What is ISO 22301 Business Continuity Management?

ISO 22301 is the international standard for business continuity management. Continued operations in the event of a business disruption, whether due to a major disaster or a minor incident, are a fundamental requirement for any organization. 

ISO 22301 Certified Business Continuity Manager (CBCM) is the expert-level business continuity management certification. CBCM attests to your ability to develop the necessary incident management plans (IMPs) and response procedures necessary to fulfill the strategic objectives. The credential also certifies that you have the necessary knowledge and skills to properly administrate the deployment, testing, and maintenance of IMPs and response procedures.

Having CBCM certification tells employers you are qualified to:

• determine and guide the selection of alternative business recovery operating strategies for continuation of business within recovery time and/or recovery point objectives, while maintaining the organization's critical functions;
• deliver solutions for continuation of business within the recovery time and/or recovery point objectives, whilst maintaining the organization's critical functions;
• develop, coordinate, and evaluate plans and procedures to communicate with internal stakeholders during incidents; 
• provide post-incident support and guidance for employees and their families

Upon completion of this training and certificate program, you will also:

• expand your risk management and business continuity competency in line with internationally recognized standards of best practice;
• increase your credibility through gaining international recognition; and
• improve your résumé and help to increase your earning potential. 

Train in class or online, take your exams, and get certified as an ISO business continuity strategist, administrator, or manager. 

Getting certified is easy, and can be accomplished completely online. The CBCM™ certification is available to qualified candidates who:

1. If you are not already an Associate member of the CIS certification student body, you must first become a member to pursue the CBCM credential. 
   
   
2. Attend the required approved curriculum course, live or online. Prerequisite training for CBCM certification eligibility includes:
   • Policy Workshop: ISO 31000 Enterprise Risk Management
   • Policy workshop: ISO 22301 Business Continuity Management
   • Deploy, Exercise, and Certify Business Continuity Management and Disaster Recovery Management
     
     
3. Pass the CBCM Exams.
   For CBCM certification by CIS, candidates must pass CIS exams RM101, BCMS101, and BCMS 102. CIS exams are administered on-line and can be taken at your convenience at your home or work through the CIS eLearning Center, where your progress and score are monitored and recorded centrally. Your exam results are provided automatically upon completion of your exam.
   
   
4. Complete and submit your ISO 22301 CBCM certification application to the Certification Department at certification@certifiedinfosec.com. Certification applications are available for download at www.certifiedinfosec.com/services/certification-programs/cis-professional-certification-program/certification-kit-brochures-and-applications.

Your digital credentials

You will officially become certified (certificated) once your exam results and required documentation are validated and approved by the certification committee.

Your digital credential certificates and badges will be processed and emailed to you within 10 business days following the receipt of the required documentation. Learn more about CIS' digital certificates and badges.

Certification maintenance and renewal requirements can be viewed at www.certifiedinfosec.com/services/certification-programs.

Certified Information Security is authorized to provide all required training and exams for CBCM certification. CBCM certification candidates must successfully complete:

• Policy Workshop: ISO 31000 Enterprise Risk Management
   
• Policy Workshop: ISO 22301 Business Continuity Management
  
  
• Deploy, Exercise, and Certify Business Continuity Management

CBCM™ certification requires successful completion of three exams:

• RM101
  
  
• BCMS101
  
  
• BCMS102

Required Exam: RM101

Exam #RM101 maps to ISO/IEC 31000, 31010, and 27005 risk management content areas taught in "Policy Workshop: ISO 31000 Enterprise Risk Management."

• Required  for CICRA, CICA, CBCS, CBCA, and CBCM certifications.
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes

RM101 Content Areas

1. Context establishment
2. Risk assessment
3. Risk treatment
4. Risk acceptance
5. Risk communication
6. Risk monitoring and review

Required Exam: BCMS101

Exam #BCMS101 maps to ISO 22301 and ISO 22313 content areas associated with BCMS planning and strategy, as taught in "Policy Workshop: ISO 22301 Business Continuity Management".

