Corporate training in the Gulf, London, Europe & Asia since 2015
Enquire now
IT-007

Certificate in IT Disaster Recovery Planning (CITDRP)

Intensive 5-day course · English, Arabic & European languages

IT and disaster recovery professionals develop resilience and recovery planning approaches during a 5 day course with 6 modules. Delegates evaluate risks and technology impacts, examine infrastructure and operational sustainability, and prepare a high-level recovery plan. Practical templates support Business Impact Analysis (BIA), planning and testing, with attention to incident management, audits and maintenance.

Classroom

Public courses in our cities

  • 26–30 Oct 2026Riyadh£4,200 + VAT
  • 9–13 Nov 2026Barcelona£3,080 + VAT
  • 23–27 Nov 2026Doha£4,200 + VAT
  • 14–18 Dec 2026Rome£3,400 + VAT
  • 28 Dec – 1 Jan 2026Abu Dhabi£4,200 + VAT
  • 4–8 Jan 2027Rome£3,400 + VAT
Show 23 more dates
  • 18–22 Jan 2027Muscat£3,080 + VAT
  • 1–5 Feb 2027Istanbul£2,280 + VAT
  • 15–19 Feb 2027Casablanca£2,280 + VAT
  • 8–12 Mar 2027Vienna£3,400 + VAT
  • 22–26 Mar 2027Manama£3,080 + VAT
  • 12–16 Apr 2027Barcelona£3,080 + VAT
  • 26–30 Apr 2027Amman£3,400 + VAT
  • 10–14 May 2027Rome£3,400 + VAT
  • 24–28 May 2027Madrid£3,400 + VAT
  • 7–11 Jun 2027Rome£3,400 + VAT
  • 21–25 Jun 2027Berlin£3,400 + VAT
  • 5–9 Jul 2027Istanbul£2,280 + VAT
  • 19–23 Jul 2027Milan£3,400 + VAT
  • 9–13 Aug 2027Vienna£3,400 + VAT
  • 23–27 Aug 2027Malaga£3,080 + VAT
  • 13–17 Sep 2027Barcelona£3,080 + VAT
  • 27 Sep – 1 Oct 2027Sarajevo£3,400 + VAT
  • 11–15 Oct 2027Rome£3,400 + VAT
  • 25–29 Oct 2027Dubai£4,200 + VAT
  • 1–5 Nov 2027Rome£3,400 + VAT
  • 15–19 Nov 2027Riyadh£4,200 + VAT
  • 6–10 Dec 2027Istanbul£2,280 + VAT
  • 20–24 Dec 2027Doha£4,200 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Can't make these dates? We can run this course for your team on dates that suit you. Ask for custom dates · In-house options

Online (live)

With a trainer, on dates to suit your team

This course can be taught live online by a trainer, in English, Arabic or any European language, for one person or a whole team.

£1,850 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Special requests

Tailor this course

Pick what you want changed and we’ll come back with a proposal and price.

Special request

What would you like to change? (pick any)
or

Course overview

IT resilience requires preparation. CITDRP examines threats to IT operations and the processes used to assess their effects, protect technology interests and support activities that create organisational value. The practical framework considers ISO 27031, ISO 20000, ITIL and ISO 22301, alongside the Business Continuity Institute (BCI) Good Practice Guidelines (GPG) 2013 and NCEMA 7000-2012. Policies, objectives and procedures connect the work on infrastructure security with IT Readiness for Business Continuity (IRBC).

Risk evaluation and technology BIA inform the recovery plan. Delegates examine assets, people, changes and supply chains as well as data management, recovery options and the relationship between Maximum Tolerable Period of Disruption (MTPD), Recovery Time Objective (RTO) and Recovery Point Objective (RPO). Plan ownership, command arrangements and reporting accompany incident response and testing. Templates and supporting documents are used during the course and supplied for later organisational use, while audit, management review and maintenance address ongoing improvement.

Recovery depends on supporting arrangements. Site and building protection, networks and information systems receive attention alongside storage inside and outside the site. Delegates consider daily change procedures, the responsibilities of recovery teams and business continuity champions, and the dependencies that affect end-user computing and communications. Incident work addresses escalation, emergency response and plan invocation, with situation reporting and activity logging used to organise information. Reviews after incidents provide material for lessons and improvements.

Course objectives

By the end of the course, delegates will be able to:

  1. Use policies and procedures, alongside objectives and targets, to assess risk management and improve IT Readiness for Business Continuity (IRBC)
  2. Apply practices that sustain IT operations and protect the infrastructure environment
  3. Evaluate risks, threats and hazards and identify vulnerabilities or weaknesses through defined procedures
  4. Review the management of IT assets, personnel and changes alongside the supply chain
  5. Describe the DR programme for IT, its data management needs and the elements used in a technology BIA
  6. Estimate MTPD and relate the result to RTO and RPO
  7. Prepare a high-level plan for IT disaster recovery

Target competencies

  • IT Readiness for Business Continuity (IRBC)
  • Risk evaluation
  • Business Impact Analysis
  • Incident and change management
  • Disaster recovery planning
  • Testing IT disaster recovery

Who should attend

This course suits:

  • IT managers and professionals
  • Disaster Recovery (DR) managers
  • People responsible for or involved in Disaster Recovery Plans (DRP) or Business Continuity Plans (BCP)
  • Professionals involved in technology or IT auditing

Training methodology

  • Videos and case studies accompany interactive group discussions and syndicate exercises.
  • Templates for evaluating risk, conducting BIA and preparing the high-level IT DR plan are used in class and supplied for later use.
  • Supporting material covers the steering committee's Terms of Reference (ToR), change management and DR testing strategy, processes and procedures.
  • Specific templates for BIA and DRP completion can be taken away for use in delegates' organisations.

Course modules

  1. Module 1

    Infrastructure and operational resilience

    • The need for resilience
    • ISO 27031 and its relationship with the Information Security Management System (ISMS)
    • Data centres and IT infrastructure
    • Sustaining operations
    • The data centre site infrastructure tier standard
    • Elements of operational sustainability
    • Infrastructure strategy and policy
    • Strategy methods and depth
    • Requirements for infrastructure policy
    • Protection of sites and buildings
    • Protection of networks and information systems
  2. Module 2

    Assessing risks and technology impacts

    • Risk assessment for sites and buildings
    • PESTLE: political, economic, sociological, technological, legal and environmental analysis
    • Strategic, tactical and operational types of BIA
    • Methods for implementing technology BIA
  3. Module 3

    Controls supporting recovery plans

    • Supply chain processes using a Third Party Questionnaire (3PQ), aligned with BSI PAS 7000
    • On-site and off-site storage of data and information, including emergency response arrangements
    • Change management procedures for daily requirements
    • Risk controls for essential supporting equipment and systems
  4. Module 4

    Disaster recovery activities and scope

    • The DR lifecycle, its resources and training
    • IT DR within the ISMS
    • Scope and requirements of IT elements
  5. Module 5

    Preparing plans and managing incidents

    • Developing technology recovery plans
    • Plan ownership, structure and IT DR team roles and responsibilities
    • Data and information sources with internal and external dependencies
    • Planning practices using ISO 27301, ISO 20000 and ITIL
    • Managing and recovering end-user computing, communications technology and infrastructure
    • Options for recovery
    • Development, implementation and testing of plans
    • Ownership and structure of the plan
    • Responsibilities of the business continuity (BC) champion and team leaders
    • Command, Coordination, Communications and Intelligence (C3i)
    • Purpose and essentials of the command centre
    • Equipment and supporting information
    • Preparing Situation Reports (SITREPS)
    • Types of tests and exercises
    • Responses to major incidents
    • Defining incidents and the escalation process
    • Establishing Command, Coordination and Communications (3C)
    • Responsibilities of the Network Operations Centre (NOC)
    • Emergency response and invocation of the plan
    • Supporting information, equipment and systems needed
    • SITREPS, activity logs and reporting tools
    • Reviewing incidents afterwards
    • Lessons from incidents
    • The value of reviewing incidents
    • The post-incident process
  6. Module 6

    Review, audit and upkeep

    • The purpose of an IT audit
    • The steering committee and its Terms of Reference (ToR)
    • Management review and continuous improvement
    • Embedding DR in organisational lifecycle processes and creating virtual teams
    • DR documentation and collaboration with internal and external auditors

Certificate

Every delegate who completes the course receives an ARUK Training Certificate of Attendance.

Frequently asked questions

How do I register?

Choose a date and city in the schedule and press Register, or send us an enquiry. Our team confirms your place and sends an invoice.

Are fees shown with VAT?

Fees are shown per delegate and exclude VAT, which is added to the invoice where applicable.

Can this course be delivered for our team only?

Yes. Any ARUK course can be delivered in-house at your premises, in a meeting room we book for you, or 1-to-1.

Is this course available online?

Yes. We run it live online with a trainer, on dates that suit your team, for £1,850 + VAT per delegate.

Is there a group discount?

Yes. 20% for 2 delegates, 35% for 3 delegates and 50% for 5 or more delegates on the same course.

Can the course be delivered in Arabic or another language?

Yes. Our courses can be delivered in English, Arabic or any European language, by a trainer who teaches in that language. Mention your preferred language when you register or enquire.

What certificate will I receive?

An ARUK Training Certificate of Attendance.

Related courses

Register

Key booking terms (read before you register)
  • The full fee is paid in advance, before the course starts.
  • Cancel in writing 30 or more days before the start date (45 for in-house) for a refund. Later than that, the full fee is payable.
  • No refund for non-attendance or partial attendance.
  • Places are for the named delegate only; another person cannot attend instead.
  • Moving to another date or city is only possible if ARUK agrees in writing.
  • Travel, accommodation and visas are your responsibility. A refused visa does not change the cancellation terms.

booking terms and conditions

Get a quotation