Tracks
8 routes, one discipline
A track chains courses in the order the discipline is actually built: understand, analyse, design, deploy, validate. Each leads to a certification whose exam tests professional judgement as much as knowledge of the texts.
Business Continuity
From your first BIA to a certifiable management system
What you will be able to do
- Run a three-level BIA and get it validated by management
- Set MTPD, RTO, RPO and MBCO that stand up in an audit
- Compare continuity strategies on an economic basis
- Write operational plans and a three-tier response structure
Operational Resilience
Think in critical services and tolerances, not processes
What you will be able to do
- Identify important business services from the client's viewpoint
- Set and defend quantified impact tolerances
- Map end-to-end dependencies down to tier-2 third parties
- Build and run a severe scenario testing programme
Operational Risk
Identify, measure and arbitrate the risk you cannot hedge
What you will be able to do
- Build a usable risk taxonomy
- Run an RCSA campaign that produces decisions
- Set up loss data collection with root cause analysis
- Design key risk indicators that are genuinely predictive
IT Continuity & Disaster Recovery
Design, cost and prove a recovery capability
What you will be able to do
- Derive technical RTOs and RPOs from the business BIA
- Compare recovery architectures and their cost
- Design a ransomware-resistant backup strategy
- Run a measured, usable restoration test
Crisis Management
Decide fast, under uncertainty, without losing trust
What you will be able to do
- Distinguish incident, emergency and crisis and activate the right level
- Staff a crisis team with roles, deputies and a battle rhythm
- Keep an incident log usable in audit and litigation
- Produce credible holding statements within the first thirty minutes
DORA Compliance
The five pillars, article by article, deliverable by deliverable
What you will be able to do
- Determine the scope of application and argue proportionality
- Build an ICT risk framework the board can approve
- Classify and report a major incident within the deadlines
- Produce a register of information matching the authorities' template
Cyber Resilience
Hold when the defences have already failed
What you will be able to do
- Connect CSIRT, crisis team and business continuity
- Run the first six hours of a ransomware incident
- Decide on a mass disconnection and own its consequences
- Rebuild a trusted foundation after compromise
Third-Party & Supply Chain Risk
Your resilience stops where your suppliers' begins
What you will be able to do
- Distinguish an important supplier from a critical one
- Run due diligence proportionate to the stake
- Negotiate usable audit, testing and exit clauses
- Map tier-2 sub-outsourcing and measure concentration