Business Continuity Management (ISO 22301)
Overview
Business continuity keeps critical services running when disruption strikes. This course explains how to build a business continuity management system in line with ISO 22301: business impact analysis, risk assessment, continuity strategies, plans, exercising and maintaining the programme.
Who should attend
Business continuity, risk and emergency managers, IT disaster recovery staff, and department heads responsible for critical services.
Training methodology
Interactive presentations, practical exercises, case studies, group discussions, role-plays where relevant, and a personal action plan that participants apply in their own work.
Objectives
By the end of this course, participants will be able to:
- Explain the requirements and structure of ISO 22301
- Conduct a business impact analysis and set recovery objectives
- Assess disruption risks and select continuity strategies
- Write business continuity and recovery plans
- Exercise, review and improve the continuity programme
Course outline
Day 1Continuity Foundations
- What business continuity is
- ISO 22301 structure
- Programme scope and policy
- Roles and governance
- Links to risk, emergency and crisis management
- Maturity self-assessment
Day 2Business Impact Analysis
- Identifying products, services and activities
- Impact over time
- Maximum tolerable period of disruption
- Recovery time and recovery point objectives
- Dependencies and resources
- Workshop: BIA for a department
Day 3Risk and Strategy
- Disruption risk assessment
- Single points of failure
- Continuity strategy options
- Alternate sites and work-from-home
- Supplier continuity
- Exercise: select strategies
Day 4Plans and Response
- Plan structure and content
- Incident response structure
- IT disaster recovery
- Communication during disruption
- Plan activation and escalation
- Workshop: write a continuity plan
Day 5Exercising and Improvement
- Exercise programme
- Tabletop and functional exercises
- Post-exercise reports
- Audit and management review
- Maintaining the programme
- Tabletop exercise and action plan
