Business Continuity Plan
Plan Scope and Assumptions
[Business units, locations, disruption scenarios, assumptions, plan owner, and linked crisis plan.]
Critical Services and Impact Tolerance
[Service, owner, maximum tolerable downtime, impact of outage, minimum staffing, and priority.]
People, Facilities, and Communications
[Key roles, alternates, safe workspace, welfare, communication channels, and accessibility needs.]
Technology, Data, and Supplier Dependencies
[Applications, data, infrastructure, suppliers, dependencies, RTO, RPO, and single points of failure.]
Recovery Objectives and Priority Sequence
[Recovery order, decision gates, resource constraints, customer commitments, and executive approvals.]
Workarounds and Manual Operations
[Manual or alternate process, forms, capacity, control checks, reconciliation, and expiry.]
Activation, Command, and Escalation
[Activation trigger, continuity lead, authority, bridge, status cadence, and escalation thresholds.]
Recovery Procedures and Validation
[Restore steps, test evidence, business validation, security checks, and go/no-go approver.]
Return to Normal and After-Action Review
[Exit criteria, backlog reconciliation, customer communication, cost capture, and improvement owner.]
Exercise Schedule and Ownership
[Scenario, exercise date, participants, findings, corrective-action due dates, and review cadence.]
Measurement and Ownership
| Measure or deliverable | Baseline or input | Target or acceptance condition | Source | Owner | Review date |
|---|---|---|---|---|---|
| [business continuity] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |
| [maximum tolerable downtime] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |
| [RTO] | [Current state] | [Target or acceptance condition] | [System or evidence source] | [Accountable role] | [Date] |