Skip to content

Cyber Resilience & Digital Operational Resilience Training Course

Builds the ability to map critical services and dependencies, set recovery objectives and test plans that keep operations running through cyber incidents.

CRR · Cyber & Digital Risk ManagementAll Levels#2758ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Course Overview

This course develops the capabilities required to maintain critical business services during cyber incidents, technology failures, and operational disruptions. It focuses on resilience governance, critical service identification, dependency mapping, recovery planning, incident coordination, and testing the organization's ability to withstand and recover from disruption. Participants learn to assess resilience gaps, define recovery objectives, evaluate third-party dependencies, and integrate cybersecurity, business continuity, disaster recovery, and operational risk management. Practical exercises focus on disruption scenarios, recovery decisions, resilience testing, and the development of a measurable improvement roadmap.

Learning Objectives

  • Explain the principles of cyber resilience and digital operational resilience.
  • Identify critical business services, systems, processes, and dependencies.
  • Assess cyber and technology-related operational risks.
  • Establish resilience governance, accountability, and reporting arrangements.
  • Define recovery time and recovery point objectives for critical services.
  • Integrate incident response, business continuity, and disaster recovery plans.
  • Evaluate third-party and technology supply chain dependencies.
  • Design resilience testing and scenario-based exercises.
  • Measure resilience performance using relevant indicators and recovery results.
  • Develop an actionable digital operational resilience improvement plan.

Who Should Attend

This course is designed for cybersecurity managers, IT and infrastructure managers, operational risk professionals, business continuity and disaster recovery specialists, compliance officers, technology leaders, internal auditors, and senior managers responsible for critical business services. It is particularly relevant to government entities, banks, financial institutions, oil and gas companies, industrial organizations, and large enterprises where technology disruption can affect essential services, production, customer operations, financial performance, or regulatory obligations. Participants should have a basic understanding of IT operations, cybersecurity, operational risk, or business continuity.

Learning Outcomes

  • Distinguish cyber resilience from cybersecurity prevention and incident response.
  • Map critical services and their technology, people, process, and supplier dependencies.
  • Assess operational vulnerabilities and single points of failure.
  • Define recovery objectives based on business impact and service criticality.
  • Coordinate incident response, continuity, and disaster recovery arrangements.
  • Evaluate the resilience of critical suppliers and technology service providers.
  • Develop realistic disruption scenarios and resilience testing plans.
  • Assess recovery capability against defined objectives.
  • Report resilience gaps, risks, and improvement priorities to management.
  • Establish a roadmap for continuous resilience improvement.

Course Outline

Day 1

Cyber Resilience and Digital Operational Resilience Fundamentals

  • Principles of cyber resilience and operational resilience.
  • Differences between prevention, protection, detection, response, recovery, and adaptation.
  • Identifying critical business services and essential operational activities.
  • Understanding dependencies across technology, people, processes, facilities, and suppliers.
  • Assessing the business impact of cyber incidents, system outages, and technology failures.
  • Integrating resilience into enterprise risk management and governance.
  • Defining resilience responsibilities and executive oversight.
  • Practical exercise: Identify critical services and assess the consequences of a prolonged technology disruption.
Day 2

Risk Assessment, Business Impact Analysis, and Recovery Planning

  • Identifying cyber and technology-related operational risks.
  • Conducting business impact analysis for critical services and processes.
  • Mapping systems, data flows, infrastructure, and external dependencies.
  • Establishing recovery time objectives (RTOs) and recovery point objectives (RPOs).
  • Prioritizing services according to criticality and business impact.
  • Identifying single points of failure and inadequate recovery arrangements.
  • Aligning recovery requirements with available technical and operational capabilities.
  • Practical exercise: Develop a business impact assessment and recovery objectives for a critical business service.
Day 3

Incident Response, Business Continuity, and Disaster Recovery

  • Coordinating cybersecurity incident response with business continuity arrangements.
  • Defining incident escalation, decision authority, and crisis communication.
  • Developing recovery strategies for critical applications, infrastructure, and data.
  • Evaluating backup integrity, restoration procedures, and recovery dependencies.
  • Managing service continuity during ransomware incidents, cloud outages, and infrastructure failures.
  • Coordinating IT, cybersecurity, operations, communications, and executive teams.
  • Documenting recovery procedures, responsibilities, and decision checkpoints.
  • Practical exercise: Respond to a simulated cyber incident that disrupts a critical business service and execute a structured recovery plan.
Day 4

