The first step is to identify the assets and processes that are critical to the business, some may have been identified during recent risk assessment exercises.
-Which roles and individuals are vital for fulfilling business commitments?
-What equipment, IT, transport etc will staff need to maintain operations?
-How long can the business function before full operations are restored?
-What alternative resources are available?
-Which departments are vital for fulfilling orders and contractual obligations?
-Which suppliers and other third parties are integral to daily routines?
-Are alternative premises available if required and where?
-Where are up to date copies of the BCP located?
The BCP should then present all the steps that staff are expected to follow in the aftermath of an incident in order to maintain essential operations and return to ‘business as usual’ as soon as possible.
The structure and detail of the BCP will vary from business to business and from location to location but, in general, should include: