Business continuity: start from a defensible draft.

Capture damage curves, target times, minimum level and critical resources for each service.

Typical owner: BCM officer · Based on: BSI, ISO, KaitoSec

Connect business requirements with existing recovery capabilities and gaps.

Typical owner: Business unit & ITSCM · Based on: BSI, KaitoSec

Document triggers, minimum operation, work steps, dependencies and the return in a structured way.

Typical owner: Process owners · Based on: BSI, KaitoSec

Prepare objectives, scenario, roles, injects, observation and evaluation for a tabletop exercise.

Typical owner: Exercise lead · Based on: BSI, KaitoSec

Define thresholds, initial assessment, decision rights, deputies and communication channels.

Typical owner: Crisis management · Based on: BSI, KaitoSec

Assess time-critical service providers by organisation, BIA, plans, exercises, reporting and exit.

Typical owner: Procurement & BCM · Based on: BSI, KaitoSec