ISO 22301 Business Continuity Management Course [2026]

Examine how management systems in quality, security, risk, and environmental areas shape improvement via the PDCA cycle. See how ISO 22301 builds a BCMS with executive commitment and supplier support.

Explore how a business continuity management system integrates processes and tools to develop strategy into action, monitor improvement, drive continual improvement, and strengthen risk management and stakeholder confidence.

Explore the three levels of application for a BCMS, from basic concepts to certification, and learn how ISO 22301 governs business continuity to minimize disruptions and drive continual improvement.

Identify the key components of a bcms, including the business continuity policy, defined roles, documented management processes, and ongoing continual improvement, all aligned to organizational requirements.

Document the BCMS per ISO 22301 guidelines, including policy, plans, reports, and key BCM processes such as pandemic preparedness, succession planning, ITDR, crisis communication, workplace recovery, and supply chain management.

Explore the plan‑do‑check‑act PDCA paradigm at the core of ISO 22301, revealing a process‑centric BCMS cycle that enables continuous improvement, control selection, and stakeholder communication.

Explore the BCMS lifecycle, outlining context of the organisation, leadership, planning, support, operation, performance evaluation, and continual improvement to ensure resilient business continuity.

Identify internal and external drivers to define the organisational context and scope of the BCMS, aligning it with strategic goals and protecting critical activities.

Analyze the organisational context to identify drivers shaping value-creating activities and define the scoping requirements for the bcms. Explore corporate analysis, threat and resilience assessment, and stakeholder and regulatory analysis.

Identify and analyze threats and resilience impacts on critical processes to inform a business continuity case, assess preparedness with gap analysis, and scope the BCMS via stakeholder and regulatory insights.

Define the BCMS boundary with an incremental, board-led scope; use a high-level BIA and input-output view to identify critical, critical supporting, and supporting functions.

Identify organizational functions and processes, map interdependencies between core production and supporting functions, and assess how consumer service, IT, and corporate services enable the BCMS.

Align board-level support and executive leadership to establish a management-driven BCMS, appoint a business continuity champion, and embed policy, governance, and resources for resilient operations.

Learn how to appoint and empower a business continuity champion to secure board-level support, align resources, and drive BCM policy, objectives, and cross-organisational collaboration.

Align and implement the business continuity policy within the BCMS by appointing a champion and manager, forming working groups, benchmarking against good practices, and securing executive and board approval.

Examine the business continuity policy content within the BCMS, covering endorsement, scope, objectives, lifecycle, review period, roles and responsibilities, structure and membership, communication, assumptions, limitations, and references.

Analyze how volatility and threats shape ISO 22301 business continuity management and resilience, and risk mitigation, combining management and process-centric approaches to safeguard critical products and services.

Explore the process-centric approach to risk management, safeguarding critical operations through six strategies—modification, reduction, transfer, retention and loss mitigation, insurance, and business continuity management.

Discover how business continuity objectives define the BCMS purpose, guide actions, and measure performance, with three forms—people orientated, performance orientated, and process orientated—and a fit-for-purpose development approach.

Adopt a formal BCMS project management approach to plan, coordinate, and manage resources, roles, BCMS tasks, risk assessment, and success factors, with a dedicated budget and centralized oversight.

Plan BCMS tasks across the lifecycle, align parallel work with deliverables, and define task details: objectives, scope, timescales, resources, risks, and CSFs.

Develop staff competence in management, leadership, and communication to drive a supported BCMS. Establish incident and internal communication, standardized documentation, and resource allocation guided by DRI and BCI professional practices.

Identify and apply five key BCM skills—management, leadership, communication, analysis, and coordination—for building and managing a BCMS, including oversight, incident recovery, stakeholder engagement, and coordination with external agencies.

Design, develop, implement, and evaluate a business continuity awareness and training programme to raise staff knowledge and conformance with the policy, and equip BCM roles.

Develop awareness and training materials for the BCM program, distinguishing staff-wide awareness from role-specific training in layman terms. Use a mix of methods for delivery, with executive endorsement and funding.

Explore the principles of communication within business continuity management, detailing preparatory and incident management phases, stakeholder information needs, and protocols for internal and external messaging.

Understand the organisation to map critical functions, assess impacts, and determine resource needs using BIA, BCRRA, and RA. Explore the incident management structure and risk-based exercises that strengthen recovery readiness.

Explore how the business impact analysis (BIA) assesses qualitative and quantitative impact on critical functions, defines recovery timescales and resource requirements, and considers internal and external factors.

Explore information collection methods in BIA: questionnaires, interviews, workshops, and documentary reviews to identify critical functions. Identify how to determine what to collect, respondents, analysis, triangulation to support recovery priorities.

Apply a five-stage information analysis method to assess operational and financial impacts, identify recovery timescales, allocate ratings, prioritize, and analyze business continuity resource requirements.

Develop risk assessment for critical functions within a BCMS, guided by the BIA, using qualitative and quantitative approaches to identify threats, assess likelihood and impacts, and shape mitigation strategies.

Assess how to select and develop a BCM strategy to meet defined recovery objectives, evaluate strategy options, and consolidate resource requirements for continuity solutions.

Establish incident management structure to coordinate strategic, tactical, and operational teams, develop incident management plans, and validate business continuity capability through varied exercises.

Evaluate the BCMS performance against defined requirements using key performance indicators, identify gaps in key processes, and drive continual improvement through management reviews and leadership involvement.

Monitor and assess the BCMS to evaluate performance objectively, using benchmarking, gap analysis, and audits to identify gaps, set improvement actions, and drive continual improvement.

Gap analysis helps organisations identify the difference between current performance and defined requirements, develop actions to close the gap, and address barriers within the BCMS.

Explore how executive support drives continual BCMS improvement through management review. Learn to assess performance, address inadequacies, plan actions, allocate budget, and document decisions across inputs, considerations, and outputs.