- CBCA from DRI International requires the audit course, a 100-question exam scored at 75% or higher, and a separate experience-based application.
- Passing the exam alone does not confer certification; DRI also reviews at least two years of qualifying experience from the past ten.
- The application needs five subject-matter essays and two validating references per subject area, which can be the same two people.
- Published course-plus-application cost is $3,350 ($2,950 course with first exam, plus $400 application), before renewal and any discounts.
CBCA Requirements 2026: What DRI Actually Asks of You
- The Two Gates: Passing the Exam vs. Earning the Credential
- The Mandatory Course Route
- Experience Requirements for the Certification Application
- Essays and References: How the Application Works
- Exam Facts You Need Before You Register
- What Qualifying Costs: The Fee Math
- What the Audit Course Expects You to Master
- Sequencing Your Qualification
- Keeping the Credential Once You Have It
- Frequently Asked Questions
Key Takeaways
- CBCA from DRI International requires the audit course, a 100-question exam scored at 75% or higher, and a separate experience-based application.
- Passing the exam alone does not confer certification; DRI also reviews at least two years of qualifying experience from the past ten.
- The application needs five subject-matter essays and two validating references per subject area, which can be the same two people.
- Published course-plus-application cost is $3,350 ($2,950 course with first exam, plus $400 application), before renewal and any discounts.
- Renewal means $225 annually plus 80 CEAPs per two-year period, so plan for ongoing obligations from day one.
Anyone researching the Certified Business Continuity Auditor credential quickly discovers that "requirements" means two different things. There is what you need to sit the examination, and there is what you need to be granted the designation. DRI International treats these as separate gates, and candidates who confuse them end up either overpaying for the wrong thing or stalling after an exam pass. This guide walks through both, using only what DRI publishes. If you are still orienting yourself, What Is CBCA Certification? covers the basics, and CBCA Meaning clarifies the acronym.
The Two Gates: Passing the Exam vs. Earning the Credential
The single most important fact about CBCA eligibility is this: passing the course examination alone does not confer professional certification. DRI also reviews an experience-based application. That means a candidate can satisfy gate one (course plus exam) without yet satisfying gate two (experience, essays, references).
| Gate | What It Involves | Who Evaluates It |
|---|---|---|
| Gate 1: Audit course and examination | Four-day Business Continuity Planning for Auditors course (BCLE AUD route), then a 100-question multiple-choice exam with a 75% minimum | DRI International, via its online examination process |
| Gate 2: Certification application | Two years of qualifying experience within ten years, five subject-matter essays, and validating references | DRI International application review |
The Mandatory Course Route
There is no exam-only shortcut. Completion of the Business Continuity Planning for Auditors course (the BCLE AUD route) is required before you can take the Audit Examination. DRI offers two versions: one built around ISO 22301 and one around NFPA 1600. Current US courses run four full instructional days and award 32 Continuing Education Activity Points (CEAPs).
The ISO route references ISO 22301:2019, and the DRI specialty-exam catalogue labels it the "2023 Audit Exam - ISO 22301." The NFPA route references NFPA 1600, 2019 edition. Choose based on the management-system standard your target employers or clients actually audit against. This article's preparation guidance focuses on the ISO 22301 route; coverage of the NFPA 1600 route is not established here.
One trap to avoid: DRI also offers a general qualifying examination for 2026. That is a different exam and must not be substituted for the audit examination. Registering for the wrong one wastes both money and time.
Experience Requirements for the Certification Application
To obtain the CBCA designation, DRI requires at least two years of significant practical experience in one or more of the following fields, accumulated within the preceding ten years:
- Business continuity
- Emergency or disaster management
- Audit
Notice what is absent. DRI's published materials do not list a degree requirement, and no fixed experience-hour threshold was found. The standard is "significant practical experience," which is evaluated through your application narrative rather than a timesheet total. That flexibility cuts both ways: it welcomes career-changers from internal audit or emergency management, but it puts weight on how well you document your work.
