BCP Introduction

So what is a Business Continuity Plan? (BC risk management programme concentrates on the
designing, implementing and maintaining strategies that help to minimise of the likelihood of a
disruptive event also strategies that ensure an efficient response to the disruptive event and the
recovery of the central operations.

As per ISO 22301 it is about documenting planned procedures in case of any business
disruption occurred
According to ISO 22301, business continuity plan is defined as documented procedures that
guide organizations to respond, recover, resume, and restore to a pre-defined level of
operation following disruption. (clause 3.5)
What is RTO
o
o

Recovery Time Objective: How quickly you need to recover?

Predefined time the IT requires to recover all critical systems within this period back
to functional.(for example databases, servers etc..) this may not be ready for
production this time.

What is RPO
o

Recovery Point Objective: The maximum tolerable period in which data the
organization is willing to lose. (RPO is determined by looking at the time
between data backups and the amount of data that could be lost in between
backups.)

As part of business continuity planning, you need to figure out how long you can
afford to operate without that data before the business suffers.
Can we lose data re-enter to recover?