Day 1: Reading Risk and Making Decisions

Understanding the Crisis Context

• Event type and development path
• Direct impact on business operations
• Factors determining severity of crisis
• Constraints affecting available response options

Organizational Preparedness Requirements

• Critical roles before crisis escalation
• Essential resources requiring advance preparation
• Readiness gaps requiring targeted treatment
• Readiness requirements for each scenario

Defining Business Continuity Scope

• Plan boundaries and key responsibilities
• Assumptions influencing continuity plan design
• Services included within continuity scope
• Processes essential for service continuity

Day 2: Assessing Exposure and Setting Priorities

Developing the Response Plan

• Backup resources supporting response activation
• Required outcomes for each phase
• Authority and duties during emergencies
• Communication procedures during escalation

Managing Post-Crisis Recovery

• Operating condition after initial control
• Services restored by agreed priority
• Resources supporting return to operation
• Residual risks during recovery period

Continuity Readiness Against Exposures

• Availability of alternatives during disruption
• Exercise results compared with targets
• Indicators revealing remaining weak areas
• Plan activation capability under pressure

• Recovery objective setting based on impact-over-time analysis
• Continuity strategy comparison across capability cost and risk
• Continuity plan test measuring readiness gaps
• Business impact analysis workshop for critical services and processes