Postgraduate Diploma in BCP/DRP and Business Impact Analysis
800-hour online Postgraduate Diploma in BCP/DRP and Business Impact Analysis. 8 modules covering ISO 22301 (business continuity management systems), ISO/TS 22317 (business impact analysis) and Veeam Backup & Replication. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Establish the scope and governance of a business continuity system.
Carry out a business impact analysis that determines RTO and RPO.
Assess disruption risks and critical dependencies.
Select continuity strategies proportionate to risk.
Design disaster recovery plans for IT infrastructure.
Draft crisis management and communication plans.
Plan exercises and tests that drive continuous improvement.
Who it's for
- Business continuity manager looking to specialise in BCP/DRP and Business Impact Analysis.
- BCP/DRP consultant looking to specialise in BCP/DRP and Business Impact Analysis.
- Operational risk manager looking to specialise in BCP/DRP and Business Impact Analysis.
- Infrastructure and recovery engineer looking to specialise in BCP/DRP and Business Impact Analysis.
- Information systems auditor looking to specialise in BCP/DRP and Business Impact Analysis.
- Crisis management coordinator looking to specialise in BCP/DRP and Business Impact Analysis.
- Engineering or science graduates seeking to enter banking and insurance.
What you'll work with
- ISO 22301 (business continuity management systems)
- ISO/TS 22317 (business impact analysis)
- ISO/IEC 27031 (ICT readiness for business continuity)
- ISO/IEC 27001 (information security)
- Regulation (EU) 2022/2554 (DORA)
- Directive (EU) 2022/2555 (NIS2)
- NIST SP 800-34 (contingency planning)
8 modules · 800 h
1.1Continuity and resilience concepts1.2ISO 22301 and its structure1.3Business continuity management lifecycle1.4Policy and scope1.5Roles and responsibilities1.6Relationship with ISO 31000 risk management1.7DORA and continuity in the financial sector1.8NIS2 Directive1.9Maturity indicators1.10Case study: analysis of a disruption incident
2.1BIA methodology according to ISO/TS 223172.2Identifying critical processes2.3Financial, operational and reputational impacts2.4Maximum tolerable period of disruption (MTPD)2.5RTO and RPO2.6Minimum business continuity objective2.7Resource dependencies2.8Interviews and questionnaires2.9Validation with management2.10Workshop: BIA of a department
3.1Natural and technological threats3.2Cyber attacks and ransomware3.3Supplier risks3.4Pandemics and absenteeism3.5Scenario analysis3.6Probability and impact matrices3.7Single points of failure3.8Mitigation measures3.9Risk register3.10Practice: identifying single points of failure
4.1Strategies for people4.2Alternative locations4.3Remote working as a strategy4.4Supplier strategies4.5Technology strategies4.6Inventories and stock4.7Reciprocal agreements4.8Cost versus risk4.9Selecting strategies4.10Workshop: selecting a strategy for a critical process
5.1DRP and its relationship with the BCP5.23-2-1 backups5.3Synchronous and asynchronous replication5.4Hot, warm and cold backup sites5.5Cloud recovery5.6Immutability against ransomware5.7System recovery order5.8Technical runbooks5.9ISO/IEC 270315.10Laboratory: designing a backup architecture
6.1Structure of continuity plans6.2Crisis management team6.3Activation and escalation6.4Crisis communication6.5Stakeholder management6.6Internal communication plan6.7Decision-making under pressure6.8ISO 22361 crisis management6.9Return to normal operations6.10Practice: drafting an activation plan
7.1Types of exercises: tabletop, functional and full-scale7.2ISO 223987.3Scenario design7.4Exercise evaluation7.5Lessons learned7.6System audit7.7Management review7.8Programme maintenance7.9ISO 22301 certification7.10Case study: tabletop exercise for a ransomware attack
8.1Organisational context and scope8.2Business impact analysis8.3Risk assessment8.4Continuity strategies8.5IT recovery plan8.6Crisis management plan8.7Exercise programme8.8Monitoring indicators8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Veeam Backup & Replication, Zerto, Fusion Risk Management, Microsoft Visio, Advanced Excel, in free, academic or evaluation versions. Practice is based on real procedures from crisis simulation exercises, data centre failover tests and business impact interviews. Assessment is continuous across modules, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Establish the scope and governance of a business continuity system.
Carry out a business impact analysis that determines RTO and RPO.
Assess disruption risks and critical dependencies.
Select continuity strategies proportionate to risk.
Design disaster recovery plans for IT infrastructure.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme comprises 800 hours in total, spread over 6 to 8 months. This is between 10 and 15 hours per week on average, compatible with a full-time job.
You will work with Veeam Backup & Replication, Zerto, Fusion Risk Management, Microsoft Visio, Advanced Excel. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM own diploma upon passing the continuous assessment and the integrative project. This is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised towards the higher programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in Safety Signage, Instructions and Label Design
Online 800-hour Postgraduate Diploma in Safety Signage, Instructions and Label Design. 8 modules covering ISO 7010 (registered safety signs), ISO 3864 (safety colours and signs) and…
Postgraduate Diploma in e-Textile Prototyping, Pattern Making and Scaling
Online 800-hour Postgraduate Diploma in e-Textile Prototyping, Pattern Making and Scaling. 8 modules covering ISO 8559-1 (anthropometric definitions for pattern making), EN 13402 (garment size designation)…
Postgraduate Diploma in Formative and Summative Assessments
Online 800-hour Postgraduate Diploma in Formative and Summative Assessments. 8 modules covering IEC 62366-1 (usability engineering for medical devices), IEC/TR 62366-2 and Tobii Pro Lab. Assigned…
More in Health, Biomechanics, Wearables & Operational Safety
All Health, Biomechanics, Wearables & Operational Safety programmes → · How to apply · Fees & financing · Scholarships