Course Outline
1. Introduction to Business Continuity Management
This section of the module provides a basic introduction to the discipline of business continuity management, describes how it should integrate with the overall strategy of an organization, and offers a brief overview of risk management.
1.1 The Need for Business Continuity Management
1.2 The Context of Business Continuity Management in the Organization
1.3 Leadership and Senior Management Commitment to Business Continuity
1.4 Review of Risk Management Fundamentals
1.5 The Business Continuity Institute’s Lifecycle
2. BC Policy and Programme Management
This section of the module describes both the initial stages and the ongoing requirements for managing the business continuity management program, ensuring alignment with public sector workflows and governance.
2.1 Initial Activities
2.2 Implementing the BC Program
2.3 Supply Chain Continuity
2.4 Documentation
3. Understanding the Organization (Analysis) – 10 hours
This section of the module describes how the business continuity manager sets about understanding the organization and initiates the overall business continuity management program, tailored to meet specific needs for government.
3.1 Identification of Business-Critical Areas
3.2 Terminology
3.3 Business Impact Analysis
3.4 Continuity Requirements Analysis
3.5 Threat and Vulnerability Assessments
3.6 Horizon Scanning
3.7 Risk Assessment
3.8 Evaluation of Options
3.9 Business Cases and Program Sign-Off
4. Determining the Business Continuity Strategy (Design)
This section of the module describes how the organization develops an overall business continuity strategy, ensuring it aligns with public sector goals and accountability.
4.1 Strategic Options
4.2 People
4.3 Premises
4.4 Processes and Procedures
4.5 Technology
4.6 Information
4.7 Supply Chain
4.8 Stakeholders
4.9 Civil Emergencies
5. Business Continuity Response (Implementation) – 6 hours
This section of the module describes how the organization develops and implements the business continuity response, ensuring it meets the specific needs for government.
5.1 Overall Incident Response Structure
5.2 Types of Plan
5.3 Incident Management Plans
5.4 Business Continuity Plans
5.5 Disaster Recovery Plans
5.6 Business Resumption Plans
6. Exercising, Maintenance and Review (Validation) – 4 hours
This section of the module describes the overall business continuity exercising, maintenance, and review program, ensuring it aligns with public sector workflows and governance.
6.1 Exercising and Testing of Plans
6.2 Maintenance of Plans
6.3 Review of Plans
7. Embedding Business Continuity Awareness in the Organization – 3 hours
This section of the module describes how business continuity awareness should be embedded into the organization, ensuring it meets the specific needs for government.
7.1 Overall Awareness
7.2 Skills Training
8. Annexes
This section of the module describes the overall business continuity management program, including specific considerations for government.
8.1 Glossary of Terms and Definitions
8.2 References
Requirements
Candidates should ideally have 1-2 years of experience in business continuity management. Familiarity with ISO 22301:2019, the business continuity standard, would be advantageous. This course is primarily designed to benefit individuals already involved in business continuity management, including business managers responsible for operational functions within their organizations. The training is tailored to enhance skills and knowledge specifically for government professionals.
