Business continuity has moved from an IT recovery concern to a board-level question of operational resilience. Financial regulators, following the Basel Committee's Principles for Operational Resilience, increasingly ask institutions to identify their critical operations and show they can stay within tolerance through severe but plausible disruption, and customers, insurers and supply chain partners are asking similar questions of firms in every sector. Practitioners are expected to bring evidence, not just plans.

The Professional Business Continuity & Operational Resilience Training Course is aimed at people who already work in continuity, risk or IT recovery and want to practise at a more rigorous level. It follows the ISO 22301 lifecycle from context, scope and policy through business impact analysis and risk assessment, continuity strategy and solutions, plans and procedures, exercising and testing, and performance evaluation and improvement. Throughout, it connects continuity work with the wider resilience agenda described in ISO 22316, including crisis management, cyber resilience and third-party dependencies.

Each day combines practitioner briefings with applied work on a case organisation. Participants complete a BIA, map dependencies for an important business service, select strategies with cost and risk trade-offs, draft plan sections and design and facilitate a tabletop exercise, finishing with a resilience report suitable for a risk committee.

Participants completing the course will be able to:

• Scope and establish a business continuity management system aligned with ISO 22301.
• Conduct a business impact analysis that sets defensible MTPD, RTO, RPO and minimum service levels.
• Identify important business services and set impact tolerances for severe but plausible scenarios.
• Map end-to-end dependencies on people, premises, technology, information and suppliers.
• Evaluate continuity strategies and solutions against cost, risk and recovery capability.
• Write business continuity, IT disaster recovery and crisis management plans that teams can execute.
• Design, facilitate and evaluate tabletop, functional and full-scale exercises.
• Measure and report programme performance to senior management, auditors and regulators.

The course is intended for experienced practitioners responsible for continuity and resilience, including:

• Business continuity managers and BCM coordinators
• Operational risk and enterprise risk managers
• IT disaster recovery and infrastructure managers
• Information security and cyber resilience officers
• Internal auditors reviewing continuity arrangements
• Compliance officers in banks, insurers and payment service providers
• Facilities, security and emergency management leads
• Supply chain and vendor risk managers
• Operations managers in telecoms, utilities, healthcare and government agencies

By the close of the week, participants have produced:

• A completed BIA for a case business unit, with justified recovery objectives.
• A dependency map for one important business service, showing single points of failure.
• An impact tolerance statement and a set of severe but plausible scenarios to test it.
• A continuity strategy options paper comparing cost, risk and recovery capability.
• A tabletop exercise pack with scenario injects, roles and an evaluation form.
• A set of programme KPIs and a draft resilience report for a risk committee.
• A gap assessment of their own organisation against the ISO 22301 clauses.

Learning is applied and practitioner-led, using:

• A single case organisation that participants take from scope to exercise across the week
• BIA interview role plays and dependency mapping workshops
• Comparison of continuity strategies using cost and recovery data
• A facilitated tabletop exercise with live injects and a structured debrief
• Clause-by-clause review against ISO 22301 using participants' own documents
• Peer critique of draft plans and resilience reports

On completing all five days and the applied workshops, including the BIA and tabletop exercise, each participant receives a CPD-accredited Certificate of Completion issued by Vision Reach Global Consultancy.

The certificate confirms training completed and does not replace accredited ISO 22301 auditor or implementer qualifications.