CBCS is an executive business continuity governance certification appropriate for all members of the BCMS or ISMS committee. This certification maps to the strategy competence requirements of ISO best practices. ISO advocates that the business process of business continuity and disaster recovery management should begin with the development of a clear continuity strategy establishing what the organization needs to accomplish with its BCM program based upon thorough risk analysis and evaluation by the proper risk decision-makers within the organization. 

Building upon the foundation understanding of the ISO 31000 risk management framework validated by the Certified Internal Controls Risk Analyst credential, the IRMCB Certified Business Continuity Strategist (CBCS) certification validates your ability to develop the formal structure, governance, and policy of the Business Continuity Management System (BCMS) using the framework presented in ISO 22301.

Furthermore the CBCS certification ensures that you are qualified to develop strategic objectives including, but not limited to:

• Determining and guiding the selection of alternative business recovery operating strategies for continuation of business within recovery time and/or recovery point objectives, while maintaining the organization's critical functions.
• Delivering solutions for continuation of business within the recovery time and/or recovery point objectives, whilst maintaining the organization's critical functions.
  Developing, coordinating, evaluating and creating plans and procedures to communicate with internal stakeholders during incidents.
• The provision of post-incident support and guidance for employees and their families. 

Certified Information Security provides the third-party training and professional credentialing necessary to set you apart as a BCM authority who knows BCM according to the ISO standard of BCM best practices. Train in class or online, take your exams, and get certified as an ISO business continuity strategist, administrator, or manager.

What is ISO 22301 Business Continuity Management?

Last revised in 2019, ISO 22301 is now a well-established international standard designed to keep your business going during the most challenging and unexpected circumstances. It provides a basis for understanding, developing, implementing and managing business continuity within your organization and gives you confidence when dealing with stakeholders both within and outside your organization.

Getting certified is easy, and can be accomplished completely online. The CBCS™ certification is available to qualified candidates who:

1. Are a member of CIS in good standing. If you are not already an Associate member of the CIS certification student body, you must first become a member to pursue the CBCS credential.
   
   
2. Attend the required course, live or online. Prerequisite training for CBCS certification eligibility includes:
   • Policy Workshop: ISO 31000 Enterprise Risk Management
   • Policy workshop: ISO 22301 Business Continuity Management
     
     
3. Pass the CBCS Exams. For CBCS certification, candidates must pass exams #RM101 and #BCMS101. Exams are administered on-line and can be taken at your convenience at your home or work through the CIS eLearning Center, where your progress and score are monitored and recorded centrally. Your exam results are provided automatically upon completion of your exam.
   
   
4. Complete and submit your ISO 22301 CBCS certification application to the Certification Department at certification@certifiedinfosec.com. Certification applications are available for download at www.certifiedinfosec.com/services/certification-programs/cis-professional-certification-program/certification-kit-brochures-and-applications.

Your digital credentials

You will officially become certified (certificated) once your exam results and required documentation are validated and approved by the certification committee.

Your digital credential certificates and badges will be processed and emailed to you within 10 business days following the receipt of the required documentation. Learn more about CIS' digital certificates and badges.

Certification maintenance and renewal requirements can be viewed at www.certifiedinfosec.com/services/certification-programs.

Upgrade Path: Certified Business Continuity Manager (CBCM™) 

Certified Information Security is authorized to provide all required training and exams for CBCM certification. CBCM certification candidates must successfully complete:

• Policy Workshop: ISO 31000 Enterprise Risk Management
   
• Policy Workshop: ISO 22301 Business Continuity Management

CBCS™ certification requires successful completion of two exams:

• RM101
  
  
• BCMS101

Required Exam: RM101

Exam #RM101 maps to ISO/IEC 31000, 31010, and 27005 risk management content areas taught in "Policy Workshop: ISO 31000 Enterprise Risk Management."

• Required  for CICRA, CICA, CBCS, CBCA, and CBCM certifications.
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes

RM101 Content Areas

1. Context establishment
2. Risk assessment
3. Risk treatment
4. Risk acceptance
5. Risk communication
6. Risk monitoring and review

Required Exam: BCMS101

Exam #BCMS101 maps to ISO 22301 and ISO 22313 content areas associated with BCMS planning and strategy, as taught in "Policy Workshop: ISO 22301 Business Continuity Management".

• Required for CBCS, CBCA, and CBCM certification
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes 

BCMS101 Content Areas

1. Introduction to Professional Business Continuity Management
2. BCM Program and Policy Management
   • Determining BCM requirements
   • Establishing the business continuity objectives and plans
   • Scoping the BCM
   • Setting the business continuity policy
   • Resourcing and financing the BCM
   • Governance roles and responsibilities
   • Training and competency
   • Documentation and records
3. Understanding the organization
4. Business Impact Analysis
5. Developing the BCM strategy
   • Estimating continuity requirements
6. Embedding BCM into the organization's culture

Qualified experience for Certified Business Continuity Strategist™ certification

CBCS is an executive business continuity governance certification appropriate for all members of the BCMS or ISMS committee. This certification does not require previous qualified experience.

Preparing for Certified Information Security's professional certification exams #RM101 and #BCMS101 is serious business. This is where we can help. If you first successfully complete:

• All prerequisite course training; and
• All RM101 and BCMS101online practice exams

Certified Information Security guarantees your success in passing CIS exams #RM101 and #BCMS101.

If you do not pass exams #RM101 and #BCMS101 on your first attempt after completion of your required training and practice exams, Certified Information Security will allow you to re-test at no additional charge until you successfully pass your certification exams.