Design BCP

Once the strategies have been determined and any continuity risks have been addressed, the organisation should decide how it wishes to present the BCP.

The BCP should at a minimum cater to three sets of activities, which correlate to the three phases of an incident, as shown in figure below:

• Respond to an incident, emergency or disaster;
• Recover business-critical activities (this may include interim workarounds in the absence of essential technology);
• Resume normal working of all business operations from the temporary measures adopted during recovery.