Module Title / : / BCM-5000 - ISO 22301 Business Continuity Management Systems Expert Implementer
Duration / : / 4.5 days
Course Description
This is an advanced level Business Continuity Management (BCM) course with a 150-Multiple Choice Question (MCQ) based examination, following the successful completion of the course.
This workshop is primarily designed for advanced professionals who have a high degree of exposure to and understanding of BCM, such as BC managers, planners, and project managers. It is the institute's most comprehensive BCM course for those who are new to BCM or intend to embark on this as his/her BCM professional career. The workshop curriculum will enable participants to get an extremely thorough understanding of the 7 BCM Body of Knowledge or BCM BOK for BCM Practitioners, the globally recognized methodology for implementation and maintenance of BCM programs. On completion of the course, participants should have acquired the skills and understanding to be able to drive complex BCM programs and BC projects for the entire organisation.
The course will also introduce the essential steps of developing business continuity and disaster recovery strategies, design and implementation of BC plans, preparing and conducting awareness and training programmes. Participants will acquire the essential skills and knowledge of project management, risk analysis and review, business impact analysis, recovery strategy, plan development, testing and exercising, and program management.
Course Objectives
Participants who successfully complete the course would be well equipped to implement and manage an organisational BCM programme. They would be adept at:
· Understanding the BCM planning methodology and the requirements of ISO 22301 BCMS standards
· Assembling the BCM team members
· Developing business continuity and disaster recovery strategies
· Designing, implementing and testing the BC plans
· Preparing and conducting awareness and training programmes with strong alignment to ISO 22301 standard for BCMS
· Maintaining and managing the BCM plans while operating with other plans such as Crisis Management (CM) and Disaster Recovery (DR) plans
Learning Outcomes
This course will provide participants with the concept and knowledge, which will enable them to:
· Identify possible threats that may disrupt critical business functions in the organisation.
· Strengthen organisational resiliency to counter major incidents and disaster.
· Identify and analyse business requirements to recover critical business function.
· Develop business continuity and recovery strategies.
· Develop and implement comprehensive BC plans.
· Create and develop BCM awareness and training programme.
· Conduct exercises and tests.
· Implement BCM audit and assessment programmes to ensure BC plan effectiveness.
· Drive organisation-wide BCM program.
· Ensure effective program management on an ongoing basis.
Who should attend
· BC Managers, Organization BCM Coordinators and Practitioners tasked to drive large and complex corporate level BCM programmes will reap maximum benefits from the concepts and practices.
· Participants who are new to BC or with less than one year of BC experience will be awarded the Business Continuity Certified Planner (BCCP)certificate while those with more than 1 year but less than 3 years experience may apply for the Business Continuity Certified Specialist (BCCS)
· Experienced professionals with 3 years or more experience, from the security, risk management, facility, IT security, business operations who have direct or indirect responsibilities are encouraged to apply for their Business Continuity Certified Expert (BCCE) certification.
Prerequisite
· At least 3-years of BCM experience to achieve the BCCE certification or
· Novice to Business Continuity Management (BCM) who would like to acquire the entire spectrum of knowledge* (*Note: Novices with no experience would only be awarded the BCCP certification)
Course Outline
DAY 1 Bcm-230 and Bcm-330
Introduction to ISO22301 Standard
• Background to ISO22301 and mapping of ISO22301 to the BCM Planning Process
• Introduction to BCM Programme Element and Plan-Do-Check-Act (PDCA) Cycle
BCM Fundamentals
• Introduce BCM concepts
• Explain terminologies and BCM Body of Knowledge (BoK)
Risk Analysis and Review
• Understand risk management terminologies referencing to ISO 31000
• Identify and determine threats and risk
• Understand and implement ISO 22301 context of organization
Business Impact Analysis
• Identify critical business functions and prioritised activities
• Determine prioritized activities and quantify impact of outage
• Identify minimum resources and tolerable downtime
Business Continuity Strategy
• Understand the purpose of strategy development
• Identify alternate processing capability
• Develop strategy for units and corporate level
Plan Development
• Identify emergency responses
• Determine major BC plan component and its design
Testing and Exercising
• Develop test plan, scenario and evaluation criteria
• Determine exercise requirement and program
DAY 2 BCM-330
Risk Analysis and Review
• Identify potential threats that may disrupt business functions within the organization.
Business Impact Analysis
• Determine prioritised activities based on its recovery objectives, impacts and inter-dependencies.
Business Continuity Strategy
• Identify and implement strategies for continuity of critical business functions.
Plan Development
• Develop effective and functional comprehensive continuity plans and procedure
Exercising and Testing
• Be familiar with the testing and exercising documentary requirement
DAY 3 Bcm-430
Project Management
• Understand the key element of a BCM Project Management and Governance
• Initiate and manage the BCM project
• Familiarize with the key objectives, tasks and deliverables
• Learn and adapt to challenges
Program Management
• Understand the objectives and main components of program management
• Manage BC Program
• Review and audit the plan
• Provide maintenance and change management system
• Conduct advanced tests and exercises
• Manage the continuous training and awareness program
• Maintain BCM mindset
Crisis Management and Communications
• Able to identify the objectives and components of crisis communications
• Develop command and control strategy
• Review threats and link emergency response to crisis management plans
• Coordinate crisis communication
• Identify stakeholders and strategy to address audience information needs
Setup Command Centre Operations
• Understand Incident Command System (ICS) Fundamentals
• Identify emergency management protocols
• Prepare to work with public authorities
DAY 4 BCM-430
BCM Case Study
• Participate and execute the key components such as Risks Analysis and Review, Business Impact Analysis and BC Strategy of a BCM implementation plan and present to Executive Management
• Coordinate and manage crisis communications and media management activities
• Implement BCM audit and assessment program to ensure BC plan effectiveness
• Develop and conduct comprehensive corporate-wide exercises and tests