Business Continuity

Business Continuity Plan

A business continuity plan template aligned to ISO 22301 for maintaining critical operations during and after disruptions.

20-24 pages|Updated 2026-02-15|2 frameworks

What's Included

1. Purpose & Scope

Defines the BCP objective and scope of covered operations.

2. Business Impact Analysis

Outlines the BIA methodology for identifying critical processes.

3. Recovery Strategies

Defines recovery strategies for critical business functions.

4. Plan Activation

Establishes criteria and procedures for plan activation.

5. Communication Plan

Defines communication protocols during a disruption.

6. Resource Requirements

Identifies resources needed for business continuity.

7. Testing & Exercises

Establishes testing schedule and exercise types.

8. Plan Maintenance

Defines review and update procedures for the BCP.

Frequently Asked Questions

What should a business continuity plan include?

A comprehensive business continuity plan should include purpose & scope, business impact analysis, recovery strategies, plan activation, and more. This template covers 8 key sections aligned to ISO 22301, NIST SP 800-34 requirements.

Which frameworks require a business continuity policy?

Major frameworks requiring business continuity policies include ISO 22301, NIST SP 800-34. This template maps directly to their control requirements, making it easier to demonstrate compliance across multiple standards.

How often should a business continuity plan be reviewed?

Best practice is to review your business continuity plan at least annually, or whenever significant changes occur in your organisation, technology environment, or regulatory landscape. Most frameworks including ISO 27001 and NIST CSF require documented policy review cycles.

Build Your Compliance Programme

Pair this policy template with our compliance platform to map controls across 693+ frameworks, run self-assessments, and get AI-powered compliance advisory.

Get Started Free →

Free forever — no credit card required