• Required for CBCS, CBCA, and CBCM certification
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes 

BCMS101 Content Areas

1. Introduction to Professional Business Continuity Management
2. BCM Program and Policy Management
   • Determining BCM requirements
   • Establishing the business continuity objectives and plans
   • Scoping the BCM
   • Setting the business continuity policy
   • Resourcing and financing the BCM
   • Governance roles and responsibilities
   • Training and competency
   • Documentation and records
3. Understanding the organization
4. Business Impact Analysis
5. Developing the BCM strategy
   • Estimating continuity requirements
6. Embedding BCM into the organization's culture

Required Exam: BCMS102

Exam #BCMS102 maps to ISO 22301 and ISO 22313 content areas associated with BCMS deployment, exercising, and certification as taught in "Deploy, Exercise, and Certify Business Continuity Management".

• Required for CBCS, CBCA, and CBCM certification
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes 

BCMS102 Content Areas

1. Developing and implementing a BCM response
   • Identifying enterprise-wide and business unit continuity strategic requirements
   • Designing, developing and implementing business continuity and incident management plans that provide continuity within BCM recovery time and/or recovery point objectives
   • Preparing to create the Business Continuity and Disaster Recovery Plan Documents
   • Writing incident response plans
   • Aggregating incident response plans into a business continuity plan
   • Developing processes to maintain the currency of continuity capabilities, business continuity and incident management plans in accordance with the organization's strategic direction.
2. Exercising, maintaining and reviewing BCM arrangements
   • Pre-planning and coordinating plan walkthroughs/exercises.
   • Exercising BCM arrangements
   • Maintaining BCM arrangements
   • Reviewing BCM arrangements
3. Embedding business continuity management within the organization's culture
4. Prepare a program to create and maintain corporate awareness
   • Awareness
   • Skills training
5. Certifying the organization's business continuity management system

Qualified experience for Certified Business Continuity Manager™ certification

This is the expert-level business continuity management certification requiring a minimum of 5 years of qualified experience. Ensuring operational continuity in the event of a business disruption, whether due to a major disaster or a minor incident, is intrinsic to the management of many organizational functions. Prior experience in any of these typical management functions below qualifies towards CBCM certification.

 Prior certification experience credits

Each of the following professional credentials may be used to substitute for 6 months of required experience:

Preparing for Certified Information Security's professional certification exams #RM101, #BCMS101, and #BCMS102 is serious business. This is where we can help. If you first successfully complete:

• All prerequisite course training; and
• All RM101, BCMS101, and BCMS102 online practice exams

Certified Information Security guarantees your success in passing CIS exams #RM101, #BCMS101, and #BCMS102.

If you do not pass exams #RM101, #BCMS101, and #BCMS102 on your first attempt after completion of your required training and practice exams, Certified Information Security will allow you to re-test at no additional charge until you successfully pass your certification exams.

It’s convenient!

Certified Information Security provides the training and credentialing you need to become recognized as an authority in information security governance and risk management.  You choose the method of delivery: online through our secure website, or in-person at a publicly available course or privately at your facility.  We take care of the rest – from administration, to record keeping, to providing certificates of completion and certification.

Online students have the additional convenience of taking courses whenever they want without the need to travel or disrupt their busy schedules. Our program allows users to start and stop without losing their place or data.  Learning and certifying expertise has never been so easy!

How to get started - two alternatives 

1. If your employer is paying for your training and certification, we recommend purchasing a complete ISO 22301 Certified Business Continuity Manager (CBCM) certification package voucher that includes all required resources, including membership in the CIS Body of Certified Professionals, all required training programs, all recommended practice exams, and the required certification exam. This allows your employer to purchase and pay all of your necessary resources at once, while still giving you flexibility of when to use your training, practice exams, and certification exams later.
   
   

2. "Pay-as-you-go" by purchasing your membership in the CIS Body of Certified Professionals, training, recommended practice exams, and the certification exams as you need them. Start by purchasing training, and then purchase practice exams when you are ready. After you complete your practice exams, you then purchase your certification exam.

A breakdown of the costs are as follows: 

1. Required CIS Membership Application Fee & Membership Dues: $100.00 Learn more

2. Required Training

3. Optional Online Practice Exams for all exams (RM101, BCMS101, and BCMS102): $225.00 Learn more

4. Required Online Certification Exams (RM101, BCMS101, and BCMS102): $300.00 Learn more