Power cuts, ransomware, a failed cloud provider, flooding or the sudden loss of a key supplier can halt critical services within hours. Organisations that treat continuity as a filing exercise discover the gaps only when customers, regulators and staff are already affected. Risk-led resilience starts earlier, by identifying which threats could disrupt the most important services, how quickly harm becomes intolerable and which controls actually reduce exposure. Across five days you apply ISO 31000 risk assessment to continuity, run a business impact analysis in line with ISO 22317, and link findings to the ISO 22301 management system.
Further sessions cover threat and vulnerability assessment, single points of failure, third-party and concentration risk, impact tolerances for important business services, key risk indicators, bow-tie analysis and severe-but-plausible scenario testing. Risk managers, business continuity coordinators, operational risk officers, internal auditors, ICT and security managers and compliance staff in banks, insurers, utilities, telecoms, health services and government will gain most. Classroom, online and in-house options are available, with a CPD-accredited certificate on completion. Afterwards you can build a resilience risk register, defend recovery priorities to executives and design a test programme.
Supervisors, boards and customers increasingly judge organisations not on whether disruption happens but on how well critical services keep running when it does. Banking supervisors have moved from asking for recovery plans to expecting firms to identify their important business services, set tolerances for disruption and prove through testing that they can stay within them. Similar expectations are spreading to insurers, utilities, payment providers and public bodies, and meeting them requires continuity planning to rest on sound risk analysis rather than templates.
The Risk Management for Business Continuity & Operational Resilience Training Course brings the two disciplines together. Participants begin with the ISO 31000 risk process and the Basel Committee Principles for Operational Resilience, then map important services and their dependencies on people, technology, premises, data and suppliers. They assess threats and vulnerabilities, quantify how the impact of disruption grows over time, set recovery time objectives and impact tolerances, and choose treatment options ranging from redundancy and diversification to insurance and manual workarounds. Later sessions address outsourcing and concentration risk, indicator design, scenario testing and the reporting of residual resilience risk to senior management.
Delivery is workshop based. Participants work through a single case organisation from start to finish, building a risk register, a dependency map and a scenario test plan that they can adapt to their own institution.
Participants completing the programme will be able to:
By the final day, each participant holds:
Learning is anchored in one case organisation that participants analyse from risk scoping through to testing. Methods include:
Day 1: Risk Foundations for Resilience
Day 2: Important Services, Dependencies and Impact Analysis
Day 3: Threat, Vulnerability and Risk Assessment
Day 4: Risk Treatment, Strategies and Impact Tolerances
Day 5: Testing, Monitoring and Reporting Resilience Risk
The programme is built for professionals who own, assess or challenge continuity and resilience risk, such as:
Delegates who are present for all five days and complete the case organisation exercises, including the risk register and scenario test plan, receive a CPD-accredited Certificate of Completion issued by Vision Reach Global Consultancy.
The certificate lists the course title, dates and delivery mode, making it suitable evidence for continuing professional development records.
Upcoming cohorts
CPD-Accredited
Official invoice & confirmation letter provided
Team discount for 3+ seats
Need help with this booking?
Our training team can help with group pricing, invoicing, or picking the right schedule.
Everything you need to know about this course before you register.
By the end of the Risk Management for Business Continuity & Operational Resilience programme, you'll be able to apply the iso 31000 risk management process to continuity and resilience decisions, identify important business services and map their dependencies on people, systems, sites, data and suppliers, assess threats, vulnerabilities and single points of failure that could interrupt critical operations, and conduct a business impact analysis that shows how losses escalate over time. The full breakdown of topics is covered session by session in the Course Outline tab above.
The programme is built for professionals who own, assess or challenge continuity and resilience risk, such as: Enterprise and operational risk managers, Business continuity managers and coordinators, Chief risk officers and heads of resilience, ICT disaster recovery and information security managers, Internal auditors reviewing continuity arrangements, Compliance officers in banks, insurers and payment service providers, Facilities, operations and supply chain managers, and Risk and resilience staff in utilities, telecoms, health and public agencies.
Risk Management for Business Continuity & Operational Resilience Training Course typically runs as 5 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Risk Management for Business Continuity & Operational Resilience Training Course is scheduled in-classroom in Nairobi, Kenya, Mombasa, Kenya, Naivasha, Kenya, and Kisumu, Kenya, and 14 other locations, plus a live interactive virtual classroom you can join from anywhere. Check the schedule panel above for exact upcoming dates and fees in each location.
The next live virtual cohort of Risk Management for Business Continuity & Operational Resilience starts October 26, 2026, with new classroom cohorts also running on a rolling basis. Pick a date and location in the schedule panel above, then click "Register for the Course" — it takes a few minutes and your seat is confirmed once payment or a signed purchase order is received.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Risk Management for Business Continuity & Operational Resilience Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Risk Management for Business Continuity & Operational Resilience Training Course is pitched at intermediate professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Fees for Risk Management for Business Continuity & Operational Resilience Training Course vary by delivery location and format and are shown in real time in the schedule panel above once you pick a date. Register 3 or more delegates on the same course together and a 5% team discount is applied automatically — larger cohorts can request a custom corporate quote.
Yes — Risk Management for Business Continuity & Operational Resilience Training Course can be delivered on-site at your offices (or virtually for distributed teams), with case studies and examples tailored to your industry and the specific challenges your team is working through. Switch to the "In-House" tab in the schedule panel above to request a proposal.
Related Training
Swipe to see more courses →