Policy template

Business Continuity Policy template

This policy exists to ensure critical activities continue, or resume within acceptable timeframes, during and after a disruption. It applies to all critical activities, the people, sites, systems and suppliers they depend on.

Create this policy

What the policy contains

Business impact and objectives
Continuity and recovery plans
Testing and improvement

Who is responsible

Management
Business continuity coordinator
Activity owners
IT Manager

What you decide

Critical activities
Maximum tolerable disruption (hours)
Continuity plans testedQuarterly · Every 6 months · Yearly
Fallback arrangementRemote work · Secondary site · Cloud recovery · Manual workarounds

References covered

ISO/IEC 27001 Annex A: control 5.29
ISO/IEC 27001 Annex A: control 5.30
ISO/IEC 27001 Annex A: control 8.14
GDPR: Art. 32(1)(b) resilience of processing systems
GDPR: Art. 32(1)(c) ability to restore availability and access
NIS2: Art. 21(2)(c) business continuity, backup management, disaster recovery and crisis management

Business Continuity Policy template

What the policy contains

Who is responsible

What you decide

References covered

Other policy templates

Business Continuity Policy template

What the policy contains

Who is responsible

What you decide

References covered

Other policy templates