Skip to content

Business continuity plan

Also known as BCP

The plan for keeping essential business functions running during and after a disruption.

Disaster recovery restores technology; business continuity keeps the business operating, including how people work while systems are unavailable and how the organization communicates.

It starts with a business impact analysis identifying which functions genuinely cannot pause and for how long, because trying to protect everything equally protects nothing well.

Where this comes up

Business continuity plan sits inside our compliance and frameworks work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.

Compliance services Ask an engineer

Related terms

Disaster recovery The process and capability for restoring IT systems after a major failure or destructive event. Recovery time objective The maximum time a system can be unavailable before the impact becomes unacceptable. Tabletop exercise A discussion-based rehearsal where a team walks through their response to a realistic scenario. Incident response plan The documented procedure for handling a security incident, including roles, decision authority, and contacts.

More in compliance and frameworks

Acceptable use policyAttestationAudit evidenceAudit logBreach notificationBusiness associate agreementCardholder dataCMMC

Back to the full glossary →

Want this explained against your own setup?

Definitions only get you so far. Book a short call and we will tell you whether this actually matters for your business, and what we would do about it.

Call (855) 737-9500 / (480) 573-3349

Email [email protected]

15-minute response on critical issues, 24/7. Onboarding in two to three weeks.

We reply within one business day. No spam, no pressure.