Written In-Class Activity: Designing a Business Continuity Plan (BCP) and
Disaster Recovery (DR) Outline
Objective:
To provide students with hands-on experience in developing components of a Business
Continuity Plan (BCP) and Disaster Recovery (DR) strategy by responding to a hypothetical
scenario.
Instructions:
1. Scenario
Read the following scenario and reflect on its implications for the business.
1. Scenario:
You are part of the management team of a medium-sized e-commerce company.
A cyberattack has taken down your website and customer databases. Customers
are unable to place orders, and critical data may have been compromised.
2. Activity
Answer the following questions based on the scenario. Be as specific and detailed as
possible.
A. Business Continuity Plan (BCP)
1. Identify three critical business operations affected by the cyberattack.
2. Outline immediate steps to ensure business continuity for each operation (e.g.,
communication with customers, activating backup systems).
3. List resources or teams needed to implement these steps.
B. Disaster Recovery Plan (DRP)
4. Describe the steps to recover lost customer data securely.
5. Identify tools or technology (e.g., backup servers, encryption software)
required for recovery.
6. Propose a timeline for restoring full business functionality.
3. Reflection
1. What were the most challenging aspects of planning for business continuity
and disaster recovery?
2. What proactive measures could prevent such a disruption in the future?