECB’s current maintenance policy lists no maintenance fee for Foundation, Provisional, or Transition credentials. For all other PECB certifications, the published fee is $390 per three-year certification cycle, together with the applicable CPD requirements and continued adherence to the PECB Code of Ethics. PECB sets this fee and may change it, so check the linked policy before renewal.
Yes. Every Academy course supports AUD and multiple local currencies, including NZD, USD, SGD, GBP, EUR, INR, AED, MYR, PHP, IDR, and VND when a live quote is available. Currency and tax are separate: an Australian billing address adds 10% GST, while a non-Australian billing address has no Australian GST. For example, an Australian working in New Zealand may pay in NZD and use an Australian billing address, but 10% GST will still be added because the billing address is Australian.
Self-Study costs A$980 before tax and uses the official PECB slide-based materials. eLearning costs A$1,060 before tax — A$80 more — and adds recorded trainer-led lessons and interactive learning activities. Both routes lead to the same PECB exam and credential, and both include the same exam package. Choose eLearning if explanations and video guidance help you learn; choose Self-Study if you are comfortable working through standards-based material independently.
Yes. PECB publishes remote online exam sessions that candidates can take from home or another suitable location through the PECB Exams application. The published course record lists these exam facts: duration — 3 hours; format — Open-book, multiple-choice — stand-alone and scenario-based questions; assessment — 80 multiple-choice questions across 7 competency domains — fundamental principles and concepts of a BCMS, business continuity management system requirements, fundamental audit concepts and principles, preparing an ISO 22301 audit, conducting the audit, closing the audit, and managing an audit programme; pass mark — 70%; language — English (other PECB languages available on request). New Zealand candidates should choose a published session that suits their local time, meet PECB’s identity and technical requirements, and complete the system check before exam day. PECB’s general exam policy does not publish a New Zealand restriction.
PECB credential ladder: Provisional Auditor (no experience) → Auditor (2 years, 1 in business continuity, 200 audit hours) → Lead Auditor (5 years, 2 in business continuity, 300 audit hours) → Senior Lead Auditor (10 years, 7 in business continuity, 1,000 audit hours). Taught against ISO 19011 and ISO/IEC 17021-1. All tiers require signing the PECB Code of Ethics. Passing the exam does not by itself award a credential or guarantee the highest experience-based tier. PECB requires an online certification application and reference contact details, and its Certification Department decides whether the education, professional experience, and audit or assessment activity requirements are met.
PECB’s public certification-process page does not publish a closed list of documents that automatically proves project hours. It requires the online application and contact details for references who may be contacted to validate your experience. Keep a dated activity log showing the organisation or client, your role, the audit or assessment activity, dates, responsibilities, and hours; retain employer or client confirmations, statements of work, timesheets, or similar records in case PECB asks for support. The PECB Certification Department assesses the application and makes the final decision.
Yes. You can hold both the ISO 22301 Lead Implementer and ISO 22301 Lead Auditor credentials. They are separate, complementary certifications: Lead Implementer develops implementation knowledge, while Lead Auditor develops audit knowledge. To pursue both, complete each course, pass each exam, and apply for each credential. PECB assesses implementation-project experience for the Implementer tier and audit experience for the Auditor tier separately. If you pass an exam before meeting the full experience requirements, you may apply for the applicable Provisional credential and later request an upgrade. PECB evaluates each upgrade application and may determine whether an examination is required. Neither credential automatically grants the other.
5 modules, fully on-demand. Click any module to see the topics inside.
Foundation establishes the language, Lead Implementer builds the management system, and Lead Auditor verifies it. Choose the level that matches the work you will perform.
Entry-level pathway to ISO 22301 — the fundamental concepts, principles, and requirements of a business continuity management system (BCMS).
Establish, implement, and maintain a business continuity management system based on ISO 22301, using PECB’s IMS2 methodology.
Plan, conduct, and lead audits of a business continuity management system against ISO 22301, in line with ISO 19011 and ISO/IEC 17021-1.
An organisation can write continuity plans; an auditor establishes whether they actually meet ISO 22301 and would hold under disruption. That independent assurance is what boards, regulators, and certification bodies rely on — and it is a distinct, hireable skill.
The audit discipline this course teaches — planning, evidence, findings, and audit programme management — is standard-agnostic. An ISO 22301 Lead Auditor can move to auditing ISO 27001, ISO 9001, or any Annex SL system with the same methodology.
Lead Auditor, Internal Audit, Resilience Assurance, Operational Risk, and GRC roles — particularly in financial services, utilities, health, and government, where continuity obligations are supervised and independently assured.
ISO 22301 and ISO 27001 share the Annex SL structure and much of the audit approach. Organisations increasingly want auditors who can assess continuity and security together, because the disruptions they audit for are frequently the same events.
CPS 230 places operational risk management, business continuity, and service provider management under direct supervision, with tolerance levels for critical operations. Independent audit against ISO 22301 is a recognised way to assure the continuity component.
Responsible entities must maintain a Risk Management Program covering hazards that could disrupt asset availability. Auditing a BCMS is how that obligation is tested rather than assumed.
Service interruption carries public consequence, not just commercial cost. Audited continuity plans and recovery objectives are the mechanisms that make restoration defensible under scrutiny.
Certification bodies and large buyers require auditors who can conduct Stage 1 and Stage 2 audits to ISO/IEC 17021-1. This credential is the recognised basis for that work.
The exam is open-book, but the questions reward fluency, not lookup. Plan your study around these checkpoints.
