Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Business Continuity Management: ISO 22301 BCP Program
New
100 students

Business Continuity Management: ISO 22301 BCP Program

Run a business impact analysis, set RTO and RPO, write a disaster recovery plan, run tabletop exercises, brief the board
Last updated 9/2026
English

What you'll learn

  • Calculate the cost of an hour of downtime for each process in dollars and set RTO, RPO and maximum tolerable downtime
  • Build a continuity risk register with 1–5 likelihood and impact scales, a 5 × 5 heat map and a risk appetite signed by your sponsor
  • Write a department continuity plan with activation criteria, a first-hour checklist, roles with alternates and manual workarounds
  • Run a two-hour tabletop exercise with timed injects and turn the findings into an after-action report and a fix list
  • Start a business continuity program in 90 days with a one-page charter, an executive sponsor and seven first-week meetings
  • Choose recovery strategies for people, premises, IT and suppliers, and score critical suppliers with a 20-question questionnaire
  • Agree recovery times with IT, test that a backup actually restores and write a runbook for one critical system
  • Prepare holding statements and a message bank for employees, clients, partners and the media, plus a call tree
  • Report to the board with eight program metrics, an ISO 22301 gap analysis on a 0–3 scale and a five-slide report
  • Learn with Mike Pritula, the #1 HR instructor on Udemy, alongside 2,000,000+ of his Udemy students

Course content

5 sections • 10 lectures • 7h 27m total length
  • The Business Continuity Manager Role: Program Charter and First 90 Days47:21
    • Three jobs of a business continuity manager
    • ISO 22301 on one page: what the standard asks for and in what order
    • A one-page program charter in eight fields, an executive sponsor and a steering group
    • A 90-day plan in three stages and seven first-week meetings
    • The day-90 page for the CEO: what was found, what was fixed, what it costs
  • Business Impact Analysis: Downtime Cost, RTO, RPO and MTPD44:16
    • The downtime cost formula in four parts, applied to one process in dollars
    • An impact scale over seven time periods
    • Maximum tolerable period of disruption, RTO and RPO for each process
    • Four recovery tiers
    • A BIA interview in 10 questions and a BIA table in 11 columns

Requirements

  • Working knowledge of how your company operates: its main processes, departments and systems
  • Access to process owners, the IT team and key supplier contracts, so the assignments are done on real data
  • Excel or Google Sheets for the BIA table, the risk register, the strategy matrix and the dashboard
  • No CBCP, ISO 22301 Lead Implementer or other continuity certification is needed
  • No existing continuity plan, team or budget is needed to start

Description

This course contains the use of artificial intelligence

Your company has a continuity plan. It sits in a folder, and nobody has opened it since the day it was written.

When the next outage hits, will anyone know what to do in the first hour?

That is where most continuity managers start. Business continuity was added to a risk, operations or IT role, and the CEO assumes that someone has it covered. You know the processes and you have fixed outages with your own hands, but nobody showed you how to price an hour of downtime, agree RTO and RPO with the business or run an exercise that tests the plan instead of the patience of the people in the room. So the plan stays on paper, IT promises a recovery time that has never been measured, and every question from the board or a client questionnaire is answered with "we have a document."

After this course you run business continuity as a program, not as a file. Every critical process has a cost of downtime in dollars and a recovery time the business signed off. The top risks sit in one register with owners and decisions. Each department has a plan that starts with a first-hour page, IT has a tested runbook for its most critical system, and the first messages to employees, clients and the media are written before they are needed. Critical suppliers answer your questionnaire before the contract is renewed, the plan is tested at a tabletop exercise, and your quarterly report to the board answers "are we ready?" with numbers.

The course is built and taught by Mike Pritula:

  • Founder of Pritula Academy, where 170,000+ students have trained, and the person in charge of its strategy; #1 HR instructor on Udemy, with 2,000,000+ students on Udemy

  • 20 years of leadership in HR at Wargaming, Preply, iDeals, Starlightmedia and Alfa-Bank

  • At Alfa-Bank, around 2007, he searched the market for a business continuity and disaster recovery expert and found only four such specialists; the candidate he hired came from Deloitte and built the continuity system in the bank

  • At Wargaming he worked with a business continuity plan for evacuating an office for several days and with evacuation drills in a 16-floor office of 2,000 employees, each followed by a debrief by the numbers

First you take the role: a program charter, an executive sponsor and a 90-day plan. Then you measure: a business impact analysis that prices downtime and sets RTO and RPO, and a risk register that shows which disruptions are most likely. Next you build one document per lesson: recovery strategies, the department continuity plan, the IT disaster recovery plan, the crisis communication plan and the supplier continuity check. Finally you test the plan at a tabletop exercise and report to the board with eight metrics and an ISO 22301 gap analysis. Each lesson stands on its own, so if you need your first tabletop exercise next week, you can open lesson nine tonight.

What's included:

  • Lifetime access to all materials

  • Active instructor support in Q&A

  • Udemy Certificate of Completion

  • A practical assignment for your own company in every lesson

  • Ready-to-use templates: a program charter and 90-day plan, a BIA table, a downtime cost calculator, a continuity risk register, a strategy matrix, a department continuity plan, a DR register and runbook, a crisis message bank, a supplier questionnaire, a tabletop exercise kit, a program dashboard and an ISO 22301 gap analysis

  • A section with additional courses, tools and resources

Every month with an untested plan is another month in which an outage, a supplier failure or a client questionnaire can arrive before you are ready. The continuity managers who can show the CEO the price of downtime in dollars get the budget and the attention of the board, and the rest keep updating a document nobody reads. Your next disruption is already on its way.

Enroll now and start your first lesson today.

Who this course is for:

  • Risk managers and operations managers who were handed business continuity on top of their current role
  • IT and security leads responsible for disaster recovery who need the business side of continuity
  • Newly appointed business continuity managers in companies of 200 to 5,000 people
  • Owners of a continuity plan that sits in a folder and has never been tested
  • Managers preparing the company for an ISO 22301 audit or a client continuity questionnaire