Review business impact and recovery planning after each incident, exercise and change of threat.
Business Impact Analysis and Recovery Planning
Practical training in business impact and recovery planning, grounded in real cases and applied to your own operation.
Course Overview
Guard force performance on business impact and recovery planning reflects supervision, not instruction. Security arrangements around recovery planning are tested by adversaries, not by auditors. Buying a tool rarely fixes the wider corporate security practice agenda; the underlying capability has to be built internally first. Mature organisations treat business impact and recovery planning as a standing capability rather than a project that finishes. The material serves both public bodies and commercial organisations dealing with the practice within corporate security practice. The course sets out a working method for recovery planning that participants can apply the week they return. Participants develop a defensible line of reasoning for the choices they make about business impact and recovery planning. Every module pairs a short input on recovery planning with structured practice on the participant's own material. The final session converts the week's work on this strand of corporate security practice into commitments with owners and dates.
Expected Learning Outcomes
Plan the response and escalation for incidents involving recovery planning.
Integrate business impact and recovery planning into existing management routines rather than running it separately.
Set the minimum documentation for recovery planning that is genuinely necessary, and stop there.
Compare the organisation's handling of business impact and recovery planning with recognised practice, and close the material gaps.
Assess and control third-party and contractor exposure in recovery planning.
Design layered controls for business impact and recovery planning across deterrence, detection, delay and response.
Who Should Attend
Procurement and contracting staff whose agreements set obligations around business impact and recovery planning.
Security managers and officers responsible for recovery planning.
Operations managers whose activity is protected by business impact and recovery planning.
Internal auditors reviewing how recovery planning is designed and operated.
Investigation and loss prevention specialists working on business impact and recovery planning.
Risk managers assessing exposure from recovery planning.
Course Modules
Business impact and recovery planning: vulnerability assessment and prioritisation
2 sessions · 8 pointsSession 1Supervising the guard force on business impact and recovery planning
- Agree the indicators that will show whether business impact and recovery planning is improving.
- Set escalation criteria and out-of-hours contacts for recovery planning.
- Review business impact and recovery planning after every incident, exercise or change in threat.
- Verify identity checks applied at entry points relevant to recovery planning.
Session 2The cost of recovery planning and how to present it
- Define the first response actions for an incident involving business impact and recovery planning.
- Rehearse the briefing on recovery planning that would follow an incident.
- Identify where judgement in business impact and recovery planning is legitimate and where it is not.
- Confirm recorded material from recovery planning is retained long enough to be useful.
Recovery planning: continuity, exercises and external coordination
2 sessions · 8 pointsSession 1Moving recovery planning from approval to execution
- Assess insider risk in roles with privileged access to business impact and recovery planning.
- Agree what will be standardised in recovery planning and what will not.
- Identify the data already collected that bears on business impact and recovery planning.
- Prepare the response for the most likely failure in recovery planning.
Session 2Where recovery planning typically breaks, and why
- Build the internal briefing that explains business impact and recovery planning to those affected.
- Review surveillance coverage for recovery planning against likely approach routes.
- Verify six months later that changes to business impact and recovery planning have held.
- Write down the assumptions underpinning the approach to recovery planning.
Recovery planning: surveillance, monitoring and control rooms
2 sessions · 8 pointsSession 1The first fifteen minutes of an incident involving recovery planning
- Assess contractor and third-party exposure within business impact and recovery planning.
- Check that controls on recovery planning cover deterrence, detection, delay and response.
- Establish evidence handling and chain of custody for business impact and recovery planning.
- Map the handovers in recovery planning between functions and secure them.
Session 2Assessing the threat to business impact and recovery planning specifically, not generically
- Exercise the plan for business impact and recovery planning under realistic conditions and record failures.
- Check guard force instructions for recovery planning are current and understood.
- Build the threat picture for business impact and recovery planning from sources relevant to this site and sector.
- Supervise and spot-check performance on recovery planning rather than relying on reports.
Recovery planning: incident response and escalation
2 sessions · 8 pointsSession 1Coordinating with external authorities on recovery planning
- Review whether business impact and recovery planning is aligned with the objectives of the protected site.
- Name a single owner for each element of recovery planning.
- Establish who is informed, consulted and accountable in business impact and recovery planning.
- Record what was learned when recovery planning did not go as planned.
Session 2Layering controls on recovery planning so one failure is not fatal
- Confirm access control on business impact and recovery planning cannot be routinely bypassed.
- Report on recovery planning in terms that support an investment decision.
- Establish what evidence demonstrates business impact and recovery planning is under control.
- Assign responsibility for keeping documentation of recovery planning current.
Choose the package that suits you
Silver Package
At least 3 people
- Workshop or Program Participation
- Airport Transfers
- Customized Badge
- Expert Mentorship (Private Sessions)
- Supervision & Secretarial Services
- Accredited Certificate of Participation
- Complete Training Kit
- Coffee Break
- Closing Ceremony
Gold Package
At least 3 people
- 5-night stay in a 5-star hotel
- Workshop or Program Participation
- Airport Transfers
- Customized Badge
- Expert Mentorship (Private Sessions)
- Supervision & Secretarial Services
- Accredited Certificate of Participation
- Complete Training Kit
- Coffee Break
- Closing Ceremony
Complete your registration
We will contact you within one business day to confirm.