BCM and business continuity training to ISO 22301
Learn to anticipate critical disruptions, conduct a Business Impact Analysis and structure a Business Continuity Plan suited to your organisation. In one day, build a practical BCM approach aligned with the principles of ISO 22301.
GRC-110 · Foundation · 1 day · 3 to 12 participants · Case studies + simulation
Why train in BCM and business continuity?
A cyberattack, an IT outage, a supplier failure or the interruption of a critical service: a crisis can quickly affect an organisation's operations, customers and reputation.
This course gives you the methods and tools to identify essential activities, assess the impact of a disruption and define continuity strategies that match what is at stake for you.
In one day, you will learn to build a practical Business Continuity Management approach, from the Business Impact Analysis to the structure of a Business Continuity Plan. The concepts are put into practice through field examples, collaborative exercises and a crisis simulation.
The course draws in particular on the following standards:
- ISO 22301
- BCMS requirements
- ISO 22313
- Guidance
- NIST SP 800-34
- IT contingency
What you will be able to implement
By the end of the day, you will have the knowledge and methods to contribute effectively to your organisation's continuity and resilience.
- Master
the fundamentals of BCM and understand its role, telling it apart from crisis management, IT disaster recovery, cyber incident response and operational resilience.
- Conduct
a Business Impact Analysis to identify critical activities, assess the impact of a disruption and set priorities and recovery objectives.
- Define
relevant continuity objectives by mastering RTO, RPO, MTPD and MBCO, to set recovery times and service levels that meet the organisation's needs.
- Structure
a Business Continuity Plan and keep it consistent with IT recovery, crisis management, communication and operational procedures.
- Establish
lasting governance by defining the roles, responsibilities, indicators and mechanisms needed to maintain, test and improve the continuity framework.
- Integrate
cyber risk into the BCM approach to anticipate the consequences of ransomware, an information system outage, a data leak or the compromise of a critical supplier.
The format in practice
Duration
1 day
8 hours
Group size
3 to 12
3 to 12 participants
Format
- Focused input
- Case studies
- Peer exchange
- Crisis simulation
Prerequisites
- None
Certification
Optional certificate of achievement, issued once the final assessment is passed
Each participant receives this digital badge in their name, level 1 of 3 in the GRC series.
Assessment
- Role play and individual assessment at the end of the course
Who it is for
- Executive management
- CISOs and security officers
- IT directors
- Risk and compliance managers
- Project managers
- BCM and BIA contributors
Methods
- Key concepts
- Lessons from experience
- Collaborative exercises
- Operational role play
Materials
- Practical guides
- Quick-reference sheets
- Reusable document templates
- Course materials
Practice
- Governance, risk, compliance
Other courses you may be interested in
Data protection officer (DPO)
The GDPR and FADP regulatory framework, and the DPO's role put into practice.
Strengthen your organisation's resilience
Let's talk about your business continuity challenges. The course content can be tailored to your sector, your BCM maturity and the critical scenarios specific to your organisation.