# Business Continuity Planning (BCP) Overview Backlink: [[Domain 1 - Index]] **Definition:** Organizational capability to continue delivering products/services at acceptable predefined levels after disruptive incidents. ## Key Facts - Starts with BIA and risk assessment to prioritize processes. - Plans: BCP (enterprise), DRP (IT), crisis comms, pandemic, occupant emergency. - Testing: tabletop, walkthrough, simulation, parallel, full interruption. - Maintenance via updates for org/tech changes; lessons learned. - Coordinate with incident response and emergency management. - **Verify:** check official (ISC)² CBK and current exam outline. >[!tip] **Exam Relevance** - Pick appropriate test type or strategy - Link BIA outputs to RTO/RPO >[!note] **Mnemonic** - “BIA → BCP → DRP.” ### Example Q: Which comes first, BIA or strategy selection? A: BIA. ## Revision Checklist - [ ] Name key plan types - [ ] List 3 test types - [ ] Define invocation triggers - [ ] Tie BIA to RTO/RPO and DR ## Related [[Business Impact Analysis (BIA)]] · [[Recovery Objectives (RTO, RPO, WRT, MTD)]] · [[Disaster Recovery Strategies (Hot/Warm/Cold)]] · [[Incident Response Lifecycle]] · [[Data Retention and Destruction]] #cisSP #domain-1 #concept