Module #2

Business Continuity

Content of the Module

Introduction of the Module
Learning objectives
Learning outcomes
Structure of the Module
2 Real Life Business Examples
2 Business Scenarios
2 best practices (global level related with the topic)
Self – Assessment Tool
Additional Resources

Introduction

Business continuity management is the management practice through which organizations develop their ability “to continue the delivery of products and services within acceptable time frames at predefined capacity during a disruption1.”

It is a subject of critical importance. Stakeholder satisfaction, by which we mean clients, the market, investors, and the public, is an indispensable component of an organization’s success – whatever its objectives may be.

Every organization has a reason for being: selling products, maintaining infrastructure, or even serving the public are all vital outputs that the whole organization is set up to deliver. Accordingly, whenever delivery is threatened, so is the viability of the organization itself; and without adequate business continuity measures the degree to which it is imperiled is purely based on luck.

Business continuity practices help organizations achieve a measure of control over their resilience. To a large extent, they can declare independence over unpredictable adverse effects of various nature, scope, and characteristics, reclaiming initiative in the market. 

This module sets out both the theory and practice of the discipline, as detailed in relevant international standards and as practiced by the most experienced professionals in Europe and around the world.
1Security and resilience — Business continuity management systems — Requirements ISO 22301:2019, ISO, 2019.

Learning Objectives

The objective of this module is to provide a solid methodological foundation for those professionals who are either looking to set up a fully-fledged business continuity management system (BCMS) or who are interested in fine-tuning or reinforcing their existing business continuity practices.

Accordingly, the module will illustrate both the theory and practice of business continuity, aiming for a generalist view of the discipline. The minimum result shall be that absorbing this module will enable professionals from any background to be conversational in the basic theory and practice of this management discipline.

To this end, the module materials shall make relevant reference to real-life business cases or other such examples to ensure that it is as effective and relatable as possible.

The ideal result, however, shall be that curious professionals can move beyond the basic materials of this module to additional resources available to the business continuity professional community, such as membership in professional bodies, advanced professional certification, as well as participation in the most current debates.

 To this end, the module shall include suggestions for further reading, which will help set the professional perusing these materials on the path for deeper engagement with the wider community of business continuity professionals.


Learning Outcomes

At the end of this unit,  you will be able to…

Know: the methods of business continuity management
Understand: the context and value of business continuity management
Identify: how business continuity methodology can improve your organization
Evaluate: your organization’s existing business continuity practices against international standards and best practices
Demonstrate: to internal stakeholders the advantages of a fully-functioning business continuity management system

Structure of the Module


1. Unit 1: Historical Background

• The approach to threat management is changing;
• Why focus on resilience?;
• What’s your toughest challenge?
• Nokia’s example;
• What are the threats that we should be looking out for?


2. Unit 2: Concepts & Definitions

• Concepts and definitions;
• Business continuity within an holistic approach to resilience;
• Theoretical state of the art
• Business continuity management key concepts
• Isn’t business continuity just another kind of risk management?
• All analyses must be «objective»
• «Critical» does not mean «important»
• Main takeaways


3. Unit 3: Business Continuity
Management System

• What is a BCMS?
• BCMS Policy vs BCMS Programme: What’s the Difference?
• Getting Everybody Onboard (1/2)
• Finding Out What’s What
• How can I quantify a process’s level of criticality?
• How to perform the BIA
• After the BIA, the CRA: Continuity Requirements Analysis
• Practical part:
• 2 Real Life Business Examples
• 2 Business Scenarios
• 2 best practices (global level related with the topic)



Are you interested in learn more about the CONTINUITY activities & achievements?