Continuity, Resilience, and Recovery

This domain covers keeping an organization running when something goes wrong, and proving to regulators and customers that you can. It spans business continuity management with ISO 22301, the EU’s Digital Operational Resilience Act for financial entities, disaster recovery, crisis management, and operational resilience more broadly. Demand here has risen sharply as operational resilience has moved from good practice to regulatory requirement in several sectors.

Courses

11

Standards

5

Languages

10

From

€390

Who this is for

  • Business continuity and resilience managers
  • Financial services staff preparing for DORA obligations
  • IT and infrastructure leads responsible for disaster recovery
  • Crisis management and emergency response coordinators

Standards in this category

Crisis ManagementDORADisaster RecoveryISO 22301Operational Resilience

Credential levels available

FoundationLead AuditorLead Crisis ManagerLead ImplementerLead Manager

Not sure which level fits your role, or what experience a designation requires? See the full certification-criteria reference →

Frequently asked questions

What is the difference between business continuity and disaster recovery?

Business continuity is the wider discipline — keeping critical business functions operating through a disruption, whatever its cause. Disaster recovery is the narrower, mostly technical practice of restoring IT systems and data after a failure. Disaster recovery is one component of a business continuity programme.

Who does DORA apply to?

The Digital Operational Resilience Act is EU legislation covering financial entities — banks, insurers, investment firms, payment institutions and others — along with the critical ICT third-party providers that serve them. It sets requirements for ICT risk management, incident reporting, resilience testing and third-party risk.

How does crisis management differ from business continuity?

Crisis management concerns the decision-making, command structure and communication during a serious incident — who decides what, and how the organization speaks to staff, customers, regulators and media. Business continuity concerns the plans and capabilities that keep operations running. The two are complementary and a mature programme has both.

Is ISO 22301 certifiable for organizations?

Yes. ISO 22301 is a requirements standard specifying a business continuity management system, and organizations can be certified against it. These courses lead to PECB personal certification demonstrating your own competence to implement or audit such a system.

Which level should I take first?

Foundation if you are new to the discipline or need the vocabulary for a wider role. Lead Implementer if you will build the programme. Lead Auditor if you will assess one. Foundation is not a prerequisite for the others.