The Business Continuity Plan may be written for a specific business process or
may address all mission-critical business processes. The BCP is an umbrella
plan whose major sub-components include the Disaster Recovery Plan.
Information systems are considered in the BCP only in terms of their support of
those business processes. A Business Continuity Plan (BCP) consists of the
following component plans:
- Business Resumption Plan
- Occupant Emergency Plan
- Incident Management Plan
- Continuity of Operations Plan
- Disaster Recovery Plan
The Business Resumption Plan, Occupant Emergency Plan, and Continuity of
Operations Plan do not deal with the Information Technology (IT) Infrastructure.
The Incident Management Plan (IMP), which does deal with the IT infrastructure,
establishes structure and procedures to address cyber attacks against an
organization’s IT systems and generally does not involve activation of the
Disaster Recovery Plan.