A Professional’s Guide to the Contents of a Business Continuity Plan
ITPol_A135-Disaster Recovery Plan Example Page 2
Chapter 1 – Overview and General Information
Chapter 1 contains an overview of the BCP including the purpose, scope, objectives, and
assumptions made for the plan. Additional sections and subsections include, but are not limited
to, a company’s BCP Policy, BIA
Summary, recovery strategy, EOC location(s), damage
assessment, escalation plans/procedures, and general information about the Crisis Management
Team in this chapter. The BCP team organization chart are also included in this chapter.
Chapter 2 – Critical Business Continuity Plan Information
Chapter 2 contains the call lists, task lists, and various resource inventories by team to make it
easier to execute the BCP, as well as improving the ease of distribution and updating.
Inventories include lists of Customers, Equipment, Software, Supplies, Telecommunications,
Vendors, and Vital Records that are required to support the BCP.
Chapter 3 – Plan Administration and Maintenance
Chapter 3 contains a variety of information related to administering and maintaining the BCP. It
includes sections and subsections on administration, training, maintenance, awareness programs,
education, and auditing the BCP. While most of this information is the responsibility of the
Business Continuity Coordinator, it also documents important procedures such as the Board of
Directors’ annual approval of the BCP for bank and other financial institution operations as
required by the Federal Financial Institutions Examination Council (FFIEC).
This policy applies
to all FFIEC agencies including the Federal Deposit Insurance Corporation (FDIC), the National
Credit Union Administration (NCUA), Office of the Comptroller of the Currency (OCC), and the
Office of Thrift Supervision (OTS).
Chapter 4 – Plan Testing and Test Reports
Chapter 4 contains information on the various types and frequency of plan testing. New terms
will be added to the Glossary as required, such as tactical exercise (“war game”), etc. This
chapter also provides a repository for test reports, although some Business Continuity
Coordinators prefer to place test reports in an appendix.
DRII Professional Practices – Subject Area 3: Business Impact Analysis
FFIEC Corporate Business Resumption and Contingency Planning Policy Revised March 1997