Business Continuity Planning (BCP)

To finish this chapter, we will cover details on the importance of having a business continuity plan in addition to a couple of the sub-plans as it relates to cybersecurity and your infrastructure. The two additional plans are the Disaster Recovery Plan (DRP) and the Cybersecurity Incident Response Plan (CIRP). When we look at the Business Continuity Plan (BCP), it is considered a business-wide plan that focuses on the business as a whole to ensure continued operations in the wake of a major disruption. Within the BCP, multiple plans come together that comprise the overall plan, and there are many frameworks available to assist with the BCP program. The SP 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems NIST framework publication is a great resource for your BCP and can be found at https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final. The following image from NIST SP 800-34 Rev. 1 represents all the plans covered...