An official website of the United States government
Here’s how you know
Official websites use .gov A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS A lock ( Lock A locked padlock ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
IT Disaster Recovery Plan
Businesses use information technology to quickly and effectively process information. Employees use electronic mail and Voice Over Internet Protocol (VOIP) telephone systems to communicate. Electronic data interchange (EDI) is used to transmit data including orders and payments from one company to another. Servers process information and store large amounts of data. Desktop computers, laptops and wireless devices are used by employees to create, process, manage and communicate information. What do you when your information technology stops working?
An information technology disaster recovery plan (IT DRP) should be developed in conjunction with the business continuity plan . Priorities and recovery time objectives for information technology should be developed during the business impact analysis . Technology recovery strategies should be developed to restore hardware, applications and data in time to meet the needs of the business recovery.
Businesses large and small create and manage large volumes of electronic information or data. Much of that data is important. Some data is vital to the survival and continued operation of the business. The impact of data loss or corruption from hardware failure, human error, hacking or malware could be significant. A plan for data backup and restoration of electronic information is essential.
Resources for Information Technology Disaster Recovery Planning
- Computer Security Resource Center - National Institute of Standards and Technology (NIST), Computer Security Division Special Publications
- Contingency Planning Guide for Federal Information Systems - NIST Special Publication 800-34 Rev. 1
- Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities – NIST Special Publication 800-84
- Building An Information Technology Security Awareness and Training Program - NIST Special Publication 800-50
IT Recovery Strategies
Recovery strategies should be developed for Information technology (IT) systems, applications and data. This includes networks, servers, desktops, laptops, wireless devices, data and connectivity. Priorities for IT recovery should be consistent with the priorities for recovery of business functions and processes that were developed during the business impact analysis . IT resources required to support time-sensitive business functions and processes should also be identified. The recovery time for an IT resource should match the recovery time objective for the business function or process that depends on the IT resource.
Information technology systems require hardware, software, data and connectivity. Without one component of the “system,” the system may not run. Therefore, recovery strategies should be developed to anticipate the loss of one or more of the following system components:
- Computer room environment (secure computer room with climate control, conditioned and backup power supply, etc.)
- Hardware (networks, servers, desktop and laptop computers, wireless devices and peripherals)
- Connectivity to a service provider (fiber, cable, wireless, etc.)
- Software applications (electronic data interchange, electronic mail, enterprise resource management, office productivity, etc.)
- Data and restoration
Some business applications cannot tolerate any downtime. They utilize dual data centers capable of handling all data processing needs, which run in parallel with data mirrored or synchronized between the two centers. This is a very expensive solution that only larger companies can afford. However, there are other solutions available for small to medium sized businesses with critical business applications and data to protect.
Internal Recovery Strategies
Many businesses have access to more than one facility. Hardware at an alternate facility can be configured to run similar hardware and software applications when needed. Assuming data is backed up off-site or data is mirrored between the two sites, data can be restored at the alternate site and processing can continue.
Vendor Supported Recovery Strategies
There are vendors that can provide “hot sites” for IT disaster recovery. These sites are fully configured data centers with commonly used hardware and software products. Subscribers may provide unique equipment or software either at the time of disaster or store it at the hot site ready for use.
Data streams, data security services and applications can be hosted and managed by vendors. This information can be accessed at the primary business site or any alternate site using a web browser. If an outage is detected at the client site by the vendor, the vendor automatically holds data until the client’s system is restored. These vendors can also provide data filtering and detection of malware threats, which enhance cyber security.
Developing an IT Disaster Recovery Plan
Businesses should develop an IT disaster recovery plan. It begins by compiling an inventory of hardware (e.g. servers, desktops, laptops and wireless devices), software applications and data. The plan should include a strategy to ensure that all critical information is backed up.
Identify critical software applications and data and the hardware required to run them. Using standardized hardware will help to replicate and reimage new hardware. Ensure that copies of program software are available to enable re-installation on replacement equipment. Prioritize hardware and software restoration.
Document the IT disaster recovery plan as part of the business continuity plan . Test the plan periodically to make sure that it works.
Data Backup
Businesses generate large amounts of data and data files are changing throughout the workday. Data can be lost, corrupted, compromised or stolen through hardware failure, human error, hacking and malware. Loss or corruption of data could result in significant business disruption.
Data backup and recovery should be an integral part of the business continuity plan and information technology disaster recovery plan. Developing a data backup strategy begins with identifying what data to backup, selecting and implementing hardware and software backup procedures, scheduling and conducting backups and periodically validating that data has been accurately backed up.
