Skip to main content
Operational resilience

Lead Operational Resilience Manager

Lead Operational Resilience Manager. Review available formats, prerequisites, current inclusions and certification terms before booking.

PECBLead5 daysLiveSelf-pacedIn-house
  • Practitioner-led, taught by a working CISO
Christophe Mazzola

Taught by

Christophe Mazzola

Practicing CISO · Founder of Cyber Academy

See full profile →

For

Right fit if you are.

  • ✓Managers responsible for preparing their organisations to withstand and recover from operational disruptions
  • ✓Business continuity managers seeking to expand their competency into broader operational resilience
  • ✓Risk managers who need to integrate resilience practices into enterprise risk frameworks
  • ✓Consultants advising organisations on improving their resilience posture
  • ✓Individuals responsible for championing operational resilience internally
  • ✓Professionals seeking to gain structured knowledge of operational resilience management approaches

Honest call

NOT for. When to skip it.

We'd rather you keep your money than buy the wrong path.

  • ✗Individuals with no background in business continuity, risk management, or organisational management, as the course assumes a foundational understanding
  • ✗Technical specialists focused solely on IT infrastructure or cybersecurity who are not involved in broader organisational resilience planning
  • ✗Professionals seeking a purely regulatory compliance course with no operational management component
  • ✗Entry-level professionals who have not yet worked in a management or advisory capacity

Outcomes

What you'll be able to do

  • 1Explain the fundamental concepts and principles that underpin operational resilience management
  • 2Identify critical business functions and map their interdependencies across an organisation
  • 3Set and apply impact tolerances to guide resilience planning decisions
  • 4Conduct a business impact analysis and assess risks to operational continuity
  • 5Plan and implement process and strategy changes that embed operational resilience best practices
  • 6Design and execute comprehensive resilience testing and assessment programmes
  • 7Measure resilience performance and drive continual improvement across the organisation

Programme

Day by day

Day 1The Foundations of Operational Resilience

  • Core Concepts and Principles of Operational Resilience

    This module introduces the key definitions, principles, and strategic importance of operational resilience within modern organisations.

  • Regulatory and Standards Landscape

    Participants explore the regulatory requirements and recognised standards that shape operational resilience frameworks across sectors.

  • Identifying Critical Business Functions

    This module covers techniques for identifying which business functions are critical and mapping their dependencies within and beyond the organisation.

By end of day

  • • Articulate the core principles that distinguish operational resilience from traditional business continuity
  • • Identify critical business functions and begin mapping their interdependencies
  • • Relate the regulatory and standards landscape to an organisation's resilience obligations
Day 2Planning the Operational Resilience Management Framework

  • Setting Impact Tolerances

    Participants learn how to define and apply impact tolerances to determine acceptable levels of disruption for each critical business function.

  • Business Impact Analysis

    This module guides participants through the process of conducting a structured business impact analysis to quantify the effects of service disruption.

  • Resource Management for Resilience

    Participants examine how to identify, allocate, and manage the human, technological, and operational resources required to sustain critical functions.

By end of day

  • • Set impact tolerances that reflect the organisation's risk appetite and regulatory obligations
  • • Conduct a business impact analysis and translate findings into resilience planning inputs
  • • Align resource management decisions with the requirements of critical business functions
Day 3Establishing Operational Resilience Management Practices

  • Business Resilience Practices

    This module addresses the strategies and controls organisations implement to maintain continuity of critical business functions during disruptions.

  • Digital and Cyber Resilience

    Participants explore how digital and cyber resilience practices are integrated into the broader operational resilience framework.

  • Third-Party Resilience and Organisational Culture

    This module examines approaches to managing resilience risks in the supply chain and third-party relationships, alongside building a resilience-aware culture.

By end of day

  • • Design and implement practices that sustain critical business functions through disruption scenarios
  • • Integrate digital and cyber resilience considerations into the operational resilience framework
  • • Address third-party resilience risks and promote a resilience-oriented organisational culture
Day 4Testing and Improving Operational Resilience

  • Resilience Testing Approaches

    Participants examine a range of testing methodologies, from tabletop exercises to live scenario simulations, used to validate resilience capabilities.

  • Performance Measurement and Monitoring

    This module covers how to define key indicators and monitoring mechanisms to track whether resilience objectives are being met over time.

