Skip to content

Business Continuity Plan

What is Business Continuity Plan?

A documented strategy defining how an organization will continue to operate during and after a significant disruption to its normal business operations.

Business Continuity

Each of these is named in at least one of the same controls as business continuity plan. The number is how many controls name both.

What the standards actually require on business continuity plan

Requirements naming business continuity plan across 6 standards, quoted from the control text.

The entity must update its business continuity plan as necessary on an annual basis to reflect changes in legal or organisational structure, business mix, strategy or risk profile and to close shortcomings found through review and testing.

CPS230-P45 · Annual Update of the Business Continuity Plan
ISO 22301:20192 controls

Maintain a response structure and a set of plans and procedures that let the organization warn and communicate, respond in a structured way, continue prioritized activities and return to normal operation.

iso-22301-2019::8.4 · Business continuity plans and procedures

Guidance on establishing and implementing documented plans and procedures for responding to disruptions.

ISO-22313-8.4 · Business continuity plans and procedures

Write a business continuity plan that implements the chosen resilience strategies, and keep it approved, communicated and maintained.

CCM-BCR-04 · Business Continuity Planning

Institutions shall establish business continuity plans to ensure they can continue to operate and limit losses in the event of severe business disruption, based on the business impact analysis.

EBA-GL-3.7.2 · Business continuity planning

Business continuity plans should consider material risks to ICT systems/services and support protection and re-establishment of CIA, coordinated with stakeholders, and ensure reaction to failure scenarios within a Recovery Time Objective and Recovery Point Obj...

EIOPA-ICTSG-GL.21 · Business continuity planning

Questions people ask about business continuity plan

What is Business Continuity Plan?
A documented strategy defining how an organization will continue to operate during and after a significant disruption to its normal business operations.
Why is Business Continuity Plan important for compliance?
Business Continuity Plan is a key concept in Business Continuity. Understanding business continuity plan helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Business Continuity Plan?
Business Continuity Plan appears in the requirement text of APRA CPS 230 Operational Risk Management, ISO 22301:2019, ISO 22313:2020 - Guidance on Business Continuity Management Systems, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1, EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07). Across these standards we have identified 15 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Business Continuity Plan?
Explore our compliance framework pages to see how business continuity plan applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Business Continuity Plan applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.