Developing the Data Backup Plan
Identify data on network servers, desktop computers, laptop computers and wireless devices that needs to be backed up along with other hard copy records and information. The plan should include regularly scheduled backups from wireless devices, laptop computers and desktop computers to a network server. Data on the server can then be backed up. Backing up hard copy vital records can be accomplished by scanning paper records into digital formats and allowing them to be backed up along with other digital data.
Options for Data Backup
Tapes, cartridges and large capacity USB drives with integrated data backup software are effective means for businesses to backup data. The frequency of backups, security of the backups and secure off-site storage should be addressed in the plan. Backups should be stored with the same level of security as the original data.
Many vendors offer online data backup services including storage in the “cloud”. This is a cost-effective solution for businesses with an internet connection. Software installed on the client server or computer is automatically backed up.
Data should be backed up as frequently as necessary to ensure that, if data is lost, it is not unacceptable to the business. The business impact analysis should evaluate the potential for lost data and define the “recovery point objective.” Data restoration times should be confirmed and compared with the IT and business function recovery time objectives.
Last Updated: 02/17/2021
Return to top
- Business Continuity Plan
Business Continuity Plan Template
Prepare for business disruption and disaster recovery.
Published 15 Feb 2023
What is a Business Continuity Plan Template?
A Business Continuity Plan (BCP) template is a tool used by business continuity managers and IT teams to outline strategies for keeping businesses operational despite emergencies such as extreme weather events, building evacuations, power outages, etc. It identifies high business impact operational areas, assets, and recovery strategies with assigned personnel.
Download Free Template
Use this Business Continuity Plan (BCP) template as an outline for your business continuity plan that will critically assess all aspects of the business and make sure the emergency procedures and equipment are adequate. This business continuity template can help with ISO 22301 compliance and allow business continuity managers and consultants to:
- Identify key business functions and components to be prioritized for restoration and recovery during an emergency.
- Add list of processes/equipment most at risk of disrupting business operations.
- Discuss roles and responsibilities of key personnel and gather confirmation (digital signatures).
Click on the Web or PDF report below to view the business continuity plan example.
- Preview Sample Digital Report
- Preview Sample PDF Report
Business continuity templates can be used in any industry for IT disaster recovery, continuity of customer-facing operations, and backup of transport & logistics operations.
In this article
7 elements of business continuity planning, components of a bcp template with examples, faqs about bcp, how do you write a business continuity plan with safetyculture (formerly iauditor), featured business continuity plan templates.
When the COVID-19 pandemic hit the world, the economy took a massive hit. The need for a business continuity plan became more apparent to organizations. Business continuity planning enables businesses, small or large, to build a more resilient operation.
A Business Continuity Plan should include:
1. BCP Team
In the midst of a disaster or emergency, having a team or point person to go to will be essential. The BCP team will be responsible for planning and testing business continuity strategies. Background of each member in the BCP team can vary from organization managers or supervisors to specialists.
2. Business Impact Analysis
A business impact analysis (BIA) identifies, quantifies, and qualifies the impact of a loss, interruption, or disruption. Having a BIA will be essential in discovering risks that your business is exposed to and the potential disruptions that may occur.
3. Risk Mitigation
This element pertains to the strategies against the risks that were discovered during the BIA. Risk mitigation strategies may include putting up security and safety systems in the workplace, conducting preventive maintenance of vehicles, machines, equipment, or any asset vital to operations, and training of employees, among others.
4. Business Continuity Strategies
A good business continuity plan should establish strategies or alternate practices to keep the business running despite disruptions or disasters. An example of a continuity strategy that a lot of businesses had to implement during the pandemic was remote working or work-from-home. This enabled businesses to continue their operations and keep their employees safe from contracting COVID-19 in the workplace.
5. Business Continuity Plan
The business continuity plan is a combination of findings from the performed BIA and the recovery strategies established by the organization. A BCP plan typically includes 4 key components: scope & objectives, operations at risk, recovery strategy, and roles and responsibilities.
6. Training
All relevant personnel associated with the business continuity, disaster recovery, and incident response process should be trained according to the BCP plan that’s established and agreed upon.
In the testing phase, strategies and plans are being rehearsed or exercised to demonstrate its effectiveness. Testing the plan before rolling it out will enable the BCP team to discover potential flaws and fix them before they lead to damage or injury. It is recommended to review and test the plan periodically to ensure that all protocols and strategies are up-to-date.
