Instead of focusing on resuming a business after critical operations have ceased, or recovering after a disaster, a business continuity plan endeavors to ensure that critical operations continue to be available.September 11, 2001 demonstrated that although high impact, low probability events could occur, recovery is possible.
The impact of a disruption to a critical service or business product determines how long the organization could function without the service or product, and how long clients would accept its unavailability.
It will be necessary to determine the time period that a service or product could be unavailable before severe impact is felt.
Would fines or penalties from breaches of legal responsibilities, agreements, or governmental regulations be an issue, and if so, what are the penalties?
Estimates are required to determine the approximate cost of the loss of consumer and investor confidence, damage to reputation, loss of competitiveness, reduced market share, and violation of laws and regulations.
If a business function or process is inoperable, how long would it take before additional expenses would start to add up?
How long could the function be unavailable before extra personnel would have to be hired?
This publication provides a summary and general guidelines for business continuity planning (BCP).
While governments, not-for-profit institutions, and non-governmental organizations also deliver critical services, private organizations must continuously deliver products and services to satisfy shareholders and to survive.
A Disaster Recovery Plan deals with recovering Information Technology (IT) assets after a disastrous interruption.
Both imply a stoppage in critical operations and are reactive.
Business Continuity Planning is a proactive planning process that ensures critical services or products are delivered during a disruption.