Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course
ICT-Information & Communication Technology

Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course

The Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course is a 5-day professional training programme delivered in-person or online in ICT-Information & Communication Technology, ending with a TrustGate Corporate Skills certificate of completion.

The Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery programme is designed to equip senior managers, risk professionals, ICT leaders, business continuity coordinators and operational decision-makers with the capabilities required to identify cyber-re...

5 Days Expert Instructors Certificate Included Online & In-Person

Course Overview

The Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery programme is designed to equip senior managers, risk professionals, ICT leaders, business continuity coordinators and operational decision-makers with the capabilities required to identify cyber-related threats, protect critical business services and maintain organisational operations during disruptive events. Organisations face a wide range of disruptions, including ransomware attacks, system failures, data loss, cloud service outages, supplier incidents, infrastructure damage and interruptions to essential utilities. Such events can affect revenue, customer service, public service delivery, regulatory compliance and institutional reputation. Effective resilience therefore requires an integrated approach that connects cyber risk management with business impact analysis, continuity planning, disaster recovery and executive crisis management. The programme examines how organisations can identify critical assets and services, evaluate cyber and operational risks, establish risk treatment priorities and develop realistic recovery arrangements. Participants explore enterprise risk assessment, business impact analysis, recovery time objectives, recovery point objectives, backup strategies, alternate operating arrangements and disaster recovery testing. The course also considers ransomware preparedness, third-party dependencies, cloud resilience, crisis communication and the coordination of technical and business recovery activities. Particular attention is given to the relationship between business continuity plans and ICT disaster recovery plans, ensuring that technology recovery supports the actual priorities of the organisation.

Learning Objectives

  • Explain the relationship between enterprise cyber risk, business continuity and disaster recovery.
  • Identify critical organisational assets, processes, systems and service dependencies.
  • Conduct cyber risk assessments and develop risk treatment priorities.
  • Undertake business impact analysis and determine recovery priorities.
  • Define recovery time objectives (RTOs) and recovery point objectives (RPOs).
  • Develop and maintain business continuity and ICT disaster recovery plans.
  • Evaluate backup, restoration, redundancy and alternative operating arrangements.
  • Coordinate cyber incident response, crisis management and business recovery.
  • Design testing, simulation and continuous improvement programmes for resilience plans.
  • Develop an integrated cyber risk management and organisational resilience roadmap.

Course Content

  1. Understanding enterprise risk management and cyber risk exposure.
  2. Relationships among cybersecurity, operational risk and organisational resilience.
  3. Identifying critical business services and technology dependencies.
  4. Establishing risk ownership, accountability and resilience objectives.

  1. Identifying threats, vulnerabilities and potential business consequences.
  2. Assessing ransomware, data loss, system failure and supplier disruption.
  3. Evaluating risk likelihood, impact and existing control effectiveness.
  4. Developing cyber risk registers, risk ratings and treatment prioriti

  1. Risk avoidance, reduction, transfer and acceptance.
  2. Selecting preventive, detective and recovery controls.
  3. Evaluating redundancy, system resilience and security safeguards.
  4. Monitoring residual risks, control gaps and corrective actions.

  1. Identifying critical processes, products and services.
  2. Assessing financial, operational, legal and reputational impacts.
  3. Determining maximum tolerable disruption and recovery priorities.
  4. Establishing recovery time objectives and recovery point objectives.

  1. Principles and components of a business continuity management system.
  2. Developing continuity strategies for critical functions.
  3. Alternative work arrangements, manual workarounds and resource planning.
  4. Defining roles, escalation arrangements and continuity plan activation criteria.

  1. Disaster recovery architecture and recovery environment design.
  2. Backup strategies, restoration procedures and data integrity verification.
  3. Cloud recovery, replication, redundancy and alternate infrastructure.
  4. Developing and documenting ICT disaster recovery procedures.

  1. Integrating cyber incident response with business continuity arrangements.
  2. Crisis leadership, incident escalation and emergency decision-making.
  3. Internal communication and coordination with customers, suppliers and regulators.
  4. Managing ransomware, data breaches and extended service outages.

  1. Identifying critical suppliers, outsourced services and technology dependencies.
  2. Assessing supplier continuity capabilities and recovery commitments.
  3. Business continuity requirements in contracts and service-level agreements.
  4. Developing contingency arrangements for supplier failure and service interruption.

  1. Tabletop exercises and scenario-based continuity simulations.
  2. Testing backups, restoration procedures and disaster recovery arrangements.
  3. Evaluating recovery performance against RTOs and RPOs.
  4. Documenting lessons learned and updating plans after exercises or incidents.

  1. Conducting a preliminary cyber risk and business impact assessment.
  2. Identifying critical services and establishing recovery priorities.
  3. Preparing an integrated business continuity and disaster recovery action plan.
  4. Presenting a resilience roadmap with responsibilities, testing schedules and performance indicators.

Who Should Attend?

  • Chief executives, senior managers and departmental heads.
  • Chief Risk Officers and enterprise risk management professionals.
  • ICT directors, CIOs, CTOs and cybersecurity managers.
  • Business continuity and disaster recovery coordinators.
  • Internal auditors, compliance officers and governance professionals.
  • Operations managers and critical service delivery leaders.
  • Bank, SACCO, insurance and financial services professionals.
  • Government agencies, universities, NGOs and other essential service providers.

Training Methodology

  • Facilitator-led presentations and discussions.
  • Cyber risk and resilience case studies.
  • Business impact analysis exercises.
  • Risk assessment and recovery prioritisation workshops.
  • Business continuity and disaster recovery plan development.
  • Cyber incident and crisis management simulations.
  • Backup, restoration, and recovery testing exercises.
  • Resilience roadmap development workshops.

Is this course for you?

Level: Advanced

Problems this course solves

  • Inadequate identification and management of cyber risks and critical business dependencies.
  • Lack of effective business continuity and ICT disaster recovery plans.
  • Unclear recovery priorities, RTOs, and RPOs, leading to prolonged service disruptions.
  • Limited preparedness for cyber incidents, operational crises, and technology failures.

What's Included

Certificate of completion
Training materials included
Lunch and refreshments (physical)
Post-training support

Certification

Certificate in Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery

Issued by: TRUSTGATE CORPORATE SKILLS

Frequently Asked Questions

How long is the Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course training?

The Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course runs for 5 Days. Each day combines expert-led teaching with practical, hands-on exercises so participants can apply what they learn immediately.

Is the Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course delivered online or in-person?

This course is delivered in person (scheduled venues include Nairobi, Mombasa, Kigali, London), live online, or in-house at your organisation.

How much does the Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course cost?

The fee is US$600 per person online and US$1,400 per person in person. In-person fees depend on the participant's country; the pricing card on this page shows the fee for yours.

When is the next Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course training?

A session is running now, from 2 November 2026 to 6 November 2026 in Nairobi, Kenya. The next one runs from 9 November 2026 to 13 November 2026 in Nairobi, Kenya. You can also request a custom date or an in-house session for your team.

Do I get a certificate after completing the Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course?

Yes. Participants who complete the Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course receive a certificate of completion from TRUSTGATE CORPORATE SKILLS.

What will I learn in the Enterprise Cyber Risk Management, Business Continuity and Disaster Recovery Course?

Key learning outcomes include: Explain the relationship between enterprise cyber risk, business continuity and disaster recovery; Identify critical organisational assets, processes, systems and service dependencies; Conduct cyber risk assessments and develop risk treatment priorities; Undertake business impact analysis and determine recovery priorities; Define recovery time objectives (RTOs) and recovery point objectives (RPOs).