<Company Name>
<Company Logo> Document #
CORPORATE BUSINESS
CONTINUITY PLAN
1. PURPOSE
Typically include the defined Minimum Business Continuity Objectives (MBCO)
2. SCOPE
To detail the criterion for activation of the BCP, e.g. BCP will be activate when an event/incident that
may result in the consequence of denial access or potential denial access of more than 24 hours of
the company operating site. Also, it is important to include Critical Business Functions within the
scope of BCP. BCP can include a list of assumptions, as a basis for BCP establishment.
3. DEFINITION OF ABBREVIATION
To explain abbreviation in full, e.g. BCP: Business Continuity Plan.
4. REFERENCE
To state the reference for BCP. Example of reference include:
• ISO 22301: 2019 Societal security – Business continuity management systems –
Requirements
5. RESPONSIBILITY
To state the roles and responsibilities of key teams in BCP. The teams can include:
• Emergency Command Committee (ECC)
• Emergency Response and Management Team (ERMT)
• Damage Assessment Team (DAT) and Salvage Team (ST)
• Recovery Team (RCT)
• Restoration Team (RST)
There should be a list of alternate person for each role in every team.
Sample:
<Name of team>
Main person Alternate person
Role & responsibilities (contact (contact
information) information)
6. PROCEDURES
6.1 CBF RECOVERY STRATEGY
To provide a summary of CBFs’ recovery strategy. A sample is provided.
(Maximum
(Recovery Time Recovery Recovery Strategy
Tolerable Period
S/N CBFs Objective) Strategy 1 - 2 - Outside
of Disruption)
RTO Within Company Company
MTPD
Activation of
Indicate which
Corporate alternate external
1 Indicate duration Indicate duration room(s) is/are
Communication emergency
allocated
operation centre
Indicate which
Work from home/ or
2 IT Infrastructure Indicate duration Indicate duration room(s) is/are
Offsite Data Centre
allocated
6.2 RESPONSE AND RECOVERY
To serves as a guide and provide a sense of the sequence of responses required to any incident or
crisis within 4 hours of occurrence.
Time
RESPONSE & RECOVERY TASK RESPONSIBILITY
(hr)
H Indicate how an incident can be notified, checked and followed up ERMT
with appropriate measures to contain, stabilize, and control the
incident.
Useful details to be escalated:
• Nature and type of incident (What)
• Time of occurrence of incident, “H” hour (When)
• Place of occurrence of incident (Where)
• Cause of occurrence of incident (Why)
• Measures taken to contain, minimise and control the incident
(Emergency Response)
• Any injury or casualty
H+0.5 List of immediate tasks can include:
• An evacuation to safe ground ERMT
• Activation of ECC and Emergency Operations Centre ECC
• Commencement of Crisis Communication CCT
H+1.0 List of tasks can include:
• Assessment of initial damage DAT
• Setting up of Media Room at Alternate Site CCT
H+3.0 List of tasks can include:
• Disaster declaration (based on the Damage Assessment DAT
Report and the recommendations of the incident) and
notification
• Business Unit Call Tree Activation RCT
To provide information on:
• “H” hour (time which the incident happens)
• Declaration of disaster
• Activation of the BCP
Time
RESPONSE & RECOVERY TASK RESPONSIBILITY
(hr)
• Other special instructions
• Activation of alternate site(s)
RCT
H+4.0 List of tasks can include:
• Verification of Minimum Operating Requirements (MOR): RCT
To verify and ensure the availablility of all required
recovery resources and facilities.
• For staff who has been designated to work from home, the RCT
staff has to ensure that he/she is able to connect to
internet.
• Resumption of Critical Business Functions (CBFs). All RCT
staff at alternate site are expected to clear all backlog
before resuming department’s critical business functions.
6.3 RESTORATION AND RETURN (AFTER DISASTER)
To restore and return business operations from the temporary measures which are adopted during
recovery to support normal business requirements after disaster.
TASK RESPONSIBILITY
Original Operating Site
If the results of the damage assessment render the original operating site RST and RCT
fit for reoccupation and business operations, Recovery team to develop a
plan and schedule with the Restoration Team to prepare, clean up and re-
establish the original operating site.
Communication
To update and communicate with the staff of their business unit on the CCT
plan and schedule for return.
7. RECORDS
8. APPENDIX
AMENDMENT HISTORY
Approval