ISO 22301 CBCM™ certification requires successful completion of three exams:
IRMCB exam #RM101 maps to ISO/IEC 31000, 31010, and 27005 risk management content areas taught in IRMCB's authorized course, "Policy Workshop: ISO 31000 Enterprise Risk Management."
- Required for CICRA, CICA, CBCS, CBCA, and CBCM certifications.
- Number of questions: 65
- Passing score: 75%
- Time limit: 70 minutes
RM101 Content Areas
- Context establishment
- Risk assessment
- Risk treatment
- Risk acceptance
- Risk communication
- Risk monitoring and review
IRMCB exam #BCMS101 maps to ISO 22301 and ISO 22313 content areas associated with BCMS planning and strategy, as taught in Certified Information Security's courses, "Policy Workshop: ISO 22301 Business Continuity Management".
- Required for ISO 22301 CBCS, CBCA, and CBCM certification
- Number of questions: 65
- Passing score: 75%
- Time limit: 70 minutes
BCMS101 Content Areas
- Introduction to Professional Business Continuity Management
- BCM Program and Policy Management
- Determining BCM requirements
- Establishing the business continuity objectives and plans
- Scoping the BCM
- Setting the business continuity policy
- Resourcing and financing the BCM
- Governance roles and responsibilities
- Training and competency
- Documentation and records
- Understanding the organization
- Business Impact Analysis
- Developing the BCM strategy
- Estimating continuity requirements
- Embedding BCM into the organization's culture
IRMCB exam #BCMS102 maps to ISO 22301 and ISO 22313 content areas associated with BCMS deployment, exercising, and certification as taught in IRMCB's course, "Deploy, Exercise, and Certify Business Continuity Management".
- Required for ISO 22301 CBCS, CBCA, and CBCM certification
- Number of questions: 65
- Passing score: 75%
- Time limit: 70 minutes
BCMS102 Content Areas
- Developing and implementing a BCM response
- Identifying enterprise-wide and business unit continuity strategic requirements
- Designing, developing and implementing business continuity and incident management plans that provide continuity within BCM recovery time and/or recovery point objectives
- Preparing to create the Business Continuity and Disaster Recovery Plan Documents
- Writing incident response plans
- Aggregating incident response plans into a business continuity plan
- Developing processes to maintain the currency of continuity capabilities, business continuity and incident management plans in accordance with the organization's strategic direction.
- Exercising, maintaining and reviewing BCM arrangements
- Pre-planning and coordinating plan walkthroughs/exercises.
- Exercising BCM arrangements
- Maintaining BCM arrangements
- Reviewing BCM arrangements
-
Embedding business continuity management within the organization's culture
- Prepare a program to create and maintain corporate awareness
- Awareness
- Skills training
-
Certifying the organization's business continuity management system to ISO 22301