📋 Business Continuity Plan

Business Continuity Planning That Keeps You Operating Through Any Crisis

WynITSoul develops ISO 22301-aligned BCPs tailored to your organisation — so your teams know exactly what to do when disaster strikes, before the panic sets in.

✓ ISO 22301 Aligned
✓ NIST SP 800-34
✓ 72h Disruption Coverage
✓ 100% Staff Role Coverage
Business ContinuityISO 22301NIST SP 800-34Business Impact AnalysisRisk AssessmentCrisis Response72h CoverageBCP TestingTabletop Exercises6-Week Delivery Business ContinuityISO 22301NIST SP 800-34Business Impact AnalysisRisk AssessmentCrisis Response72h CoverageBCP TestingTabletop Exercises6-Week Delivery
ISO 22301BCM Standard
Alignment included
NIST SP800-34
Contingency Planning
72hMax Disruption
Coverage window
100%Staff Coverage
Every role defined
BCP COMPONENTS

What Your BCP Will Cover

A comprehensive BCP is more than a document — it's a complete organisational resilience framework.

🔍

Business Impact Analysis

Identify every critical business function, its dependencies, and the financial and operational impact of disruption at varying time durations.

⚠️

Risk & Threat Assessment

Systematic identification of threats — cyber attacks, natural disasters, supply chain disruption, pandemics, utility failures — and their likelihood.

📋

Recovery Strategy Design

Specific recovery strategies for each critical function — alternate work sites, manual workarounds, vendor agreements, and IT fallback procedures.

👥

Crisis Response Team

Defined crisis management team with clear roles, communication trees, escalation procedures, and decision-making authority during a disaster.

📞

Communication Plans

Internal staff comms, external customer/partner notifications, media response templates, and regulatory notification procedures — all pre-written.

🔄

Plan Maintenance & Review

Quarterly review cycles, post-incident lessons learned updates, and annual full BCP exercises to keep the plan current, tested, and effective.

OUR PROCESS

Your BCP in 6 Weeks — From Kickoff to Sign-Off

A structured engagement that delivers a complete, tested, ISO 22301-aligned BCP on a fixed timeline.

🔍
Week 1

Kickoff & BIA

Stakeholder interviews, process mapping, and Business Impact Analysis to identify critical functions, MTTDs, and maximum tolerable periods of disruption.

⏱ Week 1
⚠️
Week 2

Risk Assessment

Threat identification, likelihood and impact scoring, and risk register development across all operational areas including cyber, physical, and supply chain.

⏱ Week 2
📐
Week 3

Strategy Design

Recovery strategy options developed and approved for each critical function — covering people, processes, technology, and facilities.

⏱ Week 3
📄
Week 4

Plan Documentation

Full BCP documentation written — procedures, contact trees, checklists, and runbooks in accessible formats suitable for all staff levels.

⏱ Week 4
🧪
Week 5

Training & Exercises

Staff training, tabletop exercises, and walk-through testing of all recovery procedures before final plan sign-off and delivery.

⏱ Week 5
⚙️
Ongoing

Ongoing Management

Quarterly plan reviews, change management integration, and annual full exercises with lessons-learned updates to keep the plan current.

⏱ Ongoing
BCP vs DRP

Business Continuity Plan vs. Disaster Recovery Plan

Understanding the difference — and why you need both.

📋 Business Continuity Plan (BCP)
ScopeEntire organisation — people, processes, premises, suppliers, communications
FocusKeeping the business operational through any disruption, not just IT failures
CoversStaff roles, alternate sites, manual workarounds, supplier management, media comms
FrameworkISO 22301, NIST SP 800-34
TimeframeHours to months of disruption coverage
💻 Disaster Recovery Plan (DRP)
ScopeIT systems — data, applications, infrastructure, and network
FocusRestoring technology systems and data after an IT failure or disaster
CoversRTO/RPO targets, backup procedures, failover steps, data restoration
FrameworkISO 27001 Annex A.17, NIST SP 800-34
TimeframeMinutes to hours for IT system recovery

WynITSoul delivers integrated BCP + DRP — so the two plans work seamlessly together without gaps or duplication.

FAQ

Business Continuity Planning — Common Questions

What is a Business Impact Analysis (BIA)?

+
A BIA identifies your critical business functions, the resources they depend on, and the financial and operational impact of disrupting them at different time intervals. The BIA output drives your recovery time objectives (RTOs) and informs which processes need the most protection in your BCP.

How long does it take to develop a BCP?

+
WynITSoul delivers a complete, tested BCP in 6 weeks from kickoff to sign-off. This includes stakeholder interviews, BIA, risk assessment, full documentation, and at least one tabletop exercise. More complex multi-site environments may require 8–12 weeks.

What is the difference between a BCP and a DRP?

+
A BCP covers the entire organisation — people, processes, premises, suppliers, and communications. A DRP focuses specifically on IT systems — data recovery, systems restoration, and application failover. Both are essential; WynITSoul delivers integrated BCP + DRP so the two plans work seamlessly together.

Don't Wait for a Disaster to Test Your Resilience

Get your ISO 22301-aligned BCP in 6 weeks — delivered, tested, and ready to use.

Scroll to Top