Business Continuity Planning

The essence of BCP is that any event that may adversely affect operations is included in the plan, for example, interruption of the supply chain, loss or damage to critical infrastructure (the main mechanism or computer / network resource) ^[1] .

For the purposes and tasks of managing the continuity of processes and functions in the organization, various priorities may be laid down, which depend on the scale and scope of activities.

There are three main components of this process:

• Incident management - is the operational level of business continuity. Its scope includes a set of internal and external incidents of high and medium probability of occurrence: fraud, human factor, equipment malfunction, etc. At this level, business damage is relatively small. Tasks and goals: safety, accessibility, integrity, authenticity of information, fault tolerance.
• Business continuity & disaster recovery management is a tactical management level. The scope of his tasks is determined by incidents that can lead to the suspension of the functioning of the entire organization or its key business processes, their probability is small - ranges from low to medium, but the damage can be impressive, up to bankruptcy.
• Management of emergency (crisis) situations (Crisis & emergency management) - is a strategic level to ensure the continuity of business processes. The probability of a crisis incident is extremely low, however, the scale of the damage is not limited to the scope of one enterprise. Ecological and humanitarian disasters, infrastructural destruction within the borders of the whole region are possible. For example, the highest level of business continuity is required in the fuel and energy complex (exploration, production, processing of hydrocarbons, production of electricity) ^{[2] [3] [4]} .

Identification of possible incidents is carried out using a multi-stage analysis, including analysis of consequences, analysis of threats and exposure scenarios.