CBCP Exam Information and Outline
Certified Business Continuity Professional
CBCP Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the official CBCP exam objectives. This course outline serves as your roadmap, breaking down exactly which technical domains and skills will be tested. By reviewing the syllabus, you can identify your strengths and focus your study time on the areas where you need the most improvement.
The information below reflects the latest 2026 course contents as defined by DRI. We provide this detailed breakdown to help you align your preparation with the actual exam format, ensuring there are no surprises on test day. Use this outline as a checklist to track your progress as you move through our practice question banks.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
Exam Code: CBCP
Exam Name: DRI Certified Business Continuity Professional
Number of Questions: 120 (100 scored, 20 pilot)
Question Type: Multiple-choice
Exam Duration: 2.5 hours
Passing Score: 75%
Domain 1: Program Initiation and Management
- Business Continuity Management (BCM) Program
- Executive Sponsorship
- BCM Policy
- Governance Structure
- Steering Committee
- BCM Coordinator
- Resource Allocation
- Business Case
- Gap Analysis
- Maturity Model
- Key Performance Indicators (KPIs)
- Enterprise Risk Management (ERM) Integration
- BCM Culture Embedding
Domain 2: Risk Assessment
- Threat Identification
- Threat Catalog
- Likelihood Assessment
- Impact Assessment
- Risk Matrix
- Risk Appetite
- Risk Tolerance
- Inherent Risk
- Residual Risk
- Risk Register
- Bow-Tie Analysis
- Monte Carlo Simulation
- Risk Horizon
- Mitigation Recommendations
Domain 3: Business Impact Analysis (BIA)
- Critical Processes
- Maximum Tolerable Downtime (MTD)
- Recovery Time Objective (RTO)
- Recovery Point Objective (RPO)
- Minimum Business Continuity Objective (MBCO)
- Dependency Mapping
- Financial Impact Calculation
- Operational Impact
- Reputational Impact
- Legal/Regulatory Impact
- BIA Questionnaire
- Process Owner Survey
- Peak Period Analysis
Domain 4: Business Continuity Strategies
- Recovery Strategies
- Alternate Sites (Hot, Warm, Cold)
- Redundancy
- Diversification
- Outsourcing
- Insurance
- Supply Chain Alternatives
- Technology Recovery Options
- Manual Workarounds
- Cost-Benefit Analysis
- Strategy Selection Criteria
- Vital Records Protection
- Interdependency Considerations
Domain 5: Incident Response
- Incident Management
- Emergency Response
- Crisis Management
- Incident Command System (ICS)
- Emergency Operations Center (EOC)
- Notification Procedures
- Communication Protocols
- Media Management
- Stakeholder Communication
- Damage Assessment
- Initial Response Actions
- Escalation Criteria
- Incident Logging
Domain 6: Plan Development and Implementation
- Business Continuity Plan (BCP)
- Recovery Teams
- Task Assignments
- Recovery Procedures
- Plan Structure
- Departmental Plans
- Enterprise-Wide Plan
- Vital Records Management
- Plan Documentation
- Appendices
- Contact Lists
- Resource Inventories
- Plan Approval Process
Domain 7: Awareness and Training Programs
- BCM Awareness
- Training Programs
- Role-Specific Training
- General Employee Orientation
- Tabletop Exercises
- Functional Exercises
- Full-Scale Exercises
- Exercise Design
- Exercise Objectives
- After-Action Review (AAR)
- Lessons Learned
- Training Evaluation
- Competency Assessment
Domain 8: Business Continuity Plan Exercise, Audit, and Maintenance
- Plan Testing
- Exercise Types (Walkthrough, Simulation)
- Audit Program
- Internal Audit
- External Audit
- Maintenance Schedule
- Change Management
- Plan Update Triggers
- Version Control
- Audit Findings
- Corrective Actions
- Management Review
- Continuous Improvement
Domain 9: Crisis Communications
- Crisis Communication Plan
- Internal Communication
- External Communication
- Spokesperson
- Message Development
- Communication Channels
- Social Media Protocols
- Rumor Control
- Post-Crisis Debrief
- Template Messages
- Audience Segmentation
- Timing of Communications
- Legal Considerations
Domain 10: Coordination with External Agencies
- External Dependencies
- Public Authorities
- Emergency Services
- Regulators
- Vendors/Suppliers
- Mutual Aid Agreements
- Community Resources
- Liaison Roles
- Joint Exercises
- Information Sharing
- Contractual Obligations
- Service Level Agreements (SLAs)
- Third-Party Risk Management