🛡️Business Continuity

NEW

Also known as: Business Continuity Planning, BCP

The capability to sustain critical services at acceptable levels during and after disruptive incidents.

DESCRIPTION

Business continuity ensures essential processes continue despite disruptions such as outages, cyber incidents, or disasters. It encompasses risk assessment, impact analysis, continuity strategies, plan development, testing, and continuous improvement. Key parameters include Recovery Time Objective (RTO) and Recovery Point Objective (RPO), supported by redundancy, backups, and failover. While disaster recovery focuses on IT restoration, business continuity spans people, facilities, suppliers, and communications. Regular exercises validate readiness and refine playbooks.

ALTERNATIVE DEFINITIONS

ISO 22301

Business continuity is the capability of an organization to continue the delivery of products and services at acceptable predefined levels following a disruptive incident.

International standard definition emphasizing acceptable predefined levels.

Source

Ready.gov (DHS)

Business continuity planning (BCP) is the process of creating systems of prevention and recovery to deal with potential threats to a company.

Process-centric view linking prevention and recovery actions.

Source

Wikipedia

Business continuity planning is the process of creating systems of prevention and recovery to deal with potential threats to a company.

General overview of goals, scope, and activities of BCP.

Source

RELATED TERMS

Incident Response Recovery Time Objective Recovery Point Objective Risk Management High Availability Backup and Restore Crisis Management ISO 22301 Resilience

COMPETING TERMS

Disaster Recovery

RELATIONS

• Broader: Resilience

KNOWLEDGE AREAS

Data Security Infrastructure Data Management Observability & Telemetry

TARGET AUDIENCE

IT Manager Chief Information Security Officer Security Architect Cloud Architect Enterprise Architect IT Auditor DevOps Engineer Chief Information Officer

EXTERNAL SOURCES

• Wikipedia - Business continuity planning
• ISO - ISO 22301 overview and scope
• NIST - Federal IT contingency planning guide
• Ready.gov - Practical BCP steps and templates

TOP QUESTIONS

How does Business Continuity differ from Disaster Recovery?

Disaster recovery focuses on IT systems restoration; business continuity covers the whole organization to maintain critical services.

Category: Misunderstanding

What are RTO and RPO in Business Continuity?

RTO is the maximum acceptable downtime; RPO is the maximum acceptable data loss measured in time.

Category: Explanation

What is the biggest risk in Business Continuity planning?

Unvalidated assumptions. Lack of testing leads to plan failures under real stress.

Category: Risk

How often should Business Continuity plans be tested?

At least annually with tabletop exercises and technical failovers; more frequently for critical services.

Category: Management

What is a common mistake in Business Continuity?

Treating it as an IT-only exercise, ignoring people, facilities, suppliers, and communications.

Category: Mistakes

Why is Business Continuity critical for data platforms?

Ensures analytics, reporting, and operational data pipelines remain available to run the business.

Category: Relevancy

How do cloud architectures support Business Continuity?

Multi-AZ/region deployments, automated backups, and managed failover improve resilience and recovery speed.

Category: Example

What metrics demonstrate Business Continuity readiness?

Successful failover tests, recovery times vs RTO, data loss vs RPO, and incident response MTTR.

Category: Example

How do you prioritize processes in Business Continuity?

Business impact analysis identifies critical services and maps dependencies to set recovery priorities.

Category: Requirements