BCB-PMD study materials
BCB-PMD study resources

BCB-PMD: Professional Practice, Ethics, and Governance

BCB-PMD · Work through your exam, one topic at a time.

All guide sections

Professional Practice, Ethics, and Governance

The professional standard

Continuity practitioners hold a position of trust: they advise on risk that affects safety, customers, and survival. Professional practice means competence, integrity, confidentiality, objectivity, and transparency about uncertainty. Candidates should understand governance structures that support this: a charter defining the programme's mandate, an accountable executive, a steering or oversight body, clear delegation of authority, and a code of conduct.

Ethical concepts

  • Present findings honestly, including inconvenient gaps and unflattering test results.
  • Disclose conflicts of interest, for example when recommending a supplier you are connected to.
  • Protect confidential information gathered during BIAs and risk assessments.
  • Do not overstate capability; an untested RTO claim is an ethical, not merely technical, failure.
  • Respect legal and regulatory obligations, including reporting duties during incidents.

Governance concepts

  • Segregation between those who design controls and those who assure them.
  • Documented decisions and rationale, so accountability survives staff turnover.
  • Escalation routes when advice is ignored and residual risk becomes unacceptable.
  • Third-party governance: contracts must contain continuity obligations and a right to evidence.

Traps

  • Assuming the practitioner owns residual risk; the business owns it.
  • Staying silent when leadership accepts a risk beyond appetite.
  • Sharing BIA data too broadly without need-to-know.
  • Recommending a solution without disclosing a personal interest.
  • Treating a signed policy as proof of an operating programme.

Rule of thumb

Your duty is to make the risk visible and the trade-off explicit; the decision belongs to the accountable owner, recorded in writing.

Worked example

A director wants an untested RTO stated as achieved in a regulatory submission. The practitioner documents the actual tested result, states the gap and its implications, and escalates. The submission reflects evidence, not aspiration.