How much does ISO 22301 Lead Implementer training cost in Australia?
$980 + GST self-paced, or $1,060 + GST with guided eLearning. Both include the official PECB examination voucher and two attempts, plus 12 months of myPECB access and 31 CPD credits. There is no separate ISO 22301 exam cost.
Compare that against classroom-based ISO 22301 training in Australia, which commonly runs from $2,695 for a three-day Foundation course and past $3,295 for Lead level — before travel and time away from work. Two things are worth checking on any quote. First, which body issues the certificate. Aegentra Academy is an official PECB authorised training partner, and Accreditation is program- and scope-specific; verify the applicable credential before enrolment. Several Australian business continuity courses certify against IRCA, the BCI (CBCI) or GAQM instead — those are different credentials, not cheaper versions of the same one. Second, whether the exam is included. A course fee with the examination billed separately is not the figure you end up paying.
What is on the ISO 22301 Lead Implementer exam?
80 multiple-choice questions across 7 competency domains, open book, 70% to pass. The seven domains follow the implementation lifecycle:
- Fundamental principles and concepts of a business continuity management system
- Business continuity management system requirements
- Planning a BCMS implementation based on ISO 22301
- Implementation of a BCMS based on ISO 22301
- Monitoring and measurement of a BCMS
- Continual improvement of a BCMS
- Preparing for a BCMS certification audit
Scenario items are still multiple-choice — there is no essay paper, despite what some course listings suggest. Being open book, retrieval speed matters more than memorisation; build an index into your notes before you sit.
How do you actually build a BCMS?
Four stages, in order, and the order is not negotiable — each one depends on the last.
1. Business impact analysis. Identify the activities that deliver your products and services, what each depends on, and how fast the harm accumulates. This produces the maximum tolerable period of disruption for each, and from that the recovery time objective and recovery point objective. Most programmes go wrong here by assessing systems instead of activities.
2. Strategy. For each activity, decide how you will meet the RTO — a second site, a manual workaround, a standby supplier, accepted downtime. This is where cost meets ambition, and where a minimum business continuity objective gets agreed: the reduced service you can run on.
3. Plans. Write the business continuity plan (BCP) and the supporting procedures, including the disaster recovery limb for technology. A plan nobody can follow under pressure is not a plan.
4. Exercise and improve. Test it, capture what failed, fix it. An untested plan is an assumption. This is also what Clause 8.5 requires and what an auditor asks for first.
How does ISO 22301 satisfy APRA CPS 230?
This is the reason most Australian implementations are funded. CPS 230 requires regulated entities to identify critical operations, set tolerance levels for disruption, maintain and test plans, and manage the service providers those operations depend on. Every one of those has an ISO 22301 clause behind it.
The regulator frames this as operational resilience. A BCMS is the management system that produces the evidence: the BIA identifies critical operations, the RTO is the tolerance level, the exercise programme is the testing, and Clause 8.3 covers supplier dependency and supply chain disruption. The SOCI Act asks similar questions of critical infrastructure under an all-hazards program.
We publish the full CPS 230 mapping free below, so you can check the logic before committing to anything.
Lead Implementer or Lead Auditor — which should you take?
Both exams are 80 questions over seven domains, but the domains differ, and so does the job.
Take Lead Implementer if you will build the BCMS: running the business impact analysis, choosing strategies, writing the plans, exercising them, and taking the organisation to a certification audit.
Take Lead Auditor if you will assess one — as an internal auditor, a consultant reviewing clients, or working toward certification-body audit work. Its seven domains follow the audit lifecycle rather than the implementation one, and it is taught against ISO 19011 and ISO/IEC 17021-1.
Same price either way. The deciding question is whether you are accountable for the system working, or for judging whether it does.
Free documents to build the BCMS alongside the course
The artefacts a Lead Implementer actually produces, published in full and free.
If the organisation needs the BCMS built rather than a person trained, that is our governance and risk practice.