Skip to main content
Image coming soon

Direct control over BCMS deployment and audit timing under ISO 22301

$199.00
Adding to cart… The item has been added

A tailored course, built for your situation

Direct control over BCMS deployment and audit timing under ISO 22301

Own the business continuity roadmap end to end with confidence in ISO 22301 implementation

$199 one-time
24-hour access provisioning 30-day money-back guarantee Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.

Who this is for

Network Security Administrator at a global cloud services provider, responsible for compliance-aligned infrastructure continuity and control execution

Who this is not for

Individuals looking for general awareness of ISO standards or those without direct responsibility for control implementation and audit readiness

What you walk away with

  • Define and lock BCMS deployment timelines without escalation
  • Select and finalize auditor engagement thresholds independently
  • Approve continuity test scope and reporting format without review
  • Control documentation structure and update cycles for ISO 22301 artifacts
  • Own vendor continuity validation timing and evidence requirements

The 12 modules (with all 144 chapters)

Module 1. Mapping ISO 22301 to live cloud network environments
Align ISO 22301 clauses directly to active network security controls at Rackspace-level complexity.
12 chapters in this module
  1. Cl 4 Context of the organization
  2. Cl 4 1 Understanding organisation
  3. Cl 4 2 Understanding needs
  4. Cl 4 3 Determining scope
  5. Cl 4 4 BCMS scope definition
  6. Cl 4 4 Documentation requirements
  7. Mapping clause to network layers
  8. Integrating with existing SOC 2 controls
  9. Identifying cloud-specific risks
  10. Linking to incident response
  11. Common gaps in hosting providers
  12. Rackspace-relevant examples
Module 2. Leadership commitment without escalation paths
Implement top management obligations using internal authority levers already available to ICs.
12 chapters in this module
  1. Cl 5 Leadership overview
  2. Cl 5 1 Leadership and commitment
  3. Assigning roles internally
  4. Policy ownership models
  5. Internal communication plan
  6. Securing buy-in laterally
  7. Documenting leadership input
  8. Policy version control
  9. Exception handling protocol
  10. Updating policy post-incident
  11. Version approval workflow
  12. No executive sign-off needed
Module 3. Independent risk assessment design
Build ISO 22301 risk treatments using existing access and data, without cross-team dependencies.
12 chapters in this module
  1. Cl 6 1 Actions to address risks
  2. Risk criteria selection
  3. Threat modeling for cloud
  4. Impact scale definition
  5. Likelihood calibration
  6. Choosing risk treatment options
  7. Avoiding third-party tools
  8. Documenting risk decisions
  9. Internal validation method
  10. Updating assessments quarterly
  11. Linking to change control
  12. Evidence preservation
Module 4. Own the business impact analysis end to end
Conduct BIA without leadership prompts or external facilitation.
12 chapters in this module
  1. Cl 6 2 Business impact analysis
  2. Identifying critical functions
  3. Defining time thresholds
  4. Data dependency mapping
  5. Interviewing peers effectively
  6. Scoping without overreach
  7. Merging technical and business views
  8. Documenting findings
  9. Setting recovery objectives
  10. Presenting to stakeholders
  11. Updating post-incident
  12. Version control for BIA
Module 5. Final authority on continuity strategy
Define and lock recovery approach for network services under ISO 22301 without review.
12 chapters in this module
  1. Cl 6 3 Business continuity strategy
  2. Recovery time objectives
  3. Resource identification
  4. Alternate site planning
  5. Technology replication
  6. Personnel availability plans
  7. Vendor continuity obligations
  8. Cloud failover design
  9. Testing frequency decisions
  10. Approving strategy changes
  11. Documenting rationale
  12. No management approval needed
Module 6. Design and own the response structure
Set incident response hierarchy and activation rules independently.
12 chapters in this module
  1. Cl 7 1 BCMS framework
  2. Cl 7 2 Document control
  3. Cl 7 3 Documented information
  4. Response team roles
  5. Activation thresholds
  6. Communication tree design
  7. Internal notification flow
  8. External reporting triggers
  9. Chain of command rules
  10. Updating team rosters
  11. Cross-shift coordination
  12. Documentation retention
Module 7. Control all BCMS documentation outputs
Own format, access, and update cadence for all ISO 22301-related documents.
12 chapters in this module
  1. Document control framework
  2. Naming convention system
  3. Storage location decision
  4. Access permissions model
  5. Version numbering scheme
  6. Change tracking method
  7. Review cycle setting
  8. Retention periods
  9. Archiving process
  10. Updates without approval
  11. Rollback procedures
  12. Audit-readiness checklist
Module 8. Set and lead continuity testing schedule
Determine when, how, and at what depth tests occur , no sign-off required.
12 chapters in this module
  1. Cl 8 1 Operational planning
  2. Cl 8 2 Exercising overview
  3. Test type selection
  4. Scope definition authority
  5. Scheduling windows
  6. Stakeholder notification
  7. Test plan documentation
  8. Simulated scenarios
  9. Post-test review
  10. Finding resolution
  11. Reporting format
  12. Publishing results
Module 9. Independent incident response coordination
Lead continuity activation during real events with pre-authorized protocols.
12 chapters in this module
  1. Cl 8 3 Incident response
  2. Activation authority
  3. Initial assessment steps
  4. Declaring continuity mode
  5. Internal comms protocol
  6. External vendor triggers
  7. Resource mobilization
  8. Status reporting rhythm
  9. Recovery tracking
  10. Post-event review timing
  11. Lessons learned capture
  12. Updating plans
Module 10. Final sign-off on corrective actions
Close findings and update controls without management review.
12 chapters in this module
  1. Cl 10 1 Nonconformity handling
  2. Cl 10 2 Corrective action
  3. Root cause methodology
  4. Action owner assignment
  5. Timeline setting
  6. Evidence collection
  7. Verification method
  8. Closing loop
  9. Updating documentation
  10. Preventing recurrence
  11. Tracking in system
  12. Audit trail preservation
Module 11. Own the internal audit schedule and scope
Determine when audits happen, what they cover, and who participates.
12 chapters in this module
  1. Cl 9 1 Monitoring and measurement
  2. Cl 9 2 Internal audit
  3. Audit scope definition
  4. Scheduling authority
  5. Team selection
  6. Checklist creation
  7. Evidence collection
  8. Finding documentation
  9. Reporting format
  10. Follow-up timing
  11. Exception handling
  12. Closing audit cycle
Module 12. Control certification audit engagement path
Decide when to engage auditors, what to show, and how to respond.
12 chapters in this module
  1. Cl 9 1 Certification timing
  2. Readiness assessment
  3. Choosing audit window
  4. Pre-audit briefing
  5. Evidence package
  6. Response strategy
  7. Handling nonconformities
  8. Appeal process
  9. Post-certification
  10. Maintaining certification
  11. Surveillance timing
  12. Re-engagement cycle

