I'm working in enterprise risk management and looking to get the BCI Good Practice Guidelines certification. My employer supports it and there's a real business reason — we had a near-miss incident last year that exposed gaps in our BC documentation and testing processes.
I'm trying to figure out which BCI Associate exam is the right entry point versus going straight for the Member level. I have about 3 years of BC-adjacent experience but no formal certification. The knowledge base feels solid but the formal frameworks — particularly the Professional Practices for Business Continuity Management — are areas I'd need to study systematically.
Has anyone done the BCI exams recently through the online proctored route? I'm based in the US and attending an in-person testing center isn't practical. I'd also like to know how closely the exam follows the GPG 2018 edition versus the more recent updates.
My prep took about 6 weeks of evening study — roughly 8-10 hours per week. I used the official BCI study materials plus the online flashcard sets that the BCI community shares in their forums. The BCAW networking questions tripped me up most; they're more political and stakeholder-management focused than I expected.
Online proctored is fully available and I've done it twice now — once for Associate and once for Member. Works fine. The proctoring software is a bit fussy about the room environment but nothing unusual. Make sure your workspace is clean and your camera angle shows your hands.
With 3 years of BC-adjacent experience I'd go straight for the Associate level — the foundation course is genuinely too basic if you've been working in the space. Associate gives you AMBCI designation which is the meaningful credential for most enterprise risk roles.
The exam still heavily references GPG 2018 but the newer 2023 guidance is being phased in. I'd study the 2018 GPG as your primary reference and familiarize yourself with the headline changes in 2023, particularly around supply chain resilience and digital BC considerations. The examiner committee has been signaling those areas.
I went through the CBCI pathway last year while juggling a full-time ERM role and honestly the hardest part wasn't the content, it was carving out consistent study time. I'd do maybe 45 minutes on my lunch break and another hour or so after the kids were down. Took me about four months working like that. The GPG is dense but if you've already been living this stuff at work a lot of it clicks faster than you'd expect.
For resources, I leaned heavily on practice questions to figure out where my gaps were before touching the heavier material. The free bci business continuity management strategy questions were genuinely useful for this, especially around the strategy and embedding sections which tripped me up early on. You don't need to memorize the GPG cover to cover, just understand how the stages connect and why the methodology is structured the way it is. Good luck with it.
I went through the CBCI pathway last year while working full-time in BC planning, so the schedule pressure was real. I didn't do any formal training -- just bought the GPG 2018 edition and worked through it section by section over about four months, maybe 45 minutes a night after the kids were in bed. Weekends helped a lot when I could grab a couple of hours. The hardest part wasn't the material itself, it's staying consistent when work gets busy.
For someone coming from enterprise risk management you'll find the concepts aren't foreign at all -- it's more about learning the BCI's specific terminology and how they frame things within the GPG. The exam itself tests whether you can apply the practices, not just recite definitions. I'd say give yourself three to four months if you're studying part-time and actually have a day job that demands real focus. Don't underestimate the scenario-based questions; they tripped me up more than the straightforward knowledge ones did.
Failed my first attempt at the CBCI last year, so I can speak to this. I went in thinking my work experience would carry me through, but the GPG isn't just about what you've done on the job. It tests you on very specific terminology and the exact lifecycle stages, and I wasn't tight enough on those. I'd read through the guidelines but didn't really drill the structure.
Second time I actually mapped out each of the GPG elements and quizzed myself on definitions until they were automatic. Took me about three months of studying a few hours a week alongside a full-time job. If you've got solid BC experience already you might do it faster, but don't underestimate how precise the questions are. The near-miss context you mentioned is actually useful though — I found it easier to remember the testing and exercising components because I had real situations to anchor them to.
Honestly, I failed my first attempt and it stung. I'd done some light reading and figured my work experience would carry me through, but the exam goes deeper into the GPG framework than I expected — especially the organizational resilience and culture sections, which I basically skimmed. What changed the second time was actually drilling with practice tests rather than just re-reading the material. I found the bci bci organizational resilience culture 2 practice test really useful for that specific area because it forced me to think through the "why" behind each principle, not just recognize the terminology.
Give yourself more time than you think you need. I prepped for about three weeks the first round and it wasn't enough. Second attempt I did six weeks, focused on the areas I'd scored weakest, and passed comfortably. If you're already working in ERM you'll have good instincts but don't let that make you overconfident on the theory side like I did.
Honestly I almost bailed three weeks in. The GPG modules felt like drinking from a firehose and I wasn't retaining anything, so I just stopped for like two weeks and figured maybe this cert wasn't for me. What got me back was realizing I was trying to memorize instead of actually understand how the tiers connect to each other. Once I shifted to that it clicked pretty fast.
Took me about four months total but probably six weeks of that was dead time where I wasn't studying. If you're coming from an ERM background you'll find a lot of it familiar, it's really just BC-flavored risk thinking. The exam itself wasn't as brutal as the forums make it sound. Just don't skip the practice scenarios, that's where I kept catching gaps in my understanding.