Once the strategies have been determined and any continuity risks have been addressed, the organisation should decide how it wishes to present the BCP.
The BCP should at a minimum cater to three sets of activities, which correlate to the three phases of an incident, as shown in figure below:
- Respond to an incident, emergency or disaster;
- Recover business-critical activities (this may include interim workarounds in the absence of essential technology);
- Resume normal working of all business operations from the temporary measures adopted during recovery.