(Licensed Training Partner No.
0042)
BCI Good Practice Guidelines Training Course Technical Overview
Title
Course Description
Course Assessment System
Course Learning Hours
Course Purpose and Aim
Licensed Training Partner in
Malaysia
BCI Good Practice Guidelines Training Course
This course is designed to provide knowledge and understanding on the
subject of Business Continuity (BC) based on the BCI’s Good Practice
Guidelines (GPG) which are aligned to ISO 22301 the International
standard for Business Continuity Management.
The Certificate of the BCI Examination (CBCI) is Graded as a Pass with
Merit, Pass or Fail in a 2 hour multiple choice exam that can be taken in
paper and pencil at the end of a classroom course or at a Computer Based
Testing centre (located globally).
The percentages shown in brackets beside each module below are the
assessment weighting scores used as a guide to develop the exam paper
and membership application, they are based on technical content.
Minimum of 20 hours – self reading/researching the GPG.
Plus 30 hours sessional (taught time) over 5 days including 2 hours for the
exam. (Flexible depending on Training Partner/Instructor and location).
The course is designed for those individuals seeking to complement
practical experience in Business Continuity or a related field through
some formal BC training based on the Good Practice Guidelines. More
specifically, it is aimed at those professionals wishing to achieve an
internationally recognised qualification in Business Continuity through the
Certificate of the BCI Examination (CBCI). This can lead to becoming a
Statutory member of the BCI, which provides internationally recognised
status and demonstrates both professional and technical competency in
Business Continuity.
GRC Consulting Services Sdn Bhd (1089008-D)
 (Licensed Training Partner No. 0042)

Course Structure There are six course modules based on the six Professional Practices (PPs)
and associated stages of the BCM Lifecycle. They are designed to be
taught in a classroom.

As well six modules listed above covering the BCM Lifecycle, the course
includes an un-assessed introductory session, a case study and a review
session. The review session is designed for exam preparation and consists
of practice questions based on the GPG.

Each of the six modules has defined learning outcomes. For each module
there are associated PowerPoint slides with suggested discussion points
and suggested resources. Licensed Training Partners/Instructors have the
flexibility to use the material as provided and/or add their own activities
and use their own resources where appropriate to support the learning
outcomes defined. In order to achieve the aim of preparing the student
for the CBCI exam any additional activities or resources should reference
the Good Practice Guidelines and may be subject to BCI quality assurance
processes.

The Course Modules

Management Practices
Module One (21%) Policy and Programme Management (PP1)
Module Two (8%) Embedding Business Continuity (PP2)
Technical Practices
Module Three (17%) Analysis (PP3)
Module Four (17%) Design (PP4)
Module Five (19%) Implementation (PP5)
Module Six (18%) Validation (PP6)

Module One – Policy and Programme Management

Module Description:
This module takes the student through the Policy and Programme Management Professional Practice that is at the
start of the BCM Lifecycle. This stage of the Lifecycle defines the organizational policy relating to Business Continuity
(BC) and how that policy will be implemented, controlled and validated through a BCM programme.
Learning outcomes: At the end of this module the student will be able to:
1. Describe the stages of the BCM Lifecycle.
2. Explain how to develop a BC Policy.
3. Identify the requirements for determining the scope of the BCM programme.
4. Describe the approaches to defining governance of the BCM programme.
5. Summarize the process of implementing a BCM programme, and assigning roles and responsibilities.
6. Explain how project and programme management techniques can be used to implement the BCM programme
and the importance of managing documentation.
7. Recognise the importance of managing outsourced activities and supply chain continuity.
Module Two – Embedding Business Continuity (BC)
Module Description:
This module provides the student with an understanding of Embedding Business Continuity which is the Professional
Practice that continually seeks to integrate BC into day-to-day business activities and organizational culture.
Learning outcomes: At the end of this module the student will be able to:
1. Interpret organizational culture in the context of Embedding Business Continuity.
2. Assess the skills and competence requirements for Business Continuity.
3. Organize a training programme and awareness campaign as part of Embedding BC.
 (Licensed Training Partner No. 0042)

