Business Continuity Manager in accordance with ISO 22301 (in collaboration with CIS Spółka z o.o.)

Training for business continuity managers to prepare them to fulfil this role within the company, based on the latest edition of the PN-EN ISO 22301:2020-04 standard.

Duration of the training course: 2 days / 16 hours

Supporting document: „Business Continuity Manager” Certificate”

This is a two-day (16-hour) practical training course, during which:

• you will gain an understanding of the principles involved in implementing an effective business continuity management system
• you will learn about methods and techniques for minimising recovery times following a disaster
• you will gain practical skills that will enable you to ensure the continuity of the company’s operations
• you will familiarise yourself with the requirements of the PN-EN ISO 22301:2020-04 standard
• you will learn how to interpret the PN-EN ISO 22301:2020-04 standard correctly

We can help with a holistic and process-based approach on business continuity issues. For us Every organisation is unique thanks to the philosophy we have adopted, the objectives we have set and the processes involved. The training courses we deliver meet the actual needs of businesses, put in your hand specific tools, which can be tested and put into practice directly within the company. This is appreciated by participants in CIS training courses, who rate them as 9.5–10 points. on a 10-point scale.

Who might benefit from taking part in this training course:

• Those responsible for business continuity who wish to learn more about how to implement, maintain and improve a Business Continuity Management System in accordance with ISO 22301
• Internal auditors planning to update their knowledge of the Business Continuity Management System and how to audit it
• Management staff who are keen to enhance their skills in the effective management of the company and in ensuring its business continuity
• To CEOs and board members who would like to find out more about how to protect and recover the company’s assets whilst minimising costs in the face of unforeseen incidents
• Staff in IT departments responsible for information security within the company and involved in ensuring its business continuity
• Business advisers wishing to expand their knowledge of how to build a company’s resilience and protect it from unnecessary losses

Module I: THE NATURE OF BUSINESS CONTINUITY MANAGEMENT IN AN ORGANISATIONAL CONTEXT, ITS OBJECTIVES, AND THE POTENTIAL BENEFITS AND COSTS OF IMPLEMENTING BCM

1) Introduction:

• Identifying participants’ needs and expectations

2) An introduction to business continuity management:

• Is business continuity management necessary?
• Business continuity – fact or fiction?
• ISO 22301 standard

3) Is business continuity management difficult?

• Aspects of your business’s continuity
• If you think the crisis will pass you by – you’re wrong
• BCM (Business Continuity Management) – what is it?
• What you can gain from BCM – benefits and costs

4) Components of the Business Continuity Management System in accordance with ISO 22301:

• Basic definitions of business continuity
• The ISO 22301 requirements model
• A process-based approach

Module II: STAGES OF THE BUSINESS CONTINUITY MANAGEMENT PROCESS IN ACCORDANCE WITH THE PDCA CYCLE

1) Stages of the business continuity management process in accordance with the PDCA cycle (PLAN, DO, CHECK, ACT)

2) Organisational context:

• Defining the organisational context
• Identifying the requirements of interested parties
• Defining and documenting the scope of BCM
• Monitoring changes in context and stakeholder requirements

3) Leadership:

• Responsibility in leadership
• Defining roles and responsibilities in BCM

4) Planning:

• How to plan a BCM system
• Definition and principles governing the monitoring of the implementation of BCM objectives

5) Establishing and maintaining a Business Continuity Management System, taking into account outsourcing agreements:

• Outsourcing in the context of the Business Continuity Management System

6) Support:

• Resource requirements
• BCM and the competence and awareness of staff and those carrying out work under the organisation’s supervision

7) Operation:

• Principles of monitoring and controlling the BCM system

8) Assessment:

• What should be measured and monitored

9) Improvement:

• Corrective actions
• The benefits of continuously improving the Business Continuity Management System

10) BCM policies and procedures:

• Guidelines for developing a BCM policy
• Documentation requirements

Module III: BUSINESS IMPACT ANALYSIS (BIA) AND RISK ASSESSMENT (RA), EXAMPLE ANALYSES, THREATS AND VULNERABILITIES

1) Business Impact Analysis (BIA) and risk assessment (RA):

• Business Impact Analysis – A Practical Approach
• Appointment of a team responsible for BIA
• Key indicators relating to BIA analysis
• Techniques for collecting and analysing data
• Workshops
• What is the risk-and-opportunity-based approach?
• Risk assessment
• Options for managing risk
• Risk mitigation measures in BCM
• Workshops

Module IV: STRATEGY FOR MAINTAINING BUSINESS CONTINUITY AND DEVELOPING PLANS

1) Business continuity strategy and its maintenance:

• The BCM strategic approach
• Staff-related matters
• Choosing a strategy – criteria
• BCM maintenance
• Testing and monitoring approach
• BCM reviews
• Workshops

2) Developing business continuity plans:

• Categories of activities
• The incident – a timeline
• Incident Management Plan (IMP)
• Business Continuity Plan (BCP)
• Testing, maintenance and inspections
• The benefits of testing
• Assessing effectiveness and drawing conclusions

Module V: AUDITING THE BCM SYSTEM

1) Auditing the BCM system in accordance with ISO 22301:

• The benefits of conducting BCM audits
• BCM audit as a management tool
• Objectives, scope and criteria of the BCM audit
• Planning, conducting and documenting results in accordance with ISO 19011:2018
• Post-audit actions – improving BCM

Module VI: SUMMARY OF THE TRAINING COURSE AND EXAM

• Training summary – assessment of effectiveness.
• The exam lasts one hour and consists of two parts: a single-choice test and an essay section, in which candidates must apply the recommendations set out in the standard and use the tools provided.