Although they differ in goals and functions, BCP can be applied by all organizations.
A Business Resumption Plan describes how to resume business after a disruption.
Business Continuity Planning is a proactive planning process that ensures critical services or products are delivered during a disruption.
A Business Continuity Plan includes: Having a BCP enhances an organization's image with employees, shareholders and customers by demonstrating a proactive attitude.
Instead of focusing on resuming a business after critical operations have ceased, or recovering after a disaster, a business continuity plan endeavors to ensure that critical operations continue to be available.
September 11, 2001 demonstrated that although high impact, low probability events could occur, recovery is possible.A BCP includes both risk evaluation, management and control and effective plans, measures and arrangements for business continuity.Continuous risk management lowers the risk of disruption and assesses the potential impacts of disruptions when they occur.Once the critical services or products are identified, they must be prioritized based on minimum acceptable delivery levels and the maximum period of time the service can be down before severe damage to the organization results.To determine the ranking of critical services, information is required to determine impact of a disruption to service delivery, loss of revenue, additional expenses and intangible losses.If so, how much revenue, and for what length of time?If clients cannot access certain services or products would they then to go to another provider, resulting in further loss of revenue?Even though buildings were destroyed and blocks of Manhattan were affected, businesses and institutions with good continuity plans survived.The lessons learned include: Continuous Service Delivery Assurance (CSDA) is a commitment to continuous delivery of critical services that avoids immediate severe disruption to an organization.This step determines what goods or services it must be delivered.Information can be obtained from the mission statement of the organization, and legal requirements for delivering specific services and products.