What you'll learn:
- What is a business continuity management system
- What are the requirements of ISO 22301:2019
- Key tools for business continuity like the business impact analysis or the risk assessment
- What is a business continuity strategy and what it should include
- Concepts like the MTPD, RTO, RPO, MBCO
- How a business continuity management system can be implemented
ISO 22301 is the international standard for business continuity management systems (BCMS) — the framework that prepares an organization to withstand disruption: to keep delivering its products and services through incidents, disasters and crises, and to recover quickly when operations are affected. In a world of cyber attacks, supply chain failures, power outages and extreme weather, business continuity has become a core discipline of organizational resilience — and ISO 22301 defines how it's done.
This course discusses the concept of business continuity and the requirements of ISO 22301:2019, following the structure of the standard:
Context of the organization — internal and external issues, the needs and expectations of interested parties, and the scope of the BCMS
Leadership — top management commitment, the business continuity policy, and roles, responsibilities and authorities
Planning — actions to address risks and opportunities, business continuity objectives, and the planning of changes
Support — resources, competence and awareness, communication, and documented information
Operation — the heart of the standard:
The business impact analysis (BIA) — identifying prioritized activities and the impacts of disruption over time
The risk assessment for business continuity
Business continuity strategies and solutions
Business continuity plans (BCPs) and procedures
Warning and communication, and the incident response structure
The exercise programme — testing plans before a real disruption does
Evaluating business continuity documentation and capabilities
Performance evaluation — monitoring and measurement, analysis and evaluation, internal audits of the BCMS, and the management review
Improvement — nonconformities, corrective actions and continual improvement
After completing the lessons you will have a clear picture of how a business continuity management system is shaped, what its main elements are, what documentation it requires and how it is implemented.
Who this course is for
Business continuity managers and coordinators building or maintaining a BCMS
IT and information security professionals responsible for disaster recovery and IT continuity
Risk and resilience professionals connecting business continuity to enterprise risk management
Auditors assessing business continuity — of suppliers, partners, or for certification purposes
Professionals working toward certification as a business continuity professional
Anyone with BCMS responsibilities in an organization pursuing ISO 22301 certification
If your organization intends to certify to ISO 22301 and you have responsibilities for the BCMS, this course will give you the support you need.
