Business Continuity & Operational Resilience
Practitioner2 daysRisk Management
Programme overview
Moves beyond a dusty continuity plan to an operational resilience posture: identifying important business services, setting impact tolerances, and proving through testing that the institution can keep delivering under severe but plausible disruption. Draws on ISO 22301 and supervisory expectations for operational resilience in financial services.
Who should attend
Business continuity and resilience managers, risk managers, IT and information security managers, facilities and operations managers, heads of branch networks, and executives accountable for continuity.
Sectors
Banks and payment providers, insurers, telecommunications and utilities, public enterprises delivering essential services, healthcare.
Modules
- From BCM to operational resilience: what changed and why regulators care
- Identifying important business services and mapping them end to end
- Business impact analysis: RTO, RPO, MTPD and setting impact tolerances
- Threat and scenario analysis: severe but plausible, including cyber, power, pandemic and third party failure
- Third party and outsourcing dependency risk, including concentration in a small market
- Continuity strategy selection and cost justification
- Writing plans people can actually use under pressure
- Crisis management and incident command structures
- Communications: staff, customers, regulator and media
- Exercising and testing: desktop, simulation, live, and how to run one that finds real gaps
- ISO 22301 alignment and certification readiness
- Post incident review and continuous improvement
Learning outcomes
On completion delegates will be able to:
- Identify important business services and set defensible impact tolerances
- Conduct a business impact analysis
- Design continuity strategies proportionate to the threat
- Write usable plans and crisis playbooks
- Design and run a meaningful test exercise
Tools and templates provided
- BIA questionnaire and workbook
- Business continuity plan template
- Crisis management playbook and call tree
- Test exercise scenario pack (5 scenarios)
Assessment and certification
BIA build, plan drafting, and a live crisis simulation on day two.
Certificate of Completion.