How to Incorporate Your Business Continuity Management (BCM) into Your Enterprise Risk Management (ERM) Program

Many organizations struggle to transition from a static Business Continuity Plan (BCP) to an effective, ongoing Business Continuity Management (BCM) system. In this introductory course, you will learn how to make that shift and integrate your BCM with your ERM program. The discussion will guide you through the key elements of the FFIEC’s Business Continuity Management Booklet, part of the FFIEC’s IT Examination Handbook. You will gain a deeper understanding of BCP and BCM, including the critical roles of disaster recovery plans, crisis management, and incident response in your overall strategy.

Part I: Business Continuity Management

• Understand the ERM framework and risk categories.
• Differentiate between Business Continuity Management (BCM) and Business Continuity Plan (BCP).
• Explore the BCM cycle.
• Review governance and leadership responsibilities in BCM.
• Learn about BCM audits.
• Examine BCM elements relative to ERM.
• Identify effective business continuity strategies.

Part II: Resiliency, BCP, and DRP

• Define “resilience of operations” mean and how to achieve it.
• Assess the role of third-party service providers in vendor management.
• Understand the definition, elements, and components of a Business Continuity Plan.
• Discuss BCP in relation to incident response, disaster recovery, crisis management, training, and testing.
• Emphasize the importance of testing and appropriate actions based on results.

Duration: 90-minutes

Who Should Attend: Enterprise Risk Management leader and team, IT Director, IT Leaders, IT personnel, Senior Leadership, Executives

Instructor(s): Marcia Malzahn, President & Founder, Malzahn Strategic

Recorded: June 12, 2025.