Skip to Content

Practice Guide: Business Continuity Management

Guidance | August 01, 2014

Copyright Notice All content is protected by international copyright laws. You may reference or quote small portions of this document with proper attribution to The IIA, but unauthorized reproduction, distribution, or use beyond that, other than for your own personal use, is strictly prohibited and may constitute a violation of copyright law, resulting in civil and criminal penalties. Contact copyright@theiia.org for permission to use our materials.

Internal audit’s skills and qualifications, position in the organization, and in-depth knowledge of organizationwide operations position it well to make meaningful contributions to the development, implementation, and assessment of an organization’s business continuity management (BCM) initiatives.

This practice guide also explores internal auditors’ potential roles in crisis management (CM) and providing guidance on:

  • Internal audit activities before, during, and after a crisis.
  • Internal audit’s evaluation of key BCM elements.

The appendix includes a risk assessment checklist, sample audit programs, and more. Additional information available from GTAG: Business Continuity Management may also be useful.

The IIA

The Institute of Internal Auditors