Lesson 1: Program Management
• Establish the need for a business continuity program.
• Obtain support and funding for the business continuity programme.
• Build the organizational framework to support the business continuity program.
• Introduce key concepts, such as program management, risk awareness,
identification of critical functions/processes, recovery strategies, training and
awareness, and exercises/tests.
Classroom Exercise: Learning practical application by developing a presentation for leaders
on the importance of business continuity, relevant legal and regulatory requirements,
Project resource requirements, and an overview of the project plan with well-defined deliverables.
Lesson 2: Risk Assessment
• Identify risks that may harm the resources or image of an entity.
• Assess risk to determine potential impacts on the entity, allowing the entity to
determine the most efficient use of resources to reduce these potential impacts.
Classroom Exercise: Prepare a presentation for management by identifying three major threats,
identifying current controls for these threats and formulating
recommendations to improve existing controls or introduce new controls to
develop a plan for a risk assessment report.
Lesson 3: Business Impact Analysis
• Identify and prioritize the functions and processes of the entity to determine who will have the
more impact if not available.
• Assess the resources required to support the activity impact assessment process.
• Analyze the results to determine possible differences between the entity’s needs and its ability to
satisfy them.
Classroom Exercise: List the company’s functions and processes in order of priority, in
indicating the criticality category of each function and process and their recovery time.
Lesson 4: Business Continuity Strategies
• Select cost-effective strategies to reduce gaps identified in evaluation processes
risk assessment and business impact analysis.
Workshop Exercise: Based on previous exercises, identify the strategies
continuity/restoration, including brief description, advantages and disadvantages, and a
estimate of the costs of each strategy. Discuss how you would present the
recommendations to management for approval.
Lesson 5: Preparing and responding to incidents
• Develop and assist in the implementation of an incident management system that defines roles
and the succession of authority.
• Define requirements for the development and implementation of the incident response plan
the entity. Ensure that incident response is coordinated with organizations
in a timely and effective manner, where appropriate.
Classroom Exercise: Identify actions required to respond to events, list events
the need for special training, the type of plan required and the list of
recommendations for response to incidents.
Lesson 6: Development and implementation of the plan
• Document plans to be used in an incident to enable the entity to continue to operate.
Classroom Exercise: Identify the type of business continuity plan your entity needs, define the
the scope, objectives and assumptions of the plan, and provide background information on the plan
and its link to the Business Continuity Program.
Lesson 7: Awareness and Training Programs
• Establish and maintain training and awareness programmes that enable staff to
respond to incidents in a calm and effective manner.
Classroom Exercise: Develop a floor guard training program that includes the subjects of
essential training, frequency, selection process and other related recommendations
emergency response.
Lesson 8: Exercise, Test, Audit and Maintenance of Business Continuity Plan
• Establish a program of exercises, evaluation and maintenance to maintain a
preparation.
Classroom Exercise: Develop an exercise/test scenario adapted to your entity, evaluate resources
what will be exercised/tested and draft the steps to be followed.
Lesson 9: Crisis Communication
• Provide a framework for the development of a crisis communication plan.
• Ensure that the crisis communication plan allows rapid and effective communication with
internal and external parts.
Classroom Exercise: Determine whether an event is a potential crisis, the nature of the crisis, the
Stakeholders, spokesperson(s) and key message.
Lesson 10: Coordination with External Agencies and Resources
• Establish policies and procedures to coordinate incident response activities with
public entities.
Lesson 11: Proficiency Examination
• Review the important concepts of each of the previous lessons.
• Prepare for the aptitude exam by studying the practical exam questions