Business Continuity Planning

This chapter explores the concepts behind business continuity planning (BCP). It introduces some of the critical elements one should consider when compiling documentation of the organization's business continuity plan. The impact analysis is one of the most critical portions of the business impact analysis. From a quantitative point of view, the chapter covers three specific metrics: the exposure factor, the single loss expectancy, and the annualized loss expectancy. The strategy development phase bridges the gap between the business impact analysis and the continuity planning phases of BCP development. Documentation is a critical step in the business continuity planning process. The risk acceptance/mitigation section of the BCP documentation contains the outcome of the strategy development portion of the BCP process. The emergency response guidelines outline the organizational and individual responsibilities for immediate response to an emergency. The business continuity plan must also contain statements of importance, priorities, organizational responsibility, and timing.