Sessions
Date, delivery mode, trainer and fee are specific to each session. Fees are per person.
Request a quote for a date for your organisation or for the next run.
Application formNo membership required
Get a quote
Training content
Overview
ISO 22301 Business Continuity Management System Awareness Training has been designed to provide a basic understanding of the ISO 22301 Business Continuity Management System requirements and to help organisations prepare for disruptions and crises, maintain their critical activities and reduce the impact of incidents.
The training is based on the current ISO 22301:2019 and ISO 22301:2019/Amd 1:2024 requirements. ISO 22301 provides a systematic Business Continuity Management System approach that enables organisations to prepare for and respond to disruptions, maintain their activities at acceptable levels and return to normal operating conditions in a controlled manner.
The language of the training is Turkish. The training is delivered online.
About the Training
The training covers the structure of the ISO 22301 standard, the fundamental principles of business continuity, the context of the organisation, leadership, business continuity policy, risks and opportunities, Business Impact Analysis (BIA), risk assessment, identification of prioritised activities, business continuity strategies and solutions, business continuity plans and procedures, incident response, communication, exercises and tests, performance evaluation, continual improvement and the effects of climate change on business continuity.
Who Should Attend?
- Employees wishing to learn about the ISO 22301 Business Continuity Management System
- Business continuity and crisis management teams
- Risk and compliance personnel
- Managers and department heads
- Information technology and information security teams
- Operations and production personnel
- Human resources teams
- Supply chain and purchasing personnel
- Quality and management system personnel
- Personnel involved in emergency response and organisational resilience activities
Objectives and Outcomes
The aim is for participants to understand the fundamental approach and requirements of the ISO 22301 Business Continuity Management System, recognise disruptions that may affect the organisation’s critical activities and their consequences, appreciate the importance of business continuity plans, and learn how their own roles contribute to the organisation’s resilience.
By the End of the Training
Participants will be able to:
- Explain the purpose, scope and fundamental structure of the ISO 22301 standard.
- Understand the concepts of business continuity, crisis, incident and disruption.
- Explain the fundamental principles of the Business Continuity Management System.
- Understand the importance of the organisation’s context and interested parties.
- Explain the business continuity policy and management’s responsibilities.
- Understand the purpose and importance of the Business Impact Analysis (BIA).
- Explain how critical and prioritised activities are identified.
- Understand the fundamental approach to business continuity risk assessment.
- Appreciate the importance of business continuity strategies and solutions.
- Explain the fundamental structure of business continuity plans.
- Understand the importance of incident management and crisis communication.
- Explain the purpose of exercise, testing and evaluation activities.
- Identify how their own roles and responsibilities contribute to business continuity.
- Understand the role of continual improvement in the Business Continuity Management System.
Programme and Method
Training Topics
- Introduction to the ISO 22301 Standard and Business Continuity Management System
- Concepts of Business Continuity, Organisational Resilience, Incidents and Crises
- Context of the Organisation, Interested Parties and Leadership
- Business Continuity Policy, Roles and Responsibilities
- Risks, Opportunities and Business Continuity Objectives
- Business Impact Analysis (BIA) and Identification of Priority Activities
- Business Continuity Risk Assessment
- Identification of Business Continuity Strategies and Solutions
- Development of Business Continuity Plans and Procedures
- Incident Response, Crisis Management and Communication
- Resources, Competence, Awareness and Documented Information
- Exercises, Testing and Validation of Business Continuity Plans
- Performance Monitoring, Evaluation and Continual Improvement
- Climate Change and Business Continuity Management
Training Method
The training is delivered through presentations, relating ISO 22301 requirements to day-to-day business processes, Business Impact Analysis examples, disruption and crisis scenarios, identification of critical activities, business continuity strategies, incident response examples, business continuity plans, exercise scenarios and case studies.
Attendance and Certificate
Certification Rule
A certificate of attendance is issued to all participants whose attendance has been confirmed. To receive a certificate of achievement, participants must obtain a passing grade in the examination at the end of the training; participants who use all their examination attempts but do not pass will be issued a certificate of attendance.
FAQ and Resources
Who is the ISO 22301 Business Continuity Management System Awareness Training suitable for?
It is suitable for all employees and managers working in business continuity, crisis management, risk, information technology, operations, supply chain, human resources, quality and management systems, or those seeking to improve their organisation's level of preparedness for disruptions.
What is the main objective of the training?
The objective is for participants to understand the fundamental requirements of the ISO 22301 Business Continuity Management System, recognise the impact of disruptions on the organisation and contribute effectively to processes aimed at ensuring business continuity.
What areas does ISO 22301 cover?
It covers areas such as the context of the organisation, leadership, business continuity policy, risks and opportunities, Business Impact Analysis, risk assessment, business continuity strategies and solutions, plans and procedures, incident response, communication, exercises, performance evaluation and continual improvement.
What is a Business Impact Analysis (BIA)?
A Business Impact Analysis is a systematic process used to assess the effects that disruptions to activities may have on the organisation, identify priority activities and determine the timeframes and resources required to restore these activities to a sustainable level.
What is the difference between risk assessment and Business Impact Analysis?
Business Impact Analysis focuses on the consequences of disrupted activities for the organisation and their impact over time. Risk assessment evaluates the threats and risks that could cause disruption and their impact on the organisation. Together, the two processes support the development of business continuity strategies.
What is a business continuity plan?
A business continuity plan is a documented approach that defines the tasks, responsibilities, communication methods, resources and response steps to be implemented so that an organisation can continue its priority activities or resume them within an acceptable timeframe when a disruption occurs.
Should business continuity plans be tested?
Yes. Regular exercises and tests must be conducted to verify the practicability of business continuity plans, the preparedness of teams and the effectiveness of the identified strategies. The results obtained are used for improvement activities.
What has ISO 22301:2019/Amd 1:2024 changed?
The amendment emphasises that organisations must determine whether climate change is a relevant issue within their context and consider that interested parties may have requirements related to climate change.
Does the training include practical activities?
Yes. The training uses Business Impact Analysis, the identification of critical activities, disruption and crisis scenarios, risk assessment, business continuity strategies, planning and exercise examples, and case studies.
Is there an examination at the end of the training?
Yes. An assessment examination is administered at the end of the training.
References
- ISO 22301:2019 Security and Resilience — Business Continuity Management Systems — Requirements
- ISO 22301:2019/Amd 1:2024 Security and Resilience — Business Continuity Management Systems — Amendment 1: Climate Action Changes
- ISO 22313:2020 Security and Resilience — Business Continuity Management Systems — Guidance on the Use of ISO 22301
- ISO/TS 22317:2021 Security and Resilience — Business Continuity Management Systems — Guidelines for Business Impact Analysis
- ISO 22320:2018 Security and Resilience — Emergency Management — Guidelines for Incident Management
- ISO 22398:2013 Societal Security — Guidelines for Exercises
ISO 31000:2018 Risk Management — Guidelines