Certain existing professional designations qualify for reference or experience-section waivers. These are not blanket waivers. They do not excuse you from the audit course, the examination, or the CBCA experience requirement itself. If you hold another professional designation, confirm directly with DRI exactly which sections it relieves.
Essays and References: How the Application Works
This is the part of the process that surprises candidates most, so it deserves precision.
Application Components
The professional certification application asks for narrative evidence of your practice, not another test.
- Five subject-matter essays. These belong to the certification application, not the 100-question exam.
- Specified application areas. At least two essays must come from DRI's specified areas covering business impact analysis, continuity strategies, plan development and implementation, and exercise, test, assessment, and maintenance.
- Two validating references per subject area. The same two people can potentially serve across all five areas, which simplifies the process considerably if you have a supervisor and a peer who can speak broadly to your work.
A common misconception is that the course's hypothetical-company case study and practical auditing activities are a performance-based or essay exam. They are classroom exercises. The exam itself is multiple choice. Keep the two straight: essays live in the application; multiple-choice questions live in the exam.
Pick your references early. Because the same two validators can cover all five areas, choose people who have directly observed your continuity or audit work and who will respond promptly when DRI contacts them.
Exam Facts You Need Before You Register
| Item | What DRI Publishes |
|---|---|
| Question count | 100 multiple-choice questions |
| Time allowed | 2 hours 30 minutes |
| Passing score | At least 75% |
| Delivery | Online through DRI's own examination/account process |
| Retake fee | $250 |
| Public pass rate | Not disclosed in the official materials reviewed |
The 75% figure is the required individual score, not an observed pass rate. DRI does not publish cohort statistics, and training-provider marketing about general business-continuity pass rates is not a CBCA statistic. For a candid look at what is and is not known, see CBCA Pass Rate 2026: What the Data Shows and CBCA Passing Score 2026: Exactly What You Need to Pass.
Several rules are simply not verifiable from public sources: open-book versus closed-book status, calculator permissions, detailed remote-proctoring rules, and any permitted-reference list. Do not assume them. Confirm them inside your DRI account before exam day. Also note that DRI course and exam materials are confidential, so build practice questions from your own notes and understanding rather than reproducing course content.
What Qualifying Costs: The Fee Math
The published US figures make the arithmetic straightforward:
| Item | Amount |
|---|---|
| Course plus first exam (BCLE AUD, ISO 22301 or NFPA 1600) | $2,950 |
| Certification application | $400 |
| Training-plus-application subtotal | $3,350 |
| Annual renewal | $225 |
| Audit-exam retake | $250 |
The first exam attempt is included in the course price, not an additional $750. The $3,350 subtotal is calculated from the two published fees and excludes renewal, travel, taxes, and discounts. DRI's Continuity Audit FAQ advertises a 10% discount for NFPA and other professional-organization members, but it does not list all qualifying organizations or show a discounted checkout total, so treat both eligibility and the final amount as something to confirm with DRI. No separate member or nonmember exam-only price is published for this mandatory-course route. Our full breakdown is in CBCA Certification Cost 2026, and the return-on-investment question is covered in Is the CBCA Certification Worth It?
What the Audit Course Expects You to Master
DRI does not publish a weighted exam blueprint, and the official domain count and percentages are not publicly verified. What can be said is that DRI's current ISO 22301 audit-course outline contains substantive headings that make sensible preparation topics. Treat the list below as issuer-course preparation topics, not an official or exhaustive exam blueprint, and not as a ranking of importance. For deeper treatment, see CBCA Exam Domains 2026: Complete Guide to All 11 Content Areas.
Foundations: Auditing Basics and Understanding ISO 22301
You need fluency in audit fundamentals and in what the standard actually requires of a management system.
- How audits are planned, conducted, and reported
- The structure and intent of ISO 22301:2019
Context of the Organization; Leadership, Planning, Support, and Operation
These headings map to the management-system clauses an auditor tests for conformity.
- Understanding organizational context and interested parties
- Evidence of leadership commitment, planning, resourcing, and operational control
Risk Assessment and Business Impact Analysis (BIA)
Auditors must judge whether risk and impact work is sound, not merely present.
