What is a Business Continuity Plan?

A Business Continuity Plan (BCP) is a detailed document that outlines how an organization will continue to operate through an unplanned disruption in service. The BCP is not just a regulatory requirement within many industries, but should be considered as a guide to reduce the time it takes for operations to return to normal. It plays a critical role in an organization’s Operational Resilience.

Inability to react swiftly to sudden disruption such as a cyberattack could result in a loss of revenue, impacted data integrity, reputational damage, litigation, and potential punitive action from regulatory bodies.

What is included in a Business Continuity Plan?

The list of items that should be contained within a BCP include, but are not limited to, the following:

• Identification and analysis of critical business functions across your organization. These functions should be prioritized based on their importance to the business.

• The risks to these business functions, detailed and considered depending on their severity. Total risk tolerance and appetite as a business should also be considered, so that decision makers can better categorize the risks that fall outside of a pre-agreed risk tolerance range.

• Strategies and mitigation actions that help protect critical business functions.

• Evidence of strategic testing across critical functions using key metrics.

• Evidence of testing stressed exit and non-stressed exit plans for all important third-party outsourcing arrangements to ensure impact stays within pre-agreed risk tolerances.

• Report and dashboard details, to allow the BCP to be updated over time based on data.

Teradata take on Business Continuity Planning

Businesses must shift their thinking to future-proof their organization. Threats to the business can come from a variety of sources, and may not even be the result of a direct attack. Hybrid and multi-cloud infrastructure can help increase resilience by introducing agility, flexibility and choice to critical infrastructure decisions.