Skip to main content
Incident Response & Operations

Business Continuity Plan

A plan to keep essential business functions running through and after a disruption.

A Business Continuity Plan (BCP) is a broad plan for keeping an organization's essential functions operating during and after a disruptive event, covering people, facilities, communications, and technology.

It is wider in scope than a disaster recovery plan (which focuses on IT systems) and overlaps with HIPAA's contingency plan requirements. For organizations handling ePHI, a BCP helps ensure that both operations and data protection survive an emergency.