ISO 22301 Audit Checklist
A clause-by-clause audit checklist for ISO 22301:2019 with 62 audit questions across Clauses 4 to 10, to help you check your business continuity management system before your certification audit.
ISO 22301 Audit Checklist
ISO 22301:2019 business continuity audit checklist plus a gap analysis workbook.
- 2 editable files · 2 Excel
- Instant download after payment, plus an email copy of your links
- Single-organisation licence: use across all your sites and staff
- 90-day money-back guarantee
See every file in the download (2)
- Audit ChecklistExcel
- Gap AnalysisExcel
Need the full system, not just this checklist?The ISO 22301 Complete BCMS Toolkit includes everything in this download plus 31 more editable files, for £127.
Compare the complete kit Why Use an ISO 22301 Checklist?
ISO 22301 sets the requirements for a business continuity management system (BCMS). Organisations use it to prepare for, respond to, and recover from disruptive incidents. A structured audit checklist ensures you systematically verify every clause during internal audits, producing the documented evidence needed for certification and management review.
What's Included
- 62 clause-by-clause audit questions covering Clauses 4 through 10
- Business impact analysis verification to confirm critical activities and recovery priorities
- Risk assessment questions for threats to business continuity
- Business continuity strategy and solution evaluation items
- Exercise and testing programme review questions
- Audit result drop-down (Conforms, Opportunity, Minor NC, Major NC, N/A) with automatic scoring, a dashboard sheet and space for evidence notes
- Gap analysis workbook with status, evidence, action, owner and target date columns
How to Use This Checklist
- Scope your audit — determine which sites, processes, and recovery plans will be assessed
- Review previous exercises — check test results and open actions from prior audits
- Work through each clause — follow the checklist systematically, gathering evidence at each step
- Verify recovery capabilities — confirm that plans, resources, and communication procedures are adequate
- Record findings and agree actions — classify results and set deadlines for corrective actions