Who it is for
For the management team responsible for the company’s resilience.
The format suits both teams building a system from scratch and teams that have documents nobody uses.
- Executives and owners.Who need to understand what the company is risking and what will happen on a bad day.
- Risk managers and internal auditors.Who have been put in charge of continuity and need a working framework.
- Heads of IT and information security.Who need to link system recovery with how the business runs.
- Those responsible for operational continuity and recovery (ONiVD) in banks and financial organisations.With a walkthrough of the regulator’s requirements.
What the team keeps
After two days the team leaves with documents started on your data and with a shared language.
- Draft working documents.A register of critical processes, a calculation of the cost of one day of downtime and a continuity plan framework, started during the training on your data.
- Ready-to-use tools.Document templates, a first-24-hours checklist, a crisis communications structure.
- A shared language in the team.After two days everyone understands in the same way what a recovery time objective is and who declares a crisis.
- Knowledge check and certificate.Personal, issued at the end of the programme, with a unique number.
The programme: six modules in two days
Every module ends with hands-on work on your company’s material.
At the end the team plays out a crisis scenario in a tabletop exercise.
- 01Foundations of continuity managementWhat business continuity and operational continuity are, ISO 22301 and GOST R ISO 22301, regulatory requirements, including operational continuity and recovery (ONiVD) and the ONiVD plan for financial organisations. Roles, accountability and the place of continuity in the risk management system.
- 02Business impact analysis and risk assessmentThe register of critical processes, the recovery time and recovery point objectives, calculating the cost of an hour and a day of downtime. Finding single points of failure in information systems, people, suppliers and sites. What to protect first.
- 03The continuity plan and the recovery planThe structure of a plan people actually use. Recovery and redundancy strategies, manual workarounds for critical operations, backups and requirements for system recovery.
- 04Crisis managementThe crisis team, its authority and the activation procedure. First-24-hours checklists and crisis communications: what to tell employees, clients and the press. Typical mistakes, analysed on real cases: ransomware attacks, information system failures, the loss of a supplier.
- 05Cyber resilienceA ransomware attack scenario and the first hours of response. Backups under the 3-2-1 rule, recovery after an attack, linking information security and continuity.
- 06Exercises, metrics and keeping the system runningTypes of exercises, including tabletop cyber exercises. Key resilience metrics and a dashboard for management (live demo →), auditing the system and keeping it in working order.
Pricing
The price per participant depends on the group size. The format, on site or by video, does not affect the price.
Prices exclude taxes. Payment by invoice to your organisation: we will send the programme, an invoice and a contract.
- One participant — RUB 28,000.On site at your premises or by video.
- Two participants — RUB 25,000 each.Case work is already done in pairs.
- Three or more — RUB 20,000 each.The working format for a team. For five or more people we agree terms separately.
- Adaptation to your company.Included in the price: we rebuild the cases, exercises and focus around your industry, regulatory requirements and the structure of your information systems.
- Travel to a site outside Moscow.Discussed separately.
Who leads the programme
The training is led by a practitioner who has built business continuity in a large company himself.
Fifteen years leading risk functions at large companies. Built business continuity from scratch at Nornickel. Author of more than 30 continuity plans. Chief Risk Officer of a USD 20 billion petrochemical megaproject. Deputy Chair of Rosstandart Technical Committee 010 “Risk Management”. Has prepared more than 800 specialists.
Discuss your task
Leave your contacts. We reply within one working day and arrange a call or a Zoom meeting. If needed, we sign an NDA before the conversation.
Frequently asked questions
How long does it last and in what format?
Two days, six modules. On site at your company or live by video, which is convenient for distributed teams. We choose the dates together; both weekdays and weekends work.
How many people are in a group?
Up to eight participants. For a larger group we clarify the goals and either split it into several groups or rework the cases so that everyone gets hands-on work.
How is this different from the ERGP online programme?
Here the work runs on your company’s material and in dialogue: we go through your processes, draft plans and play out a scenario. If you need a structured programme at your own pace with a knowledge check and a certificate, that is ERGP.
Can the programme be adapted to our industry?
Yes, and it is included in the price. Cases, exercises and focus are adapted to your industry, regulatory requirements and the structure of your information systems.
What do participants get at the end?
A knowledge check and a personal certificate of completion of the programme, plus working materials: templates, first-24-hours checklists and a crisis communications structure.
How do we pay?
By invoice to your organisation. Write to info@risk-place.ru and we will send the programme, an invoice and a contract.