Home › Cybersecurity wiki › What is a business continuity plan?

Wiki

What is a business continuity plan?

Business continuity planning prepares an organization to keep essential work running during an outage and to restore normal service in a deliberate order.

The plan names priorities, people, and workarounds before the crisis, so the first hour is not spent inventing them under pressure.

How it works

A useful plan says which processes must survive, how long they can stand still, and which dependencies they need, including suppliers and key staff.
It also says who may decide, how they will communicate if the usual mail system is down, and where the current contact list lives.

A document that nobody has exercised is a hope, not a plan.
Short drills reveal missing access, outdated phone numbers, and recovery steps that only one person knows.

Concrete examples

  • During a ransomware outage, payroll still runs from a rehearsed manual path while file servers are rebuilt from clean copies.
  • A cloud region failure moves the customer portal to a secondary region because that switch was written down and practiced.
  • A supplier outage triggers a preagreed reduced service instead of an improvised promise the team cannot keep.

Protective measures

  • Name the processes that must continue, the maximum standstill you accept, and the owner for each one.
  • Write communication paths that do not depend on the same systems you may lose, and keep the contact list current.
  • Run at least one exercise a year that includes the people who would actually decide, not only the authors of the document.
  • Store the plan where incident leads can reach it when the office network is unavailable.