Gain the expertise to establish, implement, maintain and improve a Business Continuity Management System (BCMS), in accordance with the requirements of the International Standard ISO 22301.
Quick Access: Introduction· Why this course exists· What it enables you to do· Frameworks and standards· Value· Objectives· Target audience· Programme· Exam & Certification· Other information· Benefits· Logistics· Registration
Upcoming dates
Guaranteed dates. Live, real-time training. Interaction with the trainer and the group.
Live Online • next edition
Live Online • base price
Language: available in PT or ENG
Training: practical and case-study based
Exam: 3h
EXCELLENCE and LEADERSHIP level – Technical authority and leadership in governance.
Why this course exists
To turn ISO 22301 requirements into real, evidencable and auditable implementation.
Many organisations recognise the criticality of business continuity, but fail to move from intent to processes, plans, evidence and continual improvement. This course prepares professionals to lead the implementation of a BCMS with method, consistency and the ability to drive it through to certification audit.
What this course enables you to do
Plan
Define the BCMS implementation approach and methodology, including context, interested parties and scope.
Implement
Build BCMS policies, processes and documentation (BIA, strategies, plans, exercises, communication and response).
Evaluate
Establish monitoring, metrics, internal audits and management reviews to ensure performance and conformity.
Improve
Manage nonconformities, corrective actions and continual improvement, preparing the organisation for an ISO 22301 certification audit.
Frameworks, standards and best practices covered throughout the course
Best Practices
Guidance
BIA
Strategies
Plans and procedures
Exercises
BEHAVIOUR methodology (step-by-step)
Value for the organisation
- Greater resilience and operational continuity through consistent processes and plans
- Reduced disruption impact through BIA, strategies and structured response
- Governance, evidence and audit readiness aligned with ISO 22301
- Preparation for certification and international recognition
Introduction
The ISO 22301 Lead Implementer course is supported by a case study and challenges participants to implement a Business Continuity Management System (BCMS) based on ISO 22301 requirements and the best practices of the ISO 22300 family, following a BEHAVIOUR-customised methodology.
Beyond learning definitions, concepts and requirements, the course focuses on the ability to put into practice a Business Continuity Management Programme, supported by approaches, models and tools applicable to real-world contexts.
This Training Plan and all associated documents are protected by Copyright and registered as a literary work with IGAC.
General Objectives
By the end of this course, participants will be able to:
- Understand fundamental business continuity concepts and ISO 22301 requirements
- Understand the correlation of the ISO 22300 family (including ISO 22301 and ISO 22313) and related best practices
- Establish, implement, maintain and continually improve a BCMS in accordance with ISO 22301
- Define and execute the processes, techniques and tools required to operate the BCMS
- Assess and treat risks and opportunities associated with the BCMS
- Perform BIA, analyse disruptive scenarios and support continuity requirements
- Define strategies and solutions and develop continuity plans aligned with recovery objectives
- Implement an exercise and testing programme to validate the effectiveness of strategies and plans
- Define and manage documented information (policies, processes, procedures, plans and evidence)
- Implement performance evaluation (monitoring, metrics, internal audits and management review)
- Address continual improvement requirements and prepare for an ISO 22301 certification audit
Target audience
- Consultants, auditors, managers and risk professionals involved in implementing an ISO 22301 BCMS
- Executives and senior professionals responsible for ensuring alignment, value delivery and continuity governance
- Owners of business continuity, governance, information security and/or IT
- Project managers leading (or preparing to lead) an ISO 22301 implementation programme
- Professionals seeking knowledge to implement and maintain an ISO 22301 BCMS
Prerequisites
There are no mandatory formal prerequisites. However, experience or exposure to business continuity, information security, risk, governance and operations contexts is recommended.
Additionally, other specific requirements may apply, where relevant, depending on the quotation/proposal presented (please refer to the proposal).
Programme
Fundamentals, ISO 22301 and implementation preparation
- Course introduction
- Business continuity: standards, legislation and applicable regulation
- Business continuity fundamentals
- Overview of BCMS requirements (ISO 22301)
- BCMS implementation approach and methodology
- Understanding organisational drivers and establishing context
- Defining the BCMS scope
- Assessing current and target state (basis for gap analysis)
Establish (Plan) an ISO 22301 BCMS
- Leadership and commitment to establish the business continuity programme
- Developing the Business Continuity Policy
- Organisational structures: roles, responsibilities and authorities
- Assessing and treating BCMS risks and opportunities
- Continuity objectives and plans to achieve them
- Support: resources, competence, awareness, communication and documented information
- Documented information management process
- Required templates and documentation (policies, processes, procedures, plans)
Implement and Operate (Do) an ISO 22301 BCMS
- Best practices for continuity processes (based on ISO 22313 and correlated references)
- Business Impact Analysis (BIA) and disruptive scenario analysis
- Selecting continuity strategies and solutions
- Developing and implementing continuity plans and procedures
- Team plans (incident/communication, product/service continuity, emergency response, unit recovery, IT/technology, facilities, among others)
- Specific plans (e.g., pandemic/epidemic, cyberattack, among others)
- Crisis management capability and crisis plan
- Exercise and testing programme
- Transitioning the BCMS into operations
Monitor, Review, Improve and prepare for certification audit
- Monitoring, measurement, analysis and evaluation
- Internal audit programme
- Management review
- Managing findings and nonconformities; corrective actions
- Continual improvement process
- Preparation for an ISO 22301 certification audit
- Course wrap-up and exam preparation
Exam(s) and Certification
Exam “Certified Business Continuity 22301 Lead Implementer”
The exam covers the following competence domains:
- Domain 1: Business continuity fundamentals and ISO 22301 requirements
- Domain 2: Establish (Plan) an ISO 22301 BCMS
- Domain 3: Implement and Operate (Do) an ISO 22301 BCMS
- Domain 4: Monitor and Review (Check) an ISO 22301 BCMS
- Domain 5: Maintain and Improve (Act) an ISO 22301 BCMS
- Domain 6: Preparation for an ISO 22301 certification audit
Language(s): Portuguese and English (please contact BEHAVIOUR for availability in other languages).
