Under active development Content is continuously updated and improved

BC-01Business Continuity Plan

>Control Description

Organization's business contingency plan is periodically reviewed, approved by management and communicated to relevant team members.

Theme

Process

Type

Preventive

Policy/Standard

Business Continuity Policy

>Implementation Guidance

1. Design and document a process for Business Continuity and Disaster Recovery. 2. Define steps for recovery with all roles and responsibilities in the Business Continuity Plan. 3. Ensure that the Business Continuity Plan is approved by the process owners, and is communicated to all the relevant team members.

>Testing Procedure

1. Inspect and validate whether the Business Continuity and Disaster Recovery Processes are designed and documented. 2. Inspect Organization's Business Continuity Plan ("BCP") to determine whether Organization has established recovery steps and phases, recovery capabilities, and identified personnel responsible to execute recovery procedures. 3. Inspect the most recent version of Organization's BCP to determine whether it is periodically reviewed and approved. 4. Inspect the corporate intranet to determine whether Organization's BCP is communicated to relevant team members.

>Audit Artifacts

E-BC-01
E-BC-02

>Framework Mappings

Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.

Ask AI

Configure your API key to use AI features.