Free learning resources
Use Aegentra’s existing templates, checklists, registers and mappings alongside your course. No account or email is required.
Free companion reading for anyone studying business continuity management (BCMS) — the standard APRA CPS 230 and SOCI Act obligations lean on:
Compare the family
The ISO 22301 family page compares current levels, prices, delivery, audiences and exam facts before you choose a pathway.
Compare ISO 22301 pathwaysSource and review status
Price, delivery and course content are generated from Aegentra’s authoritative catalogue record. The official PECB course page and exam policy are linked directly below. Source-link checks and substantive human review are tracked separately so one is never presented as the other.
Official PECB sources
Editorial accountability
Harry Sidhu owns publication of this record. A separate course-specific substantive reviewer has not yet been recorded.
Substantive review status
Official source links are checked separately. A course-specific substantive review date will be published when completed.
Official PECB training through an authorised partner. PECB is accredited by IAS and UKAS as a personnel certification body under ISO/IEC 17024 and by ANAB as a certificate issuer under ANSI/ASTM E2659-24. Accreditation is program- and scope-specific—verify the applicable credential before enrolment.
Official PECB training and credential pathway. Check PECB’s current accreditation information and the applicable program scope before enrolment.
This official PECB course is sold and supported by Aegentra Academy. PECB supplies the course material, examination and professional credential scheme. Aegentra's wider practice also runs governance, risk and compliance engagements and Microsoft 365 hardening for Australian organisations. Named eLearning trainers are credited separately on this page when the course record supplies them.
Published courses run online and self-paced through the myPECB platform, so professionals across Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra and New Zealand enrol online. Instructor-led delivery for organisations can be scoped on request. No public cohort or classroom venue is implied unless confirmed dates, mode, venue and trainer are shown on the course page. Multi-seat team pricing is available for five or more seats — email Academy@aegentra.com.au for an enterprise quote. Tax invoices with GST and ABN are issued automatically at checkout.
The published option is self-paced study. Instructor-led delivery for organisations can be scoped on request, subject to trainer availability, learner numbers and an agreed date. Aegentra does not publish a live or classroom cohort unless its dates, delivery mode, venue (where applicable) and trainer are confirmed. Email Academy@aegentra.com.au with your requirements.
ISO 22301 is the international standard for business continuity management systems. It sets requirements for identifying what an organisation must keep running, analysing the impact of disruption, selecting continuity strategies, documenting and exercising plans, and improving continuity capability over time.
Self-Study at $980 + GST gives you the official PECB slide deck and course material to work through at your own pace. The eLearning option at $1,060 + GST adds recorded video lectures and scenario-based quizzes over the same material. Both include the exam and the free retake, and both lead to the identical PECB credential.
The Lead Implementer course teaches you to build and run a BCMS; the Lead Auditor course teaches you to audit one against ISO 22301. Implementers create the system, auditors independently assess its conformity. Many practitioners hold both, which also qualifies them for the PECB Master credential.
It depends on attested experience. Provisional Auditor requires none. Auditor requires two years with one in business continuity management plus 200 hours of audit activities. Lead Auditor requires five years with two in business continuity management plus 300 hours. Senior Lead Auditor requires ten years with seven plus 1,000 hours. All require signing the PECB Code of Ethics.
The methodology is built on ISO 19011 (guidelines for auditing management systems) and ISO/IEC 17021-1 (requirements for bodies providing management system certification). These are the recognised bases for first-, second-, and third-party audits.
Three hours across seven competency domains: fundamental principles and concepts of a BCMS; business continuity management system requirements; fundamental audit concepts and principles; preparing an ISO 22301 audit; conducting an ISO 22301 audit; closing an ISO 22301 audit; and managing an ISO 22301 audit programme.
Yes. PECB certified individuals holding both the Lead Implementer and Lead Auditor credentials in a scheme qualify for the corresponding Master credential, provided they also pass four additional Foundation exams related to that scheme.
The credential demonstrates you can plan, conduct, and close an ISO 22301 audit to ISO/IEC 17021-1. Certification bodies additionally require their own qualification and witnessed audits, but Lead Auditor is the standard training foundation for that path.
Thirty-one CPD credits — an attestation of course completion is issued on finishing the course. These count toward the CPD requirements of ISACA, IIA Australia, and other professional bodies on submission.
Yes. Either complete checkout yourself and forward the Stripe tax invoice for reimbursement, or write to Academy@aegentra.com.au and we will issue an invoice direct to your organisation with payment terms. For group enrolments, request a written quote confirming the current price, payment terms and inclusions before purchase.
Self-Study — Typical total learning effort: 35–45 hours. Course-day equivalent: approximately 5 training days. eLearning — Typical total learning effort: 35–45 hours. Course-day equivalent: approximately 5 training days. These are typical total-learning-effort estimates. They are separate from the 12-month access period, exam duration, any live-class calendar span, and professional-experience requirements.
After payment, the Academy team confirms your enrolment with PECB and you receive login details by email — usually within one business day.
You have 12 months of access from enrolment. That window covers the course material, the official PECB exam, and one free resit if you need it.
One PECB-issued resit is included in your enrolment at no extra cost. Aegentra does not publish a pass-rate claim without an audited cohort dataset.
Questions about invoicing, GST, group bookings, refunds or instructor-led delivery? Read the Academy FAQ.
Entry-level pathway to ISO 22301 — the fundamental concepts, principles, and requirements of a business continuity management system (BCMS).
Establish, implement, and maintain a business continuity management system based on ISO 22301, using PECB’s IMS2 methodology.