Business continuity and disaster recovery procedures
A business continuity plan (BCP) is defined as laid down processes to prevent, mitigate, and recover from disruption. A disaster recovery plan (DRP) is a subset of the overall BCP. While the goal of BCP is to prevent and mitigate the incident, the goal of DRP is to restore operations if business operations are down due to an incident. Thus, BCP is a continuous process of implementing various controls to prevent or mitigate the impact of an incident, whereas disaster recovery is only activated when preventive measures have failed and business processes are impacted due to an incident.
Even if an organization has a well-defined BCP plan, it may face the situation depicted in the following figure:
Figure 11.1 – Business continuity plan
It is of utmost importance that BCP and DRP plans, as well as their documents, are available at an offsite location as well.
Phases of recovery planning
The...