  • Continual Improvement of Operational Resilience

    Participants learn how to translate test findings and performance data into actionable improvements within the resilience management framework.

By end of day

  • • Design and execute resilience tests appropriate to the maturity and risk profile of the organisation
  • • Define performance measures that provide meaningful insight into resilience capability
  • • Build a continual improvement cycle that keeps the resilience framework current and effective
Day 5Review and Exam Preparation

  • Integrated Case Study Review

    Participants work through a realistic operational resilience scenario that draws on concepts from all preceding training days.

  • Key Concept Consolidation

    This session revisits the most important frameworks, tools, and principles covered during the course to reinforce retention.

By end of day

  • • Apply the full operational resilience management lifecycle to a realistic organisational scenario
  • • Identify areas requiring further study before sitting any external certification exam

Public sessions

Upcoming public sessions

Open-enrolment cohorts. Pick a date and book your seat. Want a private cohort for your team instead? Request an in-house quote.

Deep dive

Everything inside this certification

The detail behind the headline. Read at your own pace. Each section answers a buyer question we get on discovery calls.

  • Domain 1: Fundamental concepts of operational resilience
  • Domain 2: Planning operational resilience management framework
  • Domain 3: Establishing business resilience and digital and cyber resilience management practices
  • Domain 4: Establishing third-party resilience management practices and resilience organizational culture
  • Domain 5: Testing and continually improving operational resilience

The requirements for certifications are as follows:

  • Identifying critical business services
  • Setting up impact tolerance
  • Conducting business impact analysis
  • Managing and improving operational, digital, and cyber resilience
  • Managing third-party and supply chain resilience
  • Conducting operational resilience scenario testing
  • Conducing operational resilience self-assessment
  • Improving the performance of the operational resilience
  • Certification and examination fees are included in the price of the training course.
  • Participants will be provided with training course materials containing over 400 pages of information, practical examples, exercises, and quizzes.
  • An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
  • Candidates who have completed the training course but failed the exam are eligible to retake the exam once for free within a 12 month period from the initial date of the exam.

Educational approach

  • The training course incorporates interactive elements, such as essay-type exercises and multiple-choice quizzes, including some that are scenario-based.
  • Participants are strongly encouraged to communicate and engage in discussions.
  • The quizzes are designed in a manner that closely resembles the format of the certification exam.

FAQ

Buyers always ask

Is the certification exam included with this course?+

Exam inclusion depends on the delivery format and commercial option selected. Check the booking summary or ask Cyber Academy for written confirmation before registering.

Completing the training, passing the applicable exam, and meeting the PECB credential requirements are separate steps.

How does operational resilience differ from business continuity management?+

Business continuity management traditionally focuses on recovering specific processes or systems after a disruption. Operational resilience takes a broader view, requiring organisations to identify their critical business functions, set impact tolerances, and demonstrate the ability to remain within those tolerances regardless of the nature or cause of a disruption.

This course addresses both dimensions, helping participants understand how business continuity practices fit within a more comprehensive operational resilience framework.

Is this course suitable for professionals working in regulated industries such as financial services?+

The course covers the principles and practices that underpin operational resilience management and references the regulatory and standards landscape that applies across sectors, making it relevant to professionals in regulated environments.

Participants from specific regulated sectors should verify that the course content aligns with the particular regulatory requirements applicable to their jurisdiction, as the training is not tailored exclusively to any single regulator's rules.

What prior knowledge should I have before attending?+

A foundational understanding of operational resilience or business continuity concepts and principles is expected. Participants with a background in risk management or organisational governance will also find that knowledge beneficial.

The course is not designed as an introductory primer for those entirely new to resilience or continuity disciplines, and participants lacking that foundation may find the content progresses too quickly.

What will I be able to do differently at work after completing this training?+

Participants will be equipped to identify critical business functions, set meaningful impact tolerances, conduct business impact analyses, and design resilience testing programmes. They will also be able to plan changes to organisational processes and manage third-party resilience risks more effectively.

These skills support immediate application in roles responsible for resilience governance, risk management, business continuity, or operational strategy.

Next step

Where this leads

Pillar guide

Read the full Operational resilience guide

How DORA, NIS 2 and ISO 22301 interlock when the lights go out.

Ready to get certified?

Taught by a practicing CISO. Prices and exam terms shown up front.

Buy a live seatBuy self-paced licenceRequest a quote