1.1 Welcome: Your Continuity Toolkit (Start Here)

Business continuity is the ability of an organisation to keep delivering its most important products and services at an acceptable level during a disruption, and to recover the rest in a planned order. For a manager, it is not a binder on a shelf. It is knowing, before the lights go out or the depot floods, which activities must keep going, how long the business can survive without each one, and who does what first.

This course is part of the EunoiaData Professional Toolkits series. Its point of difference is that it plans for the disruptions organisations in the region actually face: load-shedding, fuel shortages, currency shocks, network outages, single suppliers, floods and unrest, often several at once. It is scaled for SMEs and small teams, with a two-person version of every tool, and it treats systems recovery, including the ERP, as one part of continuity rather than the whole of it.

What you leave with

Each module ends with a toolkit item, delivered as a table you can copy into Excel or Word and adapt:

Who this course is for

Operations, finance and IT managers, risk officers, internal auditors and board members. No technical background is needed. The course does not re-teach risk assessment: it starts from the business impact analysis and links to our Risk Management course, built on ISO 31000, for the risk method itself.

Frameworks used in this course

This course explains these standards in its own words. It uses their ideas; it does not reproduce their text.

• ISO 22301:2019 (with Amendment 1:2024). The international standard for a business continuity management system: leadership, planning, business impact analysis, strategies, plans, exercises and improvement. The 2024 amendment asks organisations to consider climate change when they look at their context.
• ISO 22313:2020. The guidance partner to ISO 22301, explaining how its requirements can be met in practice. A revision of ISO 22313 began in 2026.
• ISO 31000:2018 (revision in progress). Risk management principles and process. Linked here, not taught; see our Risk Management course.

Product names such as SAP, Sage, Pastel, Microsoft Dynamics and Oracle are trademarks of their owners and are used for identification only; EunoiaData is not affiliated with or endorsed by any software vendor. Framework names belong to their issuing bodies; this course explains them in its own words and is not endorsed by them. The course does not prepare you for any certification exam.

The case company

About the case company: Kuvanya Group, its subsidiaries (Kuvanya Bank, KuvaTel, KuvaPay, Kuvanya Mining Supplies and Kuvanya Shared Services), its client “the Power Authority” and every person named in this course are fictional. They were created by EunoiaData for teaching purposes only. Any resemblance to real organisations or people is coincidental. Countries, laws and regulators are real and are described as they stood in 2026.

Kuvanya Group has a bank, a mobile network, a mobile-money business and a mining supplies business across Zimbabwe, Zambia, South Africa, Botswana, Kenya and Nigeria, all running on one group ERP hosted in a single Harare data centre. You will meet Pieter van Wyk, Operations Manager at Kuvanya Mining Supplies, practical and the owner of the depots; Brian Otieno, the Group IT Manager, capable but stretched; Tendai Musarurwa, the Group CFO; Nomsa Dube, Head of Internal Audit, who leads a two-person team; and Dr Adaeze Okafor, who chairs the audit and risk committee and wants one-page answers. Named people make mistakes, as people do.

How the three views work

Each teaching lesson closes with three short points: as the auditor (what to check), as the manager (the decision or arrangement you own) and as the board (the question to ask). Each module also gives a small-team version, for organisations where continuity is one part of someone’s job, not a department.

Example: A few months after a ransomware attack forced a Kuvanya Bank branch to serve customers by hand until the next afternoon, Dr Okafor asks the committee a plain question: “If the Kitwe depot were under water tomorrow, or the Harare data centre were gone, what would we do first, and how long could we last?” Brian can describe the backups. Pieter can describe the depot. Nobody can answer for the group. This course follows Kuvanya as it builds that answer, one tool at a time.

Three views

• As the auditor: start by asking for the list of critical activities and their agreed recovery times; without them, no plan can be tested.
• As the manager: know which of your activities customers, regulators or cash flow cannot do without, and for how long.
• As the board: ask management how long the business could survive the loss of each key site, system or supplier.

Check before you act: Standard editions here are as at October 2026 and are expected to change: ISO 22301 is under review and a revision of ISO 22313 began in 2026. This course explains the standards in its own words. Confirm the current edition with ISO or your national standards body before you rely on it.

Key takeaway

Continuity is a manager’s job before it is an IT job: know what must keep going, for how long you can do without it, and who acts first.