How this maps to your situation

  • When launching a new cloud region
  • After a network incident
  • During vendor continuity audit
  • Before annual compliance review

Before vs. after

Before
Awaiting approvals to move on BCMS planning, dependent on leadership timing for ISO 22301 milestones
After
Deploy BCMS changes on your timeline, with auditor engagement and testing cycles under your direct authority

What's included with your purchase

  • 12 modules with 12 chapters each (144 chapters)
  • Downloadable templates and worked examples for every module
  • Hand-built implementation playbook delivered alongside course access
  • 30-day money-back guarantee

Delivery and format

  • Course and learning environment access provisioned within 24 hours of purchase
  • Hand-built implementation playbook delivered alongside course access

Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.

Time investment: Approximately 3 hours per module, with flexible pacing across 4-6 weeks

If nothing changes
Continued dependency on approval chains slows resilience delivery and diminishes visibility into your capability to act independently

How this compares to the alternatives

Unlike generic ISO 22301 overviews, this course is tailored to network security practitioners in cloud environments, with Rackspace-relevant implementation patterns and decision ownership models that reflect real authority paths for ICs.

Frequently asked

Who is this course designed for?
Network security practitioners in cloud and hosting environments who have technical ownership of controls and want full authority over ISO 22301 implementation.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does this cover other standards?
Focus is strictly on ISO 22301, with references to SOC 2 and NIST 800-53 where they intersect with business continuity.
$199 one-time. Approximately 3 hours per module, with flexible pacing across 4-6 weeks.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

30-day money-back guarantee· 144 chapters· Hand-built playbook included· Account access within 24 hours
!