Risk Management & Business Resilience
الحصول على الكتيب
للحصول على كتيب بكامل محتويات الدورة برجاء ملء النموذج التالي ببياناتك الصحيحة
Program Professional Framework
Risk Management & Business Resilience
Program Overview
Pandemics, cyber attacks, supply chain shocks and extreme heat events have shown that managing risk is not enough unless the organisation can also absorb disruption and recover quickly. This course links enterprise risk management under ISO 31000 with business continuity management under ISO 22301:2019 and crisis management guidance in ISO 22361. Participants conduct business impact analysis, set recovery time and recovery point objectives, design continuity strategies and plans, and test them through exercises, with reference to national continuity requirements such as the UAE NCEMA 7000 standard and the resilience expectations of GCC financial regulators.
Learning Outcomes
- ✓Connect the risk register with continuity planning by identifying disruption scenarios for critical activities.
- ✓Conduct a business impact analysis and set maximum tolerable periods of disruption, RTOs and RPOs.
- ✓Select continuity strategies for people, premises, technology, information and suppliers.
- ✓Draft a business continuity plan and a crisis management plan with clear roles and activation criteria.
- ✓Design and run a tabletop exercise and capture improvement actions.
- ✓Define resilience indicators for reporting to senior management.
Target Audience
- Risk managers and ERM officers
- Business continuity and resilience coordinators
- Crisis and emergency management team members
- IT disaster recovery and operations managers
Detailed Program Modules
01From Risk Management to Resilience
- ISO 31000 risk process recap
- Operational and organisational resilience concepts
- National continuity requirements in GCC countries
02Disruption Risk Assessment
- Disruption scenarios and single points of failure
- Supply chain and third-party dependencies
- Cyber and technology outage risks
03Business Impact Analysis
- Identifying critical products, services and activities
- Impact over time and tolerable disruption periods
- Setting RTOs, RPOs and minimum resources
04Continuity Strategies and Plans
- ISO 22301:2019 requirements
- Strategy options for people, sites, IT and suppliers
- Writing actionable continuity plans
05Crisis Management and Communication
- Crisis team structure guided by ISO 22361
- Decision-making under pressure
- Internal, media and stakeholder communication
06Exercising, Review and Improvement
- Tabletop, functional and full-scale exercises
- Post-exercise and post-incident reviews
- Resilience KPIs and management review
Training Methodology
Applied Project & Assessment
Applied Project
Participants produce a resilience package for one critical service: a disruption risk assessment, a business impact analysis with RTOs and RPOs, a continuity strategy and plan, and a tabletop exercise script with evaluation criteria.
Assessment
Short diagnostic at the start, practical tasks linked to each learning outcome, and evaluation of the applied project against published criteria.