Third-Party Resilience, Testing, and Operational Assurance

  • Assessing resilience risks associated with suppliers, cloud services, and outsourced operations.
  • Identifying critical third-party dependencies and concentration risks.
  • Reviewing supplier continuity arrangements, recovery commitments, and incident notification procedures.
  • Designing scenario-based resilience tests and tabletop exercises.
  • Testing recovery procedures, backup restoration, communication channels, and alternative operating arrangements.
  • Measuring recovery performance against RTOs and RPOs.
  • Recording test findings, control weaknesses, and corrective actions.
  • Practical exercise: Design a resilience test for a critical supplier or technology service, including success criteria and remediation actions.
Day 5

Resilience Metrics, Governance, and Continuous Improvement

  • Defining resilience indicators, performance measures, and management reporting requirements.
  • Evaluating recovery capability, service availability, incident response effectiveness, and unresolved vulnerabilities.
  • Establishing governance for resilience plans, testing schedules, and corrective actions.
  • Integrating resilience findings into enterprise risk registers and investment decisions.
  • Prioritizing improvements according to criticality, risk exposure, and resource requirements.
  • Developing a phased resilience implementation roadmap.
  • Establishing review cycles and lessons-learned processes.
  • Final workshop: Develop a digital operational resilience plan covering critical services, dependencies, recovery objectives, incident coordination, third-party risks, testing arrangements, performance indicators, and a prioritized improvement roadmap.

Upcoming Dates

Selected date

London · 13 – 17 Sept 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
AbujaScheduled
2 – 6 Nov 2026€5,100—
AccraScheduled
2 – 6 Nov 2026€5,100—
AmmanScheduled
8 – 12 Nov 2026€3,100—
AmsterdamScheduled
16 – 20 Nov 2026€5,400—
BakuScheduled
23 – 27 Nov 2026€4,800€4,320until 2 Nov
BangkokScheduled
30 Nov – 4 Dec 2026€6,100€5,490until 9 Nov
BarcelonaScheduled
7 – 11 Dec 2026€5,400€4,860until 16 Nov
BerlinScheduled
14 – 18 Dec 2026€5,800€5,220until 23 Nov
CairoScheduled
21 – 25 Dec 2026€3,300€2,970until 30 Nov
Cape TownScheduled
21 – 25 Dec 2026€5,100€4,590until 30 Nov
CasablancaScheduled
28 Dec 2026 – 1 Jan 2027€4,300€3,870until 7 Dec
DammamScheduled
4 – 8 Jan 2027€4,200€3,780until 14 Dec
DohaScheduled
11 – 15 Jan 2027€4,400€3,960until 21 Dec
DubaiScheduled
17 – 21 Jan 2027€4,400€3,960until 28 Dec
FrankfurtScheduled
25 – 29 Jan 2027€5,800€5,220until 4 Jan
GenevaScheduled
1 – 5 Feb 2027€6,300€5,670until 11 Jan
HamburgScheduled
8 – 12 Feb 2027€5,800€5,220until 18 Jan
IstanbulScheduled
8 – 12 Feb 2027€4,700€4,230until 18 Jan
JeddahScheduled
14 – 18 Feb 2027€4,200€3,780until 25 Jan
KigaliScheduled
22 – 26 Feb 2027€5,100€4,590until 1 Feb
Kuala LumpurScheduled
1 – 5 Mar 2027€4,400€3,960until 8 Feb
LisbonScheduled
8 – 12 Mar 2027€5,400€4,860until 15 Feb
LondonScheduled
15 – 19 Mar 2027€5,600€5,040until 22 Feb
MadinahScheduled
22 – 26 Mar 2027€4,200€3,780until 1 Mar
MadridScheduled
22 – 26 Mar 2027€5,400€4,860until 1 Mar
MakkahScheduled
29 Mar – 2 Apr 2027€4,200€3,780until 8 Mar
ManamaScheduled
5 – 9 Apr 2027€4,700€4,230until 15 Mar
MarbellaScheduled
12 – 16 Apr 2027€5,400€4,860until 22 Mar
MarrakeshScheduled
19 – 23 Apr 2027€4,300€3,870until 29 Mar
MilanScheduled
26 – 30 Apr 2027€6,000€5,400until 5 Apr
LondonScheduled
13 – 17 Sept 2027€5,600€5,040until 23 Aug

Available in: Istanbul · Dubai · London · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.