Duration: 3 hours.
Format: Open-ended questions based on a case study and related to the competence domains.
Pass mark: 700/1000 points.
Results: “Pass or Fail”. In case of failure, the result includes an indication of domains below the minimum.
Retake: 1 free retake within 1 year after the initial exam.
Certification (levels and requirements)
After passing the exam, the candidate may apply for one of three levels, according to experience:
- Certified Business Continuity 22301 Associate Implementer: no prior experience required
- Certified Business Continuity 22301 Implementer: 2 years of experience in business continuity
- Certified Business Continuity 22301 Lead Implementer: 5 years of experience in business continuity
A Certificate and a Digital Certification Badge (i.e., “bagdet”) will be issued to participants who successfully pass the certification exam and meet all requirements of the certification level they apply for.
The people certification programme “Certified Cybersecurity Professional” was designed and is maintained in accordance with ISO/IEC 17024.
Certification programmes are valid only for individuals (not companies) and certification and maintenance depend on the exam result, professional experience, and commitment to and compliance with the contract/code of ethics. If the professional does not comply with the contract/code of ethics, certification is not granted or is revoked.
Other Information
General Information
- Training delivered in Portuguese or English
- Online training materials in Portuguese or English, with online access, in accordance with the agreed conditions
- BEHAVIOUR digital Training Attendance Certificate with 40 CPD/CPE credits
- Online Certification Exam in Portuguese or English. The exam can be taken up to 2 months from the course start date
- If the candidate does not pass the exam, they are entitled to one free retake within a maximum period of 2 months, from the date the initial exam score is released
- Digital Certification Diploma and Digital Certification Badge, upon successful passing of the exam and completion of the application process. This process has no associated cost
Trainer(s)
Benefits
View benefits
- The ISO 22301 standard defines an auditable and certifiable Business Continuity Management System (BCMS), internationally recognised.
- International recognition, easier access to markets, operational optimisation and increased trust among clients, partners and regulators.
- The ISO 22301 Lead Implementer course is based on the BEHAVIOUR pedagogical model, with a personal certification programme in accordance with ISO/IEC 17024, which defines requirements for the certification of persons.
- The course is oriented towards acquiring practical knowledge and skills to establish, implement, operate, maintain and improve a Business Continuity Management System (BCMS) in accordance with ISO 22301.
- The course enables participants to acquire a common language and a coherent structure in business continuity, covering organisational context, leadership, planning, support, operation, performance evaluation and continual improvement.
- Participants are empowered to lead business continuity programmes, strengthening governance, decision-making and evidence capabilities towards top management, audits and stakeholders.
- Participants, and consequently the organisation, are better prepared to reduce the impact of disruptions, by conducting Business Impact Analysis (BIA), defining strategies and operationalising continuity plans and procedures.
- The organisation becomes able to implement a consistent baseline of processes and control mechanisms for response, recovery, exercises/testing and continual improvement, aligned with best practices from the ISO 22300 family.
- The certification exam is proctored by an official BEHAVIOUR administrator.
- The ISO 22301 Lead Implementer certification exam is taken after the course and consists of open-ended/development questions, based on a case study.
- Upon passing the exam and after applying for certification, the professional attains the applicable certification level. If not successful, the candidate is entitled to one free retake within the period defined by the applicable certification scheme.
Logistics
Useful information
- Live Online (synchronous): 9:30–17:30 (Lisbon, GMT 0), with a lunch break and short breaks
- In-person (synchronous): 9:30–17:30 (Lisbon, GMT 0), with a lunch break and short breaks
- Duration: 28h of synchronous sessions + 12h of guided independent work (exercises and content consolidation).
- Requirements: computer with stable internet, browser, PDF reader, audio/video
Lisbon Hotels
Registration
Fill in the form to register for your preferred edition. Check the upcoming dates.
Request more information
If you would like help positioning the course within your context (professional or organisational), contact us and we will indicate the most suitable pathway.
Request Information
Companies: request a proposal
For team registrations, we provide volume conditions and a proposal tailored to organisational needs.
Request a Proposal