A tailored course, built for your situation
Mastering ISO 22301 for Senior Product Leaders in Financial Services
Build unshakeable business continuity frameworks with full ownership of design and escalation pathways.
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior product and operations leaders in highly regulated financial institutions who own service continuity outcomes and need to demonstrate control over BCMS design, testing, and incident response.
Who this is not for
Individuals seeking entry-level awareness of business continuity, those without decision rights over service recovery design, or teams looking for generic compliance checklists without implementation depth.
What you walk away with
- Define and approve business continuity testing scope without escalation
- Set recovery time and recovery point objectives for critical services
- Own vendor SLA commitments for incident recovery and notify partners directly
- Approve incident command structure assignments during live crisis simulations
- Document and enforce escalation paths for operational disruption events
The 12 modules (with all 144 chapters)
Module 1. Understanding ISO 22301 Context and Scope
Establish the organizational context for business continuity management systems, define leadership roles, and determine which services require formal recovery plans.
12 chapters in this module
- What ISO 22301 solves for in financial services
- Mapping services to regulatory importance
- Identifying internal stakeholders
- Defining leadership responsibilities
- Setting governance boundaries
- Assessing third-party dependencies
- Classifying service criticality
- Documenting scope decisions
- Aligning with FCA PRA expectations
- Defining 'business as usual' thresholds
- Creating scope exemption rationale
- Versioning scope documentation
Module 2. Leadership Commitment and Policy Design
Develop executive-endorsed continuity policies and ensure leadership accountability is formally documented and actionable.
12 chapters in this module
- Drafting board-level policy statements
- Securing signed leadership commitment
- Defining policy enforcement mechanisms
- Linking policy to regulatory requirements
- Communicating policy across regions
- Handling policy exceptions
- Updating policy after incidents
- Measuring policy adherence
- Integrating with risk appetite statements
- Documenting delegation paths
- Policy review cadence
- Stakeholder feedback loops
Module 3. Risk Assessment and Business Impact Analysis
Conduct targeted BIA exercises to determine recovery priorities and quantify impacts across financial, reputational, and compliance dimensions.
12 chapters in this module
- Selecting BIA participants
- Designing BIA questionnaires
- Classifying data sensitivity
- Estimating financial loss rates
- Assessing reputational exposure
- Determining compliance breach risks
- Calculating maximum tolerable downtime
- Setting recovery time objectives
- Validating RTOs with operations
- Prioritizing services by impact
- Documenting BIA findings
- Gaining sign-off on BIA scope
Module 4. Defining Recovery Objectives
Set enforceable RTOs and RPOs for critical functions and ensure they are integrated into service design and vendor contracts.
12 chapters in this module
- Translating BIA into recovery goals
- Setting RTO for transaction processing
- Setting RPO for data replication
- Aligning RTO with SLAs
- Negotiating RTOs with cloud providers
- Documenting RTO validation methods
- Testing RTO assumptions
- Updating RTO after changes
- Handling RTO exceptions
- Escalating missed RTOs
- Communicating RTO to customers
- Auditing RTO compliance
Module 5. Incident Command Structure Design
Build a clear, pre-approved incident response hierarchy with defined roles, communication paths, and authority levels.
12 chapters in this module
- Identifying crisis leadership roles
- Assigning incident commander
- Defining communication leads
- Establishing regional coordinators
- Creating escalation trees
- Setting activation triggers
- Documenting decision rights
- Training command staff
- Simulating command handoffs
- Reviewing command performance
- Updating roles after turnover
- Integrating with security ops
Module 6. Business Continuity Strategy Development
Select and justify recovery strategies including people, premises, technology, and data access across disruption scenarios.
12 chapters in this module
- Evaluating alternate worksites
- Assessing remote workforce readiness
- Validating backup data centers
- Testing cloud failover paths
- Ensuring identity continuity
- Securing supply chain access
- Prioritizing system recovery
- Mapping dependencies
- Estimating recovery costs
- Approving strategy exceptions
- Documenting strategy rationale
- Reviewing strategy annually
Module 7. Creating Response Plans
Develop actionable, role-specific response plans with clear triggers, actions, and handoff points.
12 chapters in this module
- Structuring plan by incident type
- Defining activation criteria
- Outlining initial response steps
- Assigning tasks by role
- Integrating with security alerts
- Including communication scripts
- Linking to contact databases
- Adding checklist formats
- Versioning response plans
- Distributing plan access
- Training on plan use
- Updating after tests
Module 8. Exercising and Testing Programs
Design and run effective continuity tests that validate plans and improve response without disrupting operations.
12 chapters in this module
- Setting test frequency by risk
- Selecting test types
- Designing scenario narratives
- Briefing participants
- Executing tabletop exercises
- Running simulation drills
- Measuring test success
- Documenting gaps found
- Assigning corrective actions
- Validating fixes
- Reporting to leadership
- Updating plans post-test
Module 9. Vendor and Third-Party BC Planning
Ensure third parties meet continuity expectations through SLAs, audits, and joint testing.
12 chapters in this module
- Identifying critical vendors
- Reviewing vendor BC plans
- Auditing recovery capabilities
- Negotiating SLAs with RTOs
- Requiring test participation
- Validating documentation
- Tracking vendor performance
- Managing multi-tier dependencies
- Handling vendor failures
- Enforcing contract terms
- Terminating non-compliant vendors
- Reporting vendor risk
Module 10. Maintenance and Continuous Improvement
Keep continuity programs current through regular reviews, updates, and integration with change management.
12 chapters in this module
- Scheduling plan reviews
- Triggering updates after incidents
- Integrating with change control
- Updating contact data
- Revalidating RTOs
- Refreshing training
- Auditing documentation
- Updating regulatory mappings
- Handling leadership turnover
- Measuring program maturity
- Benchmarking against peers
- Optimizing testing frequency
Module 11. Audit and Regulatory Readiness
Prepare for internal and external audits with complete documentation and proven testing records.
12 chapters in this module
- Mapping controls to ISO 22301
- Organizing audit evidence
- Preparing audit responses
- Demonstrating management review
- Showing test results
- Proving training completion
- Validating improvement actions
- Handling non-conformities
- Responding to regulator questions
- Preparing audit logs
- Conducting pre-audit reviews
- Reporting audit outcomes
Module 12. Program Governance and Reporting
Lead ongoing governance of the BCMS with executive reporting, KPI tracking, and maturity assessments.
12 chapters in this module
- Establishing steering committee
- Setting KPIs and metrics
- Reporting to leadership
- Tracking maturity growth
- Reviewing program budget
- Managing external auditors
- Conducting management reviews
- Prioritizing improvements
- Aligning with enterprise risk
- Integrating with ESG reporting
- Benchmarking performance
- Planning next cycle
How this maps to your situation
- After a new regulatory directive
- During a vendor onboarding cycle
- Ahead of annual audit season
- Following a system migration
Before vs. after
Before
Reliant on cross-functional approvals to define recovery scope and respond to incidents.
After
Owns end-to-end authority over business continuity decisions, from testing design to incident escalation.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion over 12 weeks with flexible pacing.
How this compares to the alternatives
Unlike generic online courses, this program delivers role-specific authority patterns used by leading financial institutions to delegate real decision rights within ISO 22301 frameworks.
Frequently asked
Who is this course for?
Senior product, operations, and compliance leaders in financial services who own continuity outcomes and need documented control over BCMS design and response.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I access the materials after completing the course?
Yes, you retain access to all course materials and templates indefinitely after purchase.
$199 one-time. Approximately 3 hours per module, designed for completion over 12 weeks with flexible pacing..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours