Krisenmanagement und Geschäftskontinuitätsplanung

Crisis management deals with the immediate response to an unexpected situation — the what and how in the moment of crisis. Business continuity management (BCM) goes a step further: it ensures that critical business processes can continue to operate during and after a crisis. The two areas complement each other and are inseparable in any effective emergency framework.

Yes, in many cases. Operators of critical infrastructure (KRITIS) are required under the BSIG and BSI-KritisV to demonstrate measures for operational security and continuity. Through the EU's NIS2 directive, now transposed into German law, this obligation extends to a significantly larger group of organisations. The GDPR also requires breach notification procedures, which in turn demand a functioning emergency response plan. More information is available directly from the Federal Office for Information Security (BSI).

ISO 22301 is the international standard for Business Continuity Management Systems (BCMS). It provides organisations with a clear framework for assessing risks, developing continuity strategies, and implementing emergency plans. Certification to ISO 22301 is not mandatory for all organisations, but it is widely regarded as a quality benchmark — especially for companies operating in regulated industries or working with public sector clients.

The EU's NIS2 Directive (Network and Information Security Directive 2) significantly raises the bar for cybersecurity and crisis resilience. It has been in force since October 2024 and applies to a much broader range of companies than its predecessor — including mid-sized businesses in sectors such as energy, transport, healthcare, and digital infrastructure. Affected organisations must demonstrate security measures, report incidents, and maintain emergency plans. More information can be found on the website of the Federal Office of Civil Protection and Disaster Assistance (BBK).

This depends greatly on the size and complexity of the organisation. Small and medium-sized businesses can often establish a basic BCMS within three to six months. Larger organisations with complex IT infrastructures and extensive regulatory requirements may need twelve months or more. This course walks you through the systematic development of a BCMS from the ground up — practical, structured, and step by step.

The Federal Office for Information Security (BSI) is Germany's central cybersecurity authority. It publishes standards such as BSI Standard 200-4 and IT-Grundschutz to help organisations secure their IT infrastructure and prepare for crises. The Federal Office of Civil Protection and Disaster Assistance (BBK) coordinates civil disaster protection at the federal level and provides guidance on risk preparedness. Both authorities play a central role in Germany's crisis management landscape.

Yes, absolutely. This course is not designed exclusively for IT professionals. Crisis management and business continuity are interdisciplinary fields. Whether your background is in HR, law, public administration, operations, or general management — the course explains all technical concepts in clear, accessible language without unnecessary jargon. The content is deliberately designed to be approachable for those new to the field, while still offering genuine depth for experienced professionals.