CBCP Exam Information and Outline
Certified Business Continuity Professional
Syllabus Update Checked on: October 30, 2026
CBCP Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the
official CBCP exam objectives. This course outline serves as your roadmap.
The information below reflects the 2026 syllabus defined by
DRI.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
Exam Code: CBCPExam Name: DRI Certified Business Continuity Professional
Number of Questions: 120 (100 scored, 20 pilot)
Question Type: Multiple-choice
Exam Duration: 2.5 hours Passing Score: 75%
Domain 1: Program Initiation and Management- Business Continuity Management (BCM) Program
- Executive Sponsorship
- BCM Policy
- Governance Structure
- Steering Committee
- BCM Coordinator
- Resource Allocation
- Business Case
- Gap Analysis
- Maturity Model
- Key Performance Indicators (KPIs)
- Enterprise Risk Management (ERM) Integration
- BCM Culture Embedding
- Threat Identification
- Threat Catalog
- Likelihood Assessment
- Impact Assessment
- Risk Matrix
- Risk Appetite
- Risk Tolerance
- Inherent Risk
- Residual Risk
- Risk Register
- Bow-Tie Analysis
- Monte Carlo Simulation
- Risk Horizon
- Mitigation Recommendations
- Critical Processes
- Maximum Tolerable Downtime (MTD)
- Recovery Time Objective (RTO)
- Recovery Point Objective (RPO)
- Minimum Business Continuity Objective (MBCO)
- Dependency Mapping
- Financial Impact Calculation
- Operational Impact
- Reputational Impact
- Legal/Regulatory Impact
- BIA Questionnaire
- Process Owner Survey
- Peak Period Analysis
- Recovery Strategies
- Alternate Sites (Hot, Warm, Cold)
- Redundancy
- Diversification
- Outsourcing
- Insurance
- Supply Chain Alternatives
- Technology Recovery Options
- Manual Workarounds
- Cost-Benefit Analysis
- Strategy Selection Criteria
- Vital Records Protection
- Interdependency Considerations
- Incident Management
- Emergency Response
- Crisis Management
- Incident Command System (ICS)
- Emergency Operations Center (EOC)
- Notification Procedures
- Communication Protocols
- Media Management
- Stakeholder Communication
- Damage Assessment
- Initial Response Actions
- Escalation Criteria
- Incident Logging
- Business Continuity Plan (BCP)
- Recovery Teams
- Task Assignments
- Recovery Procedures
- Plan Structure
- Departmental Plans
- Enterprise-Wide Plan
- Vital Records Management
- Plan Documentation
- Appendices
- Contact Lists
- Resource Inventories
- Plan Approval Process
- BCM Awareness
- Training Programs
- Role-Specific Training
- General Employee Orientation
- Tabletop Exercises
- Functional Exercises
- Full-Scale Exercises
- Exercise Design
- Exercise Objectives
- After-Action Review (AAR)
- Lessons Learned
- Training Evaluation
- Competency Assessment
- Plan Testing
- Exercise Types (Walkthrough, Simulation)
- Audit Program
- Internal Audit
- External Audit
- Maintenance Schedule
- Change Management
- Plan Update Triggers
- Version Control
- Audit Findings
- Corrective Actions
- Management Review
- Continuous Improvement
- Crisis Communication Plan
- Internal Communication
- External Communication
- Spokesperson
- Message Development
- Communication Channels
- Social Media Protocols
- Rumor Control
- Post-Crisis Debrief
- Template Messages
- Audience Segmentation
- Timing of Communications
- Legal Considerations
- External Dependencies
- Public Authorities
- Emergency Services
- Regulators
- Vendors/Suppliers
- Mutual Aid Agreements
- Community Resources
- Liaison Roles
- Joint Exercises
- Information Sharing
- Contractual Obligations
- Service Level Agreements (SLAs)
- Third-Party Risk Management