Business Continuity Plan - BCP

A comprehensive plan outlining long-term strategies, policies, and procedures to ensure business operations continue after a disruptive event, detailing steps for various disaster scenarios.

in other words, how do we minimize the impact of a disaster so we can continue our business ?

DRP : Disaster Recovery Plan

Lists various disaster scenarios and the specific steps the organization must take to restore regular operations in each case.

Related Plans

COOP (Continuity of Operations Plan): Details how the organization will continue operating during a disaster.

Cyber Incident Response Plan: Details the response to cyber events.

OEP (Occupant Emergency Plan): Outlines how to protect facilities, staff, and the environment during a disaster such as fire drills.

BRP (Business Recovery Plan): Details steps to restore normal operations after a disruptive event.

Continuity of Support Plan: Focuses on maintaining support for specific IT systems and applications.

CMP (Crisis Management Plan): Provides coordination among management during an emergency or disruptive event.

Crisis Communications Plan: A subplan of the Crisis Management Plan, detailing how to communicate internally and externally during a disaster such as handling the press.

NOTE: YOU MUST UPDATE THE PLAN EVERY TIME YOU UPDATE YOUR INFRASTRUCTURE - MOSTLY UPDATED EVERY 12 MONTH

NIST 800-34 framework to build BCP/DRP

  1. Project Initiation: Start the BCP/DRP project.
  2. Scope the Project: Define project objectives and boundaries.
  3. Business Impact Analysis: Assess impact of disruptions.
  4. Identify Preventive Controls: Determine risk mitigation measures.
  5. Recovery Strategy: Develop strategies for recovery.
  6. Plan Design and Development: Create detailed recovery strategies, write plan components, ensure integration, and review for approval.