Course Overview
This programme provides a comprehensive framework for establishing an organizational resilience system. It guides participants through the BCM Lifecycle, starting with governance and policy as the foundation. Participants will learn to conduct a Business Impact Analysis (BIA) to identify criticalities, which then informs the development of Business Continuity Plans (BCP) and ICT Disaster Recovery Plans (DRP). The course emphasizes practical application through scenario-based simulations and runbook development.
Programme Objectives
By the end of the programme, participants will be able to:
- Apply the principles of the ISO 22301 BCM framework.
- Explain the critical relationship and linkage between BCP, BIA, and DRP.
- Identify critical business functions, impacts, and dependencies using a structured BIA methodology.
- Determine recovery priorities using metrics such as RTO, RPO, and MTPD.
- Draft actionable recovery strategies and technical DRP runbooks.
- Design and facilitate phased simulation scenarios to test organizational readiness.
Target Participants
Managers, executives, risk officers, BCM coordinators, IT personnel, operations personnel, compliance personnel, internal auditors, and department representatives involved in continuity and recovery planning.
Course Outline and Agenda
Day 1
| Time | Topic | Learning Outcomes / Activities |
| 09:00 AM | Module 1: The BCM Framework | Understand the relationship between BCP, BIA, and DRP; distinguish BCM from Emergency Response. |
| 10:30 AM | Morning Break | |
| 10:45 AM | Module 2: Governance & BIA Methodology | Establish BCM policies and apply a structured BIA methodology to identify critical functions. |
| 01:00 PM | Lunch Break | |
| 02:00 PM | Module 3: Impact Analysis & Recovery Targets | Assess disruption impacts over time and determine recovery priorities using RTO, RPO, and MTPD. |
| 03:30 PM | Afternoon Break | |
| 03:45 PM | Module 4: Dependency Mapping Workshop | Exercise: Map critical dependencies involving people, systems, facilities, vendors, and information. |
| 05:00 PM | End of Day 1 | Recap of BIA outputs and draft worksheet review. |
Day 2
| Time | Topic | Learning Outcomes / Activities |
| 09:00 AM | Module 5: Continuity & Recovery Strategies | Identify continuity strategies for people, processes, premises, technology, and suppliers. |
| 10:30 AM | Morning Break | |
| 10:45 AM | Module 6: Drafting the BCP & ICT DRP | Develop the BCP structure, response roles, and technical DRP runbooks for systems and data. |
| 01:00 PM | Lunch Break | |
| 02:00 PM | Module 7: BCM Simulation Exercise | Workshop: Participate in a tabletop scenario to test escalation, communication, and decision-making. |
| 03:30 PM | Afternoon Break | |
| 03:45 PM | Module 8: Maintenance & Review | Propose maintenance, testing approaches, and review requirements for continuous improvement. |
| 05:00 PM | End of Day 2 | Final assessment, group presentations, and end-of-programme review. |
Assessment & Materials
| Category | Details |
| Methodology | Briefing, facilitated discussion, guided workshop, template-based exercises, group work, case studies, and simulation sessions. |
| Assessment Approach | Pre-assessment, observation during exercises, group presentations, and an end-of-programme review. |
| Deliverables | BIA Template, DRP Template, sample BCP structure, tabletop exercise scenarios, and participant notes. |