- Whether methods are consistent and outputs drive decisions
- How BIA results connect to recovery priorities
Continuity Strategies and Solutions; Business Continuity Plans
The question is whether strategies trace back to BIA findings and whether plans are usable.
- Traceability from analysis to strategy to plan
- Plan content, ownership, and activation criteria
Education and Training; Exercise Program
Evidence of competence and tested capability is central to an audit conclusion.
- Awareness and training records versus real competence
- Exercise schedules, outcomes, and corrective follow-up
Audit Findings, Recommendations, and Auditor's Opinion
This is where audit skill becomes judgment.
- Writing defensible findings tied to evidence
- Distinguishing nonconformities from improvement opportunities
- Forming and supporting an overall opinion
For a structured approach to working through these, see the CBCA Study Guide 2026, and keep the one-page CBCA Cheat Sheet handy for last-minute review. If you want to gauge difficulty before committing, read How Hard Is the CBCA Exam?
Sequencing Your Qualification
Because the exam is multiple choice and the application is narrative, the smartest approach is to run them in an order that keeps momentum. This is the only study-planning section in this guide, and it is tied to the CBCA structure rather than generic advice.
Application groundwork
- Inventory your continuity, emergency management, or audit work from the last ten years
- Identify two potential validating references who can cover multiple subject areas
- Draft rough outlines for essays on BIA, strategies, plan development, and exercising
Four instructional days
- Capture the hypothetical-company case study reasoning in your own words
- Note where audit evidence is expected for each management-system clause
Exam, then application
- Review the risk, BIA, and strategy topics where traceability errors are easiest to make
- Sit the exam through your DRI account using your course-specific booking instructions
- Finalize essays while course concepts are fresh, then submit with the $400 application fee
Practice with independently written questions instead of recalling course content, since DRI materials are confidential. The CBCA practice test site offers original practice material you can use to check your recall without touching confidential content.
Keeping the Credential Once You Have It
Qualification is not a one-time event. Maintaining CBCA involves two distinct obligations, and they run on different clocks:
- Annual fee: $225 per year
- Continuing education: 80 CEAPs over each two-year period
- Ethics: compliance with DRI's code of ethics
Do not describe it as an unconditional two-year credential. The financial maintenance is annual, while the CEAP requirement is measured across two years. One helpful detail: the audit course itself awards 32 CEAPs, so it contributes toward the continuing-education requirement for the period in which it is completed, subject to DRI's own crediting rules.
For the career side of the equation, including who hires for audit-focused continuity credentials, see CBCA Jobs and the CBCA Salary Guide. Candidates comparing training options can also review CBCA Training.
Frequently Asked Questions
No degree requirement was found in DRI's published materials. The eligibility standard is at least two years of significant practical experience in business continuity, emergency or disaster management, and/or audit within the preceding ten years, documented through the certification application.
No. Completing the Business Continuity Planning for Auditors course (the BCLE AUD route) is required before the Audit Examination. The course can be taken without a previous DRI certification, and your first exam attempt is included in the $2,950 course price.
Not yet. Passing the course examination alone does not confer professional certification. DRI also reviews your experience-based application, which includes five subject-matter essays and validating references, and charges a separate $400 application fee.
You need two validating references per subject area, and DRI's materials indicate the same two people can potentially serve across all five areas. Choose people who have directly seen your continuity or audit work. Confirm any specific reference rules with DRI before submitting.
An audit-exam retake is $250. The passing standard is at least 75% on the 100-question exam, and DRI does not publish a pass rate, so there is no official cohort figure to benchmark against. Check your DRI account for any retake timing rules.
Meeting the CBCA requirements is less about clearing a single hurdle and more about aligning three things: the right course route, an exam you can pass at 75% or better, and an application that documents real experience. Start with your experience inventory and reference list, since those take the longest to assemble, and confirm current fees and scheduling directly with DRI before you pay. When you are ready to test your recall, the CBCA Exam Prep practice tests are a good next step.