CBCP study plan

Define business continuity program scope, governance structure, and charter elements in your own words

Map the BC lifecycle (initiation through maintenance) and identify where each remaining domain fits

Draft a one-page program charter for a fictional organization, including steering committee roles and reporting lines

List the metrics and reporting cadence a BC manager would use to demonstrate program value to executives

Distinguish threat, vulnerability, likelihood, and impact, and select an appropriate risk treatment for each scenario

Perform a qualitative risk assessment on 10 sample assets using a likelihood-by-impact matrix

Explain the purpose, inputs, and outputs of a business impact analysis and how it differs from a risk assessment

Identify recovery time objective, recovery point objective, and maximum tolerable downtime from narrative scenario data

Build a BIA questionnaire covering critical functions, dependencies, and financial/regulatory/operational impacts

Rank business functions into tiers using quantified impact over time and justify each tier

Match at least five recovery strategies (hot site, warm site, cold site, alternate processing, manual workaround, third-party redundancy) to specific tiered functions

Compare strategy options on cost, recovery speed, and risk, and defend one selection per tier

Sequence the emergency response phases (detection, notification, evacuation, accounting for people, stabilization) and assign roles

Draft a crisis management team structure with primary and alternate members and decision authority

Write plan components in the standard order: purpose, scope, assumptions, roles, activation, procedures, appendices

Convert a BIA-derived requirement into a written recovery procedure with clear ownership

Complete a draft plan section for each BIA tier, including alternate site activation and data recovery steps

Design an awareness campaign tailored to three audiences (executives, functional teams, new hires)

Build a training curriculum matrix mapping role to required training and frequency

Write five measurable learning objectives for a one-hour BC awareness session

Differentiate exercise types (tabletop, walkthrough, simulation, full-scale) and choose one for each stated objective

Write a tabletop exercise scenario with injects, objectives, and evaluation criteria

Create an after-action report and improvement plan template with corrective-action tracking fields

Define a maintenance schedule covering plan review triggers, ownership, and version history

Draft crisis communication templates for employees, customers, media, and regulators with approval routing

Design a notification cascade with time targets, redundant channels, and message ownership

Identify external entities to coordinate with (emergency services, utilities, vendors, regulators) and define the liaison role

Map information-sharing constraints such as privacy, contractual notice obligations, and regulatory reporting windows

Integrate all domain artifacts into a single coherent plan with consistent terminology and cross-references

Audit the assembled plan against a self-built checklist of the 10 domains and close identified gaps

Complete two timed practice assessments and categorize every missed item by domain

Build a final weak-area review list and schedule targeted re-study before exam day