SB.4.003 Business continuity management
A business contuinity plan (BCP) exists for potential disaster scenario’s that could affect the critical processes.
The business contuinity plan is reviewed at least annually.
The business continuity plan is tested periodically.
The BCP needs to differentiate steps to restore minimal business functions for all critical processes (this can include using the processes or systems of other organisations to continue primary processes).
Testing of the BCP can be done through tabletop exercises, simulations or a full test. It is recommended to test the BCP at least once every 2 years.