ISO 22301: Business Continuity Management Systems (BCMS) (Udemy.com)

ISO 22301 is the international standard for business continuity management systems (BCMS) — the framework that prepares an organization to withstand disruption: to keep delivering its products and services through incidents, disasters and crises, and to recover quickly when operations are affected. In a world of cyber attacks, supply chain failures, power outages and extreme weather, business continuity has become a core discipline of organizational resilience — and ISO 22301 defines how it's done.

This course discusses the concept of business continuity and the requirements of ISO 22301:2019, following the structure of the standard:

• Context of the organization — internal and external issues, the needs and expectations of interested parties, and the scope of the BCMS

• Leadership — top management commitment, the business continuity policy, and roles, responsibilities and authorities

• Planning — actions to address risks and opportunities, business continuity objectives, and the planning of changes

• Support — resources, competence and awareness, communication, and documented information

• Operation — the heart of the standard:

  • The business impact analysis (BIA) — identifying prioritized activities and the impacts of disruption over time

  • The risk assessment for business continuity

  • Business continuity strategies and solutions

  • Business continuity plans (BCPs) and procedures

  • Warning and communication, and the incident response structure

  • The exercise programme — testing plans before a real disruption does

  • Evaluating business continuity documentation and capabilities

• Performance evaluation — monitoring and measurement, analysis and evaluation, internal audits of the BCMS, and the management review

• Improvement — nonconformities, corrective actions and continual improvement

After completing the lessons you will have a clear picture of how a business continuity management system is shaped, what its main elements are, what documentation it requires and how it is implemented.

Who this course is for

• Business continuity managers and coordinators building or maintaining a BCMS

• IT and information security professionals responsible for disaster recovery and IT continuity

• Risk and resilience professionals connecting business continuity to enterprise risk management

• Auditors assessing business continuity — of suppliers, partners, or for certification purposes

• Professionals working toward certification as a business continuity professional

• Anyone with BCMS responsibilities in an organization pursuing ISO 22301 certification

If your organization intends to certify to ISO 22301 and you have responsibilities for the BCMS, this course will give you the support you need.