MODULE 01
Introduction to Business Continuity and ISO 22301
Purpose and benefits of BCMS, key terms, relationship with risk management, and overview of ISO 22301 structure and requirements.
About This Course
This course programme provides practical training in Business Continuity Management based on the international standard ISO 22301:2019 (Security and Resilience – Business Continuity Management Systems).
Participants learn how to design, implement, operate, monitor, and improve a Business Continuity Management System (BCMS) that enables organisations to prepare for, respond to, and recover from disruptive incidents. The course covers risks such as power outages, cyber incidents, supply-chain disruptions, natural disasters, political or economic shocks, pandemics, and operational failures.
It combines the core requirements of ISO 22301 with practical tools, templates, and case studies so that participants can strengthen organisational resilience, protect critical operations, meet stakeholder expectations, and support compliance or certification efforts.
Course Objectives
- Explain the principles, benefits, and requirements of ISO 22301.
- Identify critical business functions, threats, and impacts through Business Impact Analysis (BIA) and risk assessment.
- Develop practical business continuity strategies, plans, and recovery procedures.
- Establish roles, responsibilities, and communication protocols for incident response.
- Design testing, exercising, and continuous improvement processes for the BCMS.
- • Align business continuity with organisational risk management, governance, and existing management systems.
- • Support their organisation in building resilience and preparing for ISO 22301 implementation or certification.
What You Will Learn
- How to interpret and apply the requirements of ISO 22301 in a practical way.
- Methods to conduct Business Impact Analysis and risk assessments relevant to your organisation.
- How to develop effective business continuity strategies, plans, and recovery procedures.
- Techniques for testing plans and continuously improving the BCMS.
- Ways to build organisational resilience against common disruptions in the East African context.
- Practical templates and approaches that can be adapted immediately within your company.
Skills You Will Gain
- Business Impact Analysis (BIA) and risk assessment for continuity
- Development of business continuity strategies and plans
- Incident response and recovery planning
- BCMS documentation and process design aligned with ISO 22301
- Exercise and testing design
- Performance monitoring and continual improvement of continuity arrangements
- Integration of business continuity with broader risk management and governance
- Ability to support ISO 22301 implementation or certification efforts
Why Choose Komatek Academy
- Practical, standards-based training that translates ISO 22301 requirements into actionable steps for organisations.
- Local and regional relevance with case studies and scenarios reflecting real operational risks (power, cyber, supply chain, regulatory, and economic disruptions).
- Ready-to-use tools and templates so participants can begin strengthening continuity arrangements immediately.
- Flexible delivery suitable for individuals and corporate teams (classroom, hybrid, or on-site).
- Strong value for organisations helps companies protect critical operations, meet stakeholder and regulatory expectations, and build long-term resilience.
- Focus on implementation rather than pure theory, supporting both career development and measurable organisational improvement
Who Should Attend
Risk managers, compliance officers, and business continuity coordinators.
Operations, IT, security, and facilities managers.
Senior managers and executives responsible for organisational resilience.
Internal auditors and consultants supporting risk or continuity programmes.
Staff in banks, telecoms, manufacturing, oil & gas, NGOs, government agencies, logistics, and growing SMEs.
Professionals preparing to implement or maintain a Business Continuity Management System.
Course Content
MODULE 02
Context of the Organisation and Leadership
Understanding the organisation, interested parties, scope of the BCMS, leadership commitment, policy, and roles & responsibilities.
MODULE 03
Business Impact Analysis (BIA) and Risk Assessment
Identifying critical activities, assessing impacts over time, setting recovery objectives (RTO, RPO, MTPD), and evaluating threats and vulnerabilities.
MODULE 04
Business Continuity Strategies and Solutions
Selecting appropriate strategies for people, premises, technology, information, suppliers, and stakeholders
MODULE 05
Business Continuity Plans and Procedures
Developing response, recovery, and communication plans; incident management structure; and documentation requirements.
MODULE 06
Exercising, Testing, and Performance Evaluation
Types of exercises, testing methods, monitoring, measurement, internal audit, and management review.
MODULE 07
Improvement and Integration
Corrective actions, continual improvement, integration with other management systems (e.g., ISO 27001, ISO 9001, risk management), and preparing for certification.
MODULE 08
Practical Application and Case Studies
Workshops using real or simulated organisational scenarios; development of key plan elements; review of templates and implementation roadmap. Final practical component or presentation.
