Training Module

Business Continuity Strategies & Solutions

Evaluate continuity strategy options, design continuity solutions, and apply decision criteria aligned with ISO 22301 time-based requirements

Modern data center corridor with illuminated server racks, symbolising business continuity strategies, time-based recovery planning, and ISO 22301-aligned continuity solutions for resilient organisations.

Are continuity strategies chosen without evaluating options, leading to expensive or insufficient solutions?

This training module guides you through selecting and designing feasible strategies and solutions based on time-based continuity requirements.

Modern data center corridor with illuminated server racks, symbolising business continuity strategies, time-based recovery planning, and ISO 22301-aligned continuity solutions for resilient organisations.

Are continuity strategies chosen without evaluating options, leading to expensive or insufficient solutions?

This training module guides you through selecting and designing feasible strategies and solutions based on time-based continuity requirements.

Modern data center corridor with illuminated server racks, symbolising business continuity strategies, time-based recovery planning, and ISO 22301-aligned continuity solutions for resilient organisations.

Overview

Many organisations jump from “critical” to “we need DR” and end up with strategies that are either unaffordable, not implementable, or disconnected from real operational constraints. Others document generic options (alternate site, remote work, manual workarounds) but cannot show why they are sufficient for specific time requirements, dependencies, and minimum resources.

This training module focuses on strategy selection and solution design: how to translate time-based requirements into practical continuity approaches across people, facilities, technology, information, and suppliers; how to evaluate options and constraints; and how to document decisions so they remain usable for implementation and assurance. The module does not teach Business Impact Analysis execution, and it does not develop business continuity plans, response procedures, or exercising programmes-those are handled in the dedicated ISO 22301 modules.

Applicable environments

This module applies to organisations implementing or operating a Business Continuity Management System (BCMS) in line with ISO 22301. It focuses on how the standard’s requirements are interpreted and applied in practice within real organisational contexts.

The content is relevant for organisations seeking certification as well as for those using ISO 22301 as a reference framework to structure responsibilities, processes, and controls in the BCM domain.

Target audience

  • People involved in designing, building, operating, or improving a BCMS aligned with ISO 22301

  • Executives and department heads accountable for BCMS effectiveness and performance

  • Those responsible for processes, policies, assets, risks, and controls related to business continuity management

  • Auditors of ISO 22301 who want to deepen their understanding of management-side best practices (not audit technique)

Decision support

Is this module for you?

Agenda

  • What strategy and solution means in ISO 22301

  • Strategy options landscape

  • Designing solutions across enabling dimensions

  • Feasibility and constraint evaluation

  • Decision logic and governance of trade-offs

  • Traceability and maintainability of strategy decisions

  • Technology as an enabler

  • Case-based workshop

Show detailed agenda...

Learning outcomes

Key outcomes

  • Translate recovery requirements into a set of viable strategy options

  • Evaluate feasibility and constraints to select a coherent portfolio of continuity strategies

  • Document strategy decisions with rationale and trade-offs for management approval

Additional capabilities

  • Distinguish between strategy and solution design versus plan execution and exercising

  • Recognise failure modes in continuity strategy selection and avoid over-engineering or under-investment

  • Align continuity solutions with organisational capabilities and resource realities

Materials

Learning materials

  • Slide deck

  • Participant workbook

Templates & tools

Practical, reusable artefacts to apply the module directly to your organisation.

  • Continuity strategy options catalogue

  • BC solution design canvas

  • Feasibility & constraint checklist

  • Trade-off decision table template

  • Strategy-to-requirement traceability table template

Confirmation

  • Certificate of completion

Module ID

HAM-BC-S-02

ISO standard

Standard clause

8: Operation

Target audience

Public delivery

Live virtual

Duration

7 h

List price

CHF 550

Excl. VAT. VAT may apply depending on customer location and status.

Delivery

Live virtual delivery

This module is delivered live online and combines conceptual framing, discussion, case work and direct interaction with the instructor.

A public cohort is currently not scheduled. If you register your interest, we will notify you when a new public cohort is scheduled or suitable delivery options become available.

Custom delivery options

For organisations with specific constraints or learning objectives, the module can be adapted in format or scope, including in-house delivery and contextualised case material.

Not sure if this module is right for you?

Send a short message and describe your context.

Not sure if this module is right for you?

Send a short message and describe your context.

For an optimal learning experience

Prerequisites & preparation

This module is designed as part of a modular training approach. Topics are deliberately distributed across modules and are not repeated in full, in order to avoid unnecessary redundancy. Each module is self-contained and can be taken on its own. Where prior knowledge or experience is helpful, this is indicated below so you can decide whether any preparation is useful for you.

Assumed background

This module assumes participants can work with management-system concepts and can discuss service impacts, dependencies, and time constraints. Participants should be comfortable interpreting time-based continuity requirements (e.g., MTPD/MAO, RTO, RPO) as design inputs-without needing to learn how these are produced.

Helpful background includes:

  • Familiarity with key services/processes and their enabling dependencies (people, sites, technology, suppliers)

  • Ability to discuss operational workarounds realistically (constraints, not aspirations)

Preparatory modules

Foundational modules (depending on background)

Useful if you are new to the underlying concepts or want a shared baseline before attending this module.

Business Impact Analysis

Perform ISO 22301-aligned business impact analysis, identify critical activities, and define time-based recovery requirements

7 h

Business Impact Analysis

Perform ISO 22301-aligned business impact analysis, identify critical activities, and define time-based recovery requirements

7 h

Supporting modules (optional)

Helpful if you want to deepen related skills, but not required to participate effectively.

Risk Management

Build the capability to surface, structure and act on risk while action is still possible

16 h

Risk Management

Build the capability to surface, structure and act on risk while action is still possible

16 h

Mechanisms of Information Security Controls

Understand how preventive, detective and corrective controls work together across access, cryptography, monitoring, incident response, backup and recovery

16 h

Mechanisms of Information Security Controls

Understand how preventive, detective and corrective controls work together across access, cryptography, monitoring, incident response, backup and recovery

16 h

Continuous learning

Follow-up modules

After completion of this module, the following modules are ideal to further deepen your competence. If you are looking for a structured learning path, modules can also be taken as part of a professional track.

Continuous learning

Follow-up modules

After completion of this module, the following modules are ideal to further deepen your competence. If you are looking for a structured learning path, modules can also be taken as part of a professional track.

Office scene with people standing, walking and sitting

Ready to improve your management systems?

We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.

Office scene with people standing, walking and sitting

Ready to improve your management systems?

We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.

Office scene with people standing, walking and sitting

Ready to improve your management systems?

We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.