Course Outline
1. Introduction to Business Continuity Management
This section of the module provides a basic introduction to the discipline of business continuity management, describes how it should fit in with the overall strategy of a business, provides a brief overview of risk management.
1.1 The need for Business Continuity Management
1.2 The context of Business Continuity Management in the business
1.3 Leadership and senior management commitment to Business Continuity
1.4 Review of Risk Management Fundamentals
1.5 The Business Continuity Institute’s Lifecycle
2. BC Policy and Programme Management
This section of the module describes both the initial stages and the requirements for the ongoing management of the business continuity management programme.
2.1 Initial activities
2.2 Implementing the BC Programme
2.3 Supply Chain Continuity
2.4 Documentation
3. Understanding the Organisation (Analysis) – 10 hours
This section of the module describes how the business continuity manager sets about understanding the organisation and initiates the overall business continuity management programme.
3.1 Identification of Business–Critical Areas
3.2 Terminology
3.3 Business Impact Analysis
3.4 Continuity Requirements Analysis
3.5 Threat and Vulnerability Assessments
3.6 Horizon Scanning
3.7 Risk Assessment
3.8 Evaluation of Options
3.9 Business Cases and Programme Sign-Off
4. Determining the Business Continuity strategy (Design)
This section of the module describes how the organisation develops an overall business continuity strategy.
4.1 Strategic Options
4.2 People
4.3 Premises
4.4 Processes and Procedures
4.5 Technology
4.6 Information
4.7 Supply Chain
4.8 Stakeholders
4.9 Civil Emergencies
5. Business Continuity Response (Implementation) – 6 hours
This section of the module describes how the organisation develops and implements the Business Continuity response.
5.1 Overall Incident Response Structure
5.2 Types of Plan
5.3 Incident Management Plans
5.4 Business Continuity Plans
5.5 Disaster Recovery Plans
5.6 Business Resumption Plans
6. Exercising, maintenance and review (Validation) – 4 hours
This section of the module describes the overall Business Continuity exercising, maintenance and review programme.
6.1 Exercising and Testing of Plans
6.2 Maintenance of Plans
6.3 Review of Plans
7. Embedding Business Continuity Awareness in the Organisation – 3 hours
This section of the module describes how Business Continuity awareness should be embedded into the organisation
7.1 Overall Awareness
7.2 Skills Training
8. Annexes
This section of the module describes the overall Business Continuity Management programme
8.1 Glossary of Terms and Definitions
8.2 References
Requirements
Candidates should ideally have 1-2 years experience in business continuity management. An awareness of ISO 22301:2019 the business continuity Standard would be beneficial. The course will primarily benefit those already involved in the areas of business continuity management including business mangers responsible for operational functions.
Testimonials
Ann is very knowledgeable on the subject. She is constantly varying pace according to the feedback. There is a lot of room for discussing attendee's own experiences. It was a great joy !.
Sjoerd Hulzinga - KPN p/a Bloomville
It was quite informal.
- Capita Business Services Ltd
Trainer covered a lot of ground over a relatively short period.
- Capita Business Services Ltd
I found it very interesting to learn all about what happens behind the scenes when it comes to IT systems. I also enjoyed learning about security and what hackers do as ethical hacking is an avenue I'm very keen in pursuing.
- Knowledge Pool/ DVLA
Richard was very knowledgeable in his field.
- Knowledge Pool/ DVLA
It was pitched at the right level - challenging but understandable & informative.
Louise Voisey - Capita Business Services Ltd
Hacking
Mohalmald Salim - PSO
Level of expertise from the trainer Use case examples
Pierre Maillot - Bosch
His deep knowledge of the IoT topic.
Bosch
Ron's experience on how to successfully implement IoT projects and the deep technical subjects covered.
Bosch
relevance of content to our I4.0 business environment
Bosch
Very knowledgeable trainer, was able to adjust to audience knowledge, excellent industry experience and ability to relate to audience needs Excellent content preparation , tailored to needs discussed beforehand. Good supplement reading materials prepared by trainer
Oliver Steinig - Bosch
Ron was very mindful of his audience and addressed everyone's questions. He checked his audience for clarity and was willing to spend the time to review a topic until everyone understood the topic. He gauged the audience for energy levels and suggested a break when he saw that the energy from the group was waning. This was much appreciated.
Bosch
The pace of training delivery.
Ian McInally - KnowledgePool
the exercises and group discussions.
KnowledgePool
The trainer was very knowledgeable and was happy to go at the pace of the attendees. He was polite and respectful to all those in attendance. I felt I learnt a lot from the course as the trainer was very succinct in his delivery when going through the PP slides. A really good, worth while course from my personal point of view.
Julie Price - KnowledgePool
The environment was really relaxed and open so everyone could ask questions or put across points of view or experience. David the trainer was a SME on the subject and his style was very good.
KnowledgePool
Tutorials
ICAO
The example and exercise
ICAO
I got more information regarding the web applications' security issues, the different tools that could be used to cope with these issues, and more advice from the trainer to handle all these issues.
ICAO
the list of tools
ICAO
how it was broken into the technical and security mindset aspects.
ICAO
Excercises.
ICAO
he is very knowledgeable and comprehensive.
ICAO
Matthew was very knowledge and has lot experience to share with us. it was very pleasant, as he take the time to listen to us and answer to our questions. Thank you Matthew, it was awesome.
ICAO
The second day, scenarios exercises.
Christina Hutchings - KnowledgePool
The real life examples Ron gave.
Bosch
I liked the trainer's introduction and anecdotes to make the learning more real
KnowledgePool
David's in depth knowledge. His relationship building skills with the audience. I really enjoyed the way he managed to make us (as a collective audience) enjoy the quite dry and uninteresing subject matter. He had anecdotes and knowledge of specific examples of security failings - hacker attacks - BCP 'breakdowns' etc which put flesh on the bones to the piece of legislation or 'best practice' for BCP that he was trying to teach us about. A really engaging, down to earth and personable man: A very good listener and a fabulous, charismatic trainer.
Cris Bollin - KnowledgePool
All is excellent
Manar Abu Talib - Dubai Electronic Security Center
- Understanding that ATT&CK creates a map that makes it easy to see, where an organization is protected and where the vulnerable areas are. Then to identify the security gaps that are most significant from a risk perspective. - Learn that each technique comes with a list of mitigations and detections that incident response teams can employ to detect and defend. - Learn about the various sources and communities for deriving Defensive Recommendations.
CHU YAN LEE - PacificLight Power Pte Ltd
He took his time to make sure everyone understood and were on the same wave length
Tina Hopkins - Capita Business Services Ltd
I found the training too in depth for IT beginners. There was too many high level subjects that i felt were too advanced for a beginner level.