BCP
Business Continuity Plan
The document that tells you what to do
DR
Disaster Recovery
Focused on IT systems and data
BCM
Business Continuity Management
The ongoing process and program
Business Continuity Plan (BCP)
A Business Continuity Plan is a documented set of procedures that guides an organization through maintaining or resuming operations during a disruption. It's the tactical playbook — the specific instructions for what to do when things go wrong.
A BCP covers all business functions, not just IT. It addresses how to continue serving customers, processing orders, communicating with stakeholders, and maintaining critical operations regardless of what type of incident occurs.
BCP typically includes:
- Critical function identification and recovery priorities
- Roles and responsibilities during incidents
- Communication procedures
- Recovery procedures for each critical function
- Resource requirements (people, facilities, technology)
Disaster Recovery (DR)
Disaster Recovery is a subset of business continuity that focuses specifically on restoring IT infrastructure and systems after a disruption. It's primarily concerned with technology — servers, networks, applications, and data.
While BCP asks "how do we keep the business running?", DR asks "how do we get our systems back online?" DR is essential, but it's just one component of a complete continuity strategy.
DR typically includes:
- Data backup and restoration procedures
- Secondary/backup data center arrangements
- System failover procedures
- Technology-specific RTOs and RPOs
- IT infrastructure documentation
Business Continuity Management (BCM)
Business Continuity Management is the holistic, ongoing program that encompasses everything — including creating and maintaining BCPs, conducting risk assessments, running exercises, and continuously improving your resilience posture.
BCM is a management discipline, not just a document. It's about building a culture of resilience and making business continuity part of your organization's DNA. ISO 22301 is the international standard for BCM systems.
BCM typically includes:
- Governance and policy framework
- Risk assessment and BIA processes
- Plan development and maintenance
- Testing and exercise programs
- Training and awareness
- Continuous improvement
How They Work Together
Think of it this way: BCM is the program, BCP is the plan, and DR is the IT-specific component. They're all interconnected and work together to provide comprehensive organizational resilience.
The relationship: BCM is the house, BCP is the blueprint, and DR is the electrical system. You need all three working together for a complete solution.
Start Building Your Resilience
InstaBCM helps you create BCPs and manage your entire BCM program.
Start Free