A business continuity plan (BCP) establishes procedures for maintaining or recovering critical operations during and after a disruptive incident.
The BCP is the operational component of the BCMS (ISO 22301). It defines roles, activation procedures, recovery strategies and resources needed to maintain critical activities within target times (RTO and RPO). It must be periodically tested through exercises and drills.
BCP covers continuity of all critical activities. DRP is a subset focused on IT system recovery.
At least annually or when significant changes occur in processes, technology or risk context.
Need an assessment in this area?