Module Three – Analysis

Module Description:
This module provides the student with an understanding of the Analysis stage of the BCM Lifecycle that reviews and
assesses an organization in terms of what its objectives are, how it functions and the constraints of the environment
in which it operates.
Learning outcomes At the end of this module the student will be able to:
1. Describe the purpose and importance of the Business Impact Analysis (BIA).
2. Explain the different types of BIA and the activities associated with each one.
3. Develop and carry out a BIA.
4. Identify the key methods and outcomes of evaluating threats.
Module Four – Design
Module Description:
This module provides the student with an understanding of the Design stage of the BCM Lifecycle that identifies and
selects appropriate strategies and tactics to determine how continuity and recovery from disruption will be achieved.
Learning outcomes At the end of this module the student will be able to:
1. List the options and describe the process of selecting continuity and recovery strategies and tactics.
2. Define the purpose and explain the process of designing threat mitigation measures.
3. Define the purpose and explain the process of designing the incident response structure.
Module Five - Implementation
Module Description:
This module provides the student with an understanding of the Implementation stage of the BCM Lifecycle that
executes the agreed strategies and tactics through the process of developing the Business Continuity Plan (BCP).
Learning outcomes At the end of this module the student will be able to:
1. Describe the purpose and characteristics of the Business Continuity Plan (BCP).characteristics of t
2. Develop and manage a Business Continuity Plan (BCP).
3. Understand the key elements of Strategic plans and the importance of the Communications plan.
4. Explain the requirements of Tactical and Operational plans.
Module Six – Validation
Module Description:
This module provides the student with an understanding of the Validation stage of the BCM Lifecycle that confirms
that the BCM Programme meets the objectives set in the BC Policy and that the organization’s BCP is fit for purpose.
Learning outcomes At the end of this module the student will be able to:
1. Explain the purpose and process of developing an Exercise Programme.
2. Identify different types of exercises and differentiate between them in terms of scale and complexity. 3. Develop,
run and evaluate an exercise.
3. Develop, run and evaluate an exercise.
4. Assess the Maintenance activities required within the BCM programme.
5. Define the purpose and describe the methods of the Review of the BCM programme.
Time Table for 5-day GPG and CBCI Certification
Time Contents
Day 1
8.30am – 9.00am Registration
9.00am – 9.30am Introduction
9.30am – 10.00am Course Introduction
10.00am – 10.15am Tea Break
10.15am – 11.15am Mock Examination I
11.15am – 12.30pm Module 1: Policy and Programme Management (PP1)
12.30pm – 2.00pm Lunch
2.00pm – 3.30pm Module 1: Policy and Programme Management (PP1) Cont’d
3.30pm – 3.45pm Tea Break
3.45pm – 4.45pm Module 1: Case Study
4.45pm – 5.00pm Module 1 Test & Review : Policy and Programme Management (PP1)
 (Licensed Training Partner No. 0042)

Time Contents
Day 2
9.00am – 10.00am Module 2: Embedding Business Continuity (PP2)
10.15am – 10.15am Tea Break
10.15am – 12.15pm Module 2: Case Study
12.15pm – 12.30pm Module 2 Test & Review: Embedding Business Continuity (PP2)
12.30pm – 2.00pm Lunch
2.00pm – 3.30pm Module 3: Analysis (PP3)
3.30pm – 3.45pm Tea Break
3.45pm – 5.00pm Module 3: Case Study
Day 3
9.00am – 9.15am Module 3 Test & Review: Analysis (PP3)
9.15am – 10.00am Module 4: Design (PP4)
10.00am – 10.15am Tea Break
10.15am – 12.30pm Module 4: Design (PP4) Cont’d
12.30pm – 2.00pm Lunch
2.00pm – 3.30pm Module 4: Case Study
3.30pm - 3.30pm Tea Break
3.30pm – 3.45pm Module 4 Test & Review : Design (PP4)
3.45pm – 5.00pm Module 5: Implementation (PP5)
Day 4
9.00am – 10.00am Module 5: Case Study
10.00am – 10.15am Tea Break
10.15am – 10.30am Module 5 Test & Review: Implementation (PP5)
10.30am – 12.30pm Module 6: Validation (PP6)
12.30pm – 2.00pm Lunch
2.00pm – 3.00pm Module 6: Case Study
3.00pm – 3.30pm Module 6 Test & Review: Validation (PP6)
3.30pm – 3.45pm Tea Break
3.45pm – 4.00pm Additional Test & Review
4.00pm – 5.00pm Mock Examination II
Day 5
9.00am – 12.30pm Revision (All Module)
12.30pm – 2.15pm Lunch Break
2.15pm – 3.00pm CBCI Examination Preparation
3.00pm – 5.00pm CBCI Examination

GRC Consulting Services Sdn Bhd

Winners of Two (2) BCI Asia Awards 2016:
- Industry Personality
- Continuity and Resilience Consultant
GRCCS Technology Sdn Bhd
GRC Consulting Services
W: www.grccs.com.my | T/ F: 03-7958 8962
Pn. Salma Aman | M: +019 239 4671 | E: salma@grccs.com.my
Cik. Farizatul Akma Marina | M: +010 323 2933 | E: fariza@grccs.com.my

GRC Consulting Services Sdn. Bhd. (GRCCS) is a Licensed Training Partner for the Business Continuity Institute (BCI) in Malaysia to deliver BCI
certification courses. The BCI is the world’s leading institute for business continuity with circa 8,000 members in more than 100 countries worldwide,
working in an estimated 3,000 organisations in private, public and third sectors, The BCI truly is the world’s leading institute for business continuity.