Practitioner Certificate in Business Continuity Management (PCBCM) Course Description 10 th December, 2015 Version 2.0
Course The Practitioner Certificate in Business Continuity Management (PCBCM) course is designed to provide a hands-on approach to all stages of the business continuity management (BCM) lifecycle from conducting a business impact analysis to the exercising of business continuity plans. Making full use of the current standard ISO 22301, students are able to make a significant contribution to the BCM process when returning to their organisation. The PCiBCM course and associated qualification provides the opportunity for those already serving as business continuity professionals to enhance or refresh their knowledge and, in the process, gain a recognised industry qualification, regulated by the BCS The Chartered Institute for IT. This is useful to both the individual and the employer in terms of attesting to the level of professional ability an individual has attained. The InfoSec Skills PCBCM course primes the student with all the knowledge needed to sit the BCS PCBCM examination. Why should you attend? This Certificate in Business Continuity Management is intended for (but not limited to) those who are involved in the areas of business continuity and disaster recovery. It will provide guidance to the student in good business continuity management practice, and assist the path to ISO 22301 accreditation. Prerequisites There are no formal entry requirements but candidates will require an understanding of information assurance and basic risk management practices. Course Contents The course consists of 8 modules: Module 1 Introduction to business continuity management Module 2 Business continuity programme management Module 3 Understanding the organisation Module 4 Determining the business continuity strategy Module 5 Business continuity response Module 6 Exercising, maintenance and review Module 7 Embedding business continuity awareness in the organisation Module 8 Preparation for the PCBCM examination and mock exam Assessment At the end of each module the student can undertake an assessment to verify their understanding of the information provided in that module and whether the objectives of the module have been met. Each topic also contains a quiz that enables a student to test their knowledge of the information covered in that topic. At the end of the course, an online examination is provided that prepares the student for taking the official BCS PCBCM examination. Total Length of Course The total time of lecturing and practical work in this course is 36 hours, additional to which is four hours of examination preparation. InfoSec Skills Limited 2016. All rights reserved. Page 2 of 6
Course Materials On attending this course students are provided with: Full colour, bound course book with course slides and notes Course Outline Module 1 Introduction to Business Continuity Management In this module the student will learn the basic concepts of business continuity management along with the main terminology commonly in use. Students will gain an understanding of why business continuity management is becoming increasingly important, not just in the IT community but also in the business community at large. The need for business continuity management The context of business continuity management in the business Review of risk management fundamentals The business continuity lifecycle Define and explain the key terms used in business continuity management in their appropriate context Explain and justify the key concepts of business continuity management Explain the overall business continuity lifecycle 2 hours. Module 2 Policy and Programme Management In this module, students will gain an appreciation of the key areas of the overall business continuity management programme. Business continuity policy Business continuity governance Business continuity implementation Ongoing business continuity management Involvement of third parties Business continuity documentation Understand and be able to explain the overall process of developing the business continuity policy and of business continuity programme management 2 hours. InfoSec Skills Limited 2016. All rights reserved. Page 3 of 6
Module 3 Understanding the Organisation This module describes how the Business Continuity Manager sets about understanding the organisation and initiates the overall Business Continuity Management programme. Identification of mission-critical areas and Business Impact Analysis (BIA) Continuity Requirements Analysis (CRA) Evaluation of threats and risk assessment Evaluation of options and business cases Understand the principles for identifying mission-critical activities within an organisation Carry out a business impact analysis Conduct a continuity requirements analysis Identify the likely threats and hazards to the organisation Carry out a risk assessment Evaluate the continuity options Understand the need for and be able to draft business cases and obtain programme sign-off 11 hours. Module 4 Determining the Business Continuity Strategy This module describes how the organisation may develop an overall business continuity strategy. Identifying and selecting strategies People Premises Information and communications technology Information Supply chain and stakeholders Civil emergencies Explain the inter-dependency of all aspects of the business model and the need for each of them to play their part in the business continuity strategy Understand the significance of the supply chain in the business continuity strategy Identify the relevant stakeholders and their relationship with the business continuity strategy Understand how the organization may be impacted by a civil emergency 8 hours. InfoSec Skills Limited 2016. All rights reserved. Page 4 of 6
Module 5 Business Continuity Response Within this module students will learn about how the organisation develops and implements the business continuity response and develops plans that are appropriate to the situation. The Incident management process Types of plan, including incident management, business continuity, disaster recovery and business resumption plans Understand how the organisation should form a response structure Describe the various types of plan, including incident management, business continuity, disaster recovery and business resumption plans 6 hours. Module 6 Exercising, maintenance and review In this module, the student will gain an understanding of the way in which business continuity plans are exercised and maintained and of the need for a plan review programme. Exercising and testing of plans Maintenance and review of plans Explain the concept of business continuity exercising, maintenance and review Explain the need for and the frequency of regular updates to the plans Explain the need for and the frequency of regular reviews of plans 3 hours. Module 7 Embedding Business Continuity Awareness Whilst business continuity plans are important, they can only be successful if business continuity awareness is embedded into the entire organisation Overall awareness Skills training Describe how business continuity awareness can be achieved through working with key departments within the organisation to develop and deliver an appropriate awareness InfoSec Skills Limited 2016. All rights reserved. Page 5 of 6
programme for each Explain the need for and the benefits of training of key staff in business continuity skills 4 hours. Module 8 Preparation for the PCiBCM exam and mock exam The final module will prepare the student for the PCBCM examination to be undertaken during one of the public examinations held at the BCS headquarters. Format, structure and scoring of the test A mock exam At the end of this module the student will: Understand the format and scoring of the examination Be prepared to take the PCBCM examination and pass! 4 hours. InfoSec Skills Limited 2016. All rights reserved. Page 6 of 6