Business Continuity
Skill packages tagged with “Business Continuity”
BCMS BIA & Plan Author
Guided elaboration of BCMS documentation for ISO 22301: scope and context (Clause 4), BC policy (Clause 5), risk assessment for disruption (Clause 8.3), business impact analysis with MTPD/MBCO/RTO/RPO (Clause 8.4), continuity strategies and BC/DR plans, and plan testing and exercising (Clause 8.5). Validates that critical activities have MTPD, MBCO, and RTO defined; checks RPO for IT/data-dependent activities; and flags missing dependency or SPOF notes.
BCP Audit Evidence Pack
Create a consolidated Business Continuity Evidence Pack for SOC 2, ISO 22301, or ISO 27001 audits. Combines BIA summary, RTO/RPO targets, recovery plans, DR test matrix, and auditor checklist into a single audit-ready document with cross-validation.
Business Impact Analysis (BIA)
Conduct structured Business Impact Analyses per ISO 22301. Guides interviews, maps process dependencies, determines RTO/RPO targets, and validates consistency across the dependency chain with automated tools that flag timing conflicts and circular dependencies.
ICT Business Continuity & Disaster Recovery (DORA)
Draft the ICT business continuity policy and disaster recovery plan required by DORA Articles 11-12, covering recovery objectives, switchover procedures, backup policies, continuity testing, and crisis management.
ISO 27001 Business Continuity & Disaster Recovery Plan
Create operationally detailed Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP) with BIA-driven recovery sequences, RTO/RPO validation, failover procedures, and exercise records per ISO 27001 Controls A.5.29/A.5.30.
IT Disaster Recovery Plan (ITDRP)
Draft IT Disaster Recovery Plans with validated technical runbooks for system restoration, following ISO 27031. Sequences recovery steps respecting system dependencies, validates failover logic to prevent dependency deadlocks, and audits the emergency contact matrix for expired vendor contracts and stale contact data.
NIS2 Business Continuity
Document business continuity and crisis management measures per NIS2 Art. 21(2)(c). Covers backup management policies, disaster recovery procedures, crisis management activation and escalation, and ICT readiness for business continuity. Validates BCP completeness against NIS2 requirements and checks RTO/RPO target definitions.
OSFI B-10 — Third-Party Exit and Contingency
Draft exit and contingency plans for third-party arrangements under OSFI B-10 (triggers, playbooks, review).
Recovery Scenario Builder (COBIT DSS04)
Draft IT recovery plans for Total Site Loss and Single Service Outage. Ensure HA matches business criticality. Includes DR test integrity check (failover tests vs tabletop only).