Business Continuity Plan Template | Preview Sample PDF Report
BCP serves as a guide for organizations on creating an effective strategy for responding to potential business-disrupting events. Here are four key components of a BCP:
Scope & Objectives
States the purpose of the BCP, including specific business functions that should be prioritized for recovery during an emergency. This section should include examples of emergency events that would trigger the response of this BCP.
This BCP is to ensure the continuity of IT services and customer lines in the event of an unforeseen and prolonged power shutdown. Power disruption could be caused by emergency weather conditions or a building fire. Functional areas that are prioritized for recovery in this BCP include the customer support desk and finance team.
Operations at Risk
Includes possible risks with key operational functions which would greatly disrupt business and customer continuity. This also involves the magnitude of risk to each function, which will help the BCP committee decide on appropriate preventive actions.
Operation: Customer Support Operation Description: Customer support team looking after 24-hour global operations of live chat and customer calls for US, EMEA and APAC regions Business Impact: Critical Impact description: 100% of live chats go through the customer support team in Manila. 20% of live calls are routed to Manila office. A disruption would mean no more live chat support and customers experiencing significant wait times on calls Project timeline and team schedules
Recovery Strategy
Outlines all the relevant procedures to restore business operations after an incident or crisis. A good recovery strategy includes a realistic recovery timeline and essential emergency resources.
IT personnel and BCP committees should operate alternate backup programs and servers to help save customer requests after power outage. Customer support should be able to receive the requests and respond to customers within 30 minutes. IT Director should operate alternate server rooms in Area B if the power outage last more than an hour to prevent huge revenue loss.
Roles & Responsibilities
Refers to key personnel and their assigned tasks during or after an incident. Each committee member has a unique set of responsibilities to successfully carry out the BCP for each business function.
Representative: Jon Sims Role: Head of Operations Contact Details: [email protected] Description of Responsibilities: 1. Must ensure BCPs are updated and must coordinate with team leaders regarding changes 2. Helps notify key stakeholders in EMEA region of threats in Customer Support programs & tools
Business Continuity Planning (BCP) is important because it helps organizations protect their business amid a crisis or emergency. A business continuity plan contains instructions that will serve as a guide for the organization to maintain their operations.
A business continuity plan should be tested at least every 6 months to verify the BCP’s effectiveness. Frequent testing can also allow the discovery of gaps, and potential issues. This will help the organization update protocols and strategies accordingly.
BCP documents should be updated regularly. If any organizational changes have been made in terms of team structures and operational procedures, the BCP should be updated. A review will be conducted to check if information in the BCP is still reliable. .
Outdated BCPs might result in loss of customer trust, huge revenue loss, and damage to brand and company reputation. This is why it is crucial for BCPs to remain up-to-date.
Regular BCP audits are essential to help evaluate emergency procedures and identify if there are vulnerabilities. They also help realign emergency procedures to the ISO 22301 standard, business goals, and industry practices. Up-to-date and efficient BCPs help businesses effectively manage any unexpected event, prevent extra costs, and continuously develop their overall processes and key functions. Using a business continuity plan checklist can aid business continuity managers and IT teams to ensure comprehensive BCP audit reports.
SafetyCulture , the world’s leading digital form mobile software, can help businesses create and prepare a good business continuity plan more efficiently. Paper-based business continuity plan templates and Excel spreadsheets can be troublesome for management to keep and regularly update. With SafetyCulture as a business continuity software , businesses can switch to a paperless planning process where you can create your own templates, easily assess the accuracy of recovery procedures, and update your plans as needed in your mobile device. With SafetyCulture, you can:
- Create and customize business continuity plans using your desktop, iPad, or even on your mobile phone
- Easily assign tasks to key personnel and BCP committee members
- Use speech to text dictation to easily complete audits
- Gather photographic evidence in your BCP drills
- Record electronic signatures as required
- Send and share an updated business continuity plan report to your team in a few taps. See sample business continuity plan PDF report here .
- Automatically save your BCPs in the cloud
To help you get started on your paperless planning, we have created the business continuity templates and checklists you can download and customize for free.
Business Continuity and Disaster Recovery Plan Template (IT)
A business continuity and disaster recovery plan template is used to identify business functions at risk during an emergency and come up with a plan for continuous operation and recovery. This business continuity and disaster recovery plan template aims to help IT teams and business continuity managers become proactive in preparing for events that could disrupt operations and come up with strategies for disaster recovery. This template empowers you to:
- Specify and prioritize IT functions for recovery during a disaster.
- Describe IT equipment/ systems at risk in disrupting normal operations and essential backup programs needed for recovery.
- Confirm assigned tasks with IT team members through their digital signatures.
Business Continuity Plan Checklist
Perform regular audits of your organization’s BCP with a business continuity plan checklist. Whether small or medium business, this checklist can be used to ensure BCPs are up to date and reflect current high impact operations. Review key operational functions outlined in the BCP including recovery strategies and relevant assigned resources. SafetyCulture (iAuditor) BCP templates can be edited to fit the organization’s needs.
- Download PDF Report
Business Continuity Awareness Checklist
This template highlights the importance of employee awareness and employee knowledge of business continuity plans and business continuity processes. As a business continuity process template, this document helps:
- Gauge the level of understanding employees have regarding BCP processes.
- Determine opportunities how to better acclimate teams to internal business continuity plans.
- Identify the need for continuous improvement of business continuity programs.
SafetyCulture staff writer
Erick Brent Francisco
Erick Brent Francisco is a content writer and researcher for SafetyCulture since 2018. As a content specialist, he is interested in learning and sharing how technology can improve work processes and workplace safety. His experience in logistics, banking and financial services, and retail helps enrich the quality of information in his articles.
Explore more templates
A business continuity and disaster recovery plan template is used to identify business functions at risk during an emergency and…
Download free Read more
Perform regular audits of your organization’s BCP with a business continuity plan checklist. Whether small or medium business, this checklist…
This template highlights the importance of employee awareness and employee knowledge of business continuity plans and business continuity processes. As…
Related pages
- Food Hygiene Inspection Checklist
- Environmental Audit Checklist
- Privacy Impact Assessment Template
- Product Specification Template
- Post Construction Cleaning Checklist
- Asset Tracking Software
- Task Management Software
- Lone Worker Safety Devices
- Farm Equipment Maintenance Software
- MRO Software
We use cookies to provide necessary website functionality and improve your experience. To find out more, read our updated Privacy Policy .
IMAGES
VIDEO
COMMENTS
organization’s cyber incident response, business and board crisis management procedures when faced with a cyber focused disruption scenario. Business Continuity KPMG designs and delivers end-to-end business continuity, IT Disaster Recovery and resilience services, with targeted review and assessment of existing capabilities to
plan. In summary, the disaster recovery plan should (1) identify and classify the threats/risks that may lead to disasters, (2) define the resources and processes that ensure business continuity during the disaster, and (3) define the reconstitution mechanism to get the business back to normal from the disaster recovery state, after the effects ...
This disaster response and recovery plan is based on the following assumptions: Once an incident covered by this plan has been declared a disaster, the appropriate priority will be given to the recovery effort and the resources and support required as outlined in the IT Disaster Recovery Plan will be available.
Businesses should develop an IT disaster recovery plan. It begins by compiling an inventory of hardware (e.g. servers, desktops, laptops and wireless devices), software applications and data. The plan should include a strategy to ensure that all critical information is backed up.
An IT disaster recovery plan is the lynchpin of an overall business continuity strategy. And the purpose of business continuity is to maintain a minimum level of service while restoring the organization to business as usual. If a business fails to put a disaster recovery plan in place then, when disaster strikes, the company risks losing customers
This business continuity and disaster recovery plan template aims to help IT teams and business continuity managers become proactive in preparing for events that could disrupt operations and come up with strategies for disaster recovery. This template empowers you to: Specify and prioritize IT functions for recovery during a disaster.
Business Continuity/Disaster Recovery Plan VERSION: 1.0 Plan last edited on April 11, 2019 at 9:38 AM I. DOCUMENT REVISION CONTROL – ANNUAL REVIEW Annually, the Department of Social Services (DSS) will review this Business Continuity/Disaster Recovery Plan and make any required updates or changes.
Governance and assurance of F5’sBusiness Continuity Management Program is overseen by F5’s Senior Director of Business Continuity and a Business Continuity Manager. Per policy the Incident Response Plan, Business Impact Assessment, BC Plan, and IT DR plans are updated annually or within 60 days of a material change to business operations.
Business Continuity and Disaster Recovery Plan Revision Date: February 14, 2014 1 Introduction The Senior Management of YOUR COMPANY (hereinafter referred to as the Organization) recognize the need to protect employees during an emergency and to have detailed recovery plans to provide for the continuity of operations of the