Business · template
Business continuity plan (BCP)
A BCP keeps your essential activities running despite losing premises, staff, systems or suppliers. It builds on an impact analysis (BIA) and the ISO 22301 standard. Start small, on 2–3 critical activities.
1 · Impact analysis (essential activities)
- List activities that cannot stop
- For each: maximum downtime (RTO) and acceptable data loss (RPO)
- Identify dependencies (people, IT, suppliers)
ExampleOne line of the impact analysis
Activity: client invoicing.
RTO: 24 h · RPO: 4 h.
Depends on: accounting software, 2 key people, internet access.
Fallback: manual entry + remote work.
2 · Critical resources
- Key people and scarce skills (plan deputies)
- Vital systems and data
- Essential premises, equipment and suppliers
3 · Scenarios & fallback
- Loss of premises → remote work / backup site
- IT outage or cyberattack → degraded procedures + offline backups
- Staff absence (epidemic) → cross-skilling, subcontracting
- Supplier failure → dual sourcing
4 · Governance & testing
- Appoint a BCP owner and a crisis team
- Share quick-reference sheets with staff
- Test the plan at least once a year and keep it updated
💡A BCP is never « finished »: it lives with the company. A simple, tested plan beats a perfect one never opened.
ℹ️This sheet is a preparedness aid. It does not replace official instructions; in immediate danger, call 112.