BUSINESS CONTINUITY PLAN
Legal name of the entity
Effective Date
Continuity Owner Name or role
RTO / RPO for example 4 hours / for example 1 hour Basis
ISO 22301 SOC 2 Availability (A1) EU DORA This plan sets out how the organisation maintains and recovers critical operations during a disruption, within defined recovery objectives.
1. Scope and ownership
This plan applies to Legal name of the entity and is owned by Name or role .
2. Critical functions
The following functions are recovered first:
Critical business functions 3. Recovery objectives
The organisation targets the following objectives:
Objective Target Recovery Time Objective (RTO) for example 4 hours Recovery Point Objective (RPO) for example 1 hour
4. Resilience controls
The plan depends on the following controls:
Control In place Regular tested backups No Alternate or DR site No Tested in the last 12 months No Crisis communication plan No
5. Review and approval
Reviewed [cycle]; approved by Name and designation on [date].
Approved by
Name and designation
______________________
Continuity Owner
Name or role
______________________