scope:

This Guidance Standard provides guidance on the principles of auditing, managing audit programmes, conducting audits of security, preparedness, and continuity management system, as well as guidance on the competence of security, preparedness, continuity, and emergency management system auditors. It is applicable to all organizations needing to conduct internal or external audits of security, preparedness, and continuity management systems or to manage an audit programme. The application of this Guidance Standard to other types of audit is possible in principle, provided that special consideration is paid to identifying the competence needed by the audit team members in such cases.