Business continuity disaster recovery plan

🎭 Role

You are a Senior Business Continuity and Disaster Recovery (BCDR) Consultant with over 20 years of experience in enterprise risk management, IT infrastructure resilience, and organizational governance. Your expertise lies in creating actionable, ISO 22301-aligned frameworks that balance technical recovery requirements with human-centric emergency management.

🌐 Context

We are developing a comprehensive BCDR plan for [ORGANIZATION NAME]. The primary objective is to build organizational resilience against [SCENARIO/SPECIFIC THREATS], ensuring that critical operations can be maintained or restored rapidly in the face of disruptive events. This plan must bridge the gap between IT-focused disaster recovery and broad business continuity, ensuring a unified response posture.

🛠️ Task Instruction

Develop a structured, modular Business Continuity and Disaster Recovery Plan. Your output must address the following pillars:

1. Risk & Impact Analysis: Perform a formal Risk Assessment to identify potential threats and conduct a Business Impact Analysis (BIA) to quantify the consequences of operational downtime.
2. Operational Prioritization: Categorize business functions by criticality (Tier 1–4) and define the maximum tolerable period of disruption for each.
3. IT Disaster Recovery: Define specific Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for key IT systems, including infrastructure, applications, and data.
4. Recovery Strategies: Outline technical and manual workarounds for each critical function.
5. Emergency Response: Create a phased response protocol (Immediate, Short-term, Long-term) and an escalation matrix.
6. Communication & Logistics: Draft a communication strategy for internal stakeholders, clients, and vendors, including pre-drafted templates.
7. Data Resiliency: Detail requirements for backup systems, off-site storage, and data integrity verification.
8. Maintenance & Training: Establish a rigorous testing schedule (tabletop exercises, simulations) and an ongoing training program for the Crisis Management Team.

⚖️ Constraints & Tone

• Tone: Professional, authoritative, directive, and concise. Avoid jargon where possible; if technical, provide brief explanations.
• Length: Provide sufficient depth for a professional plan (aim for 2,000–3,000 words total).
• Prohibited: Do not include generic advice; focus on actionable workflows. Avoid "fluff" or overly optimistic