ISO 22301 CBCM™ certification requires successful completion of three exams:

• RM101
  
  
• BCMS101
  
  
• BCMS102

Required Exam: RM101

IRMCB exam #RM101 maps to ISO/IEC 31000, 31010, and 27005 risk management content areas taught in IRMCB's authorized course, "Policy Workshop: ISO 31000 Enterprise Risk Management."

• Required  for CICRA, CICA, CBCS, CBCA, and CBCM certifications.
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes

RM101 Content Areas

1. Context establishment
2. Risk assessment
3. Risk treatment
4. Risk acceptance
5. Risk communication
6. Risk monitoring and review

Required Exam: BCMS101

IRMCB exam #BCMS101 maps to ISO 22301 and ISO 22313 content areas associated with BCMS planning and strategy, as taught in Certified Information Security's courses, "Policy Workshop: ISO 22301 Business Continuity Management".

• Required for ISO 22301 CBCS, CBCA, and CBCM certification
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes 

BCMS101 Content Areas

1. Introduction to Professional Business Continuity Management
2. BCM Program and Policy Management
   • Determining BCM requirements
   • Establishing the business continuity objectives and plans
   • Scoping the BCM
   • Setting the business continuity policy
   • Resourcing and financing the BCM
   • Governance roles and responsibilities
   • Training and competency
   • Documentation and records
3. Understanding the organization
4. Business Impact Analysis
5. Developing the BCM strategy
   • Estimating continuity requirements
6. Embedding BCM into the organization's culture

Required Exam: BCMS102

IRMCB exam #BCMS102 maps to ISO 22301 and ISO 22313 content areas associated with BCMS deployment, exercising, and certification as taught in IRMCB's course, "Deploy, Exercise, and Certify Business Continuity Management".

• Required for ISO 22301 CBCS, CBCA, and CBCM certification
• Number of questions: 65
• Passing score: 75%
• Time limit: 70 minutes 

BCMS102 Content Areas

1. Developing and implementing a BCM response
   • Identifying enterprise-wide and business unit continuity strategic requirements
   • Designing, developing and implementing business continuity and incident management plans that provide continuity within BCM recovery time and/or recovery point objectives
   • Preparing to create the Business Continuity and Disaster Recovery Plan Documents
   • Writing incident response plans
   • Aggregating incident response plans into a business continuity plan
   • Developing processes to maintain the currency of continuity capabilities, business continuity and incident management plans in accordance with the organization's strategic direction.
2. Exercising, maintaining and reviewing BCM arrangements
   • Pre-planning and coordinating plan walkthroughs/exercises.
   • Exercising BCM arrangements
   • Maintaining BCM arrangements
   • Reviewing BCM arrangements

3. Embedding business continuity management within the organization's culture

   • Prepare a program to create and maintain corporate awareness
   • Awareness
   • Skills training

4. Certifying the organization's business continuity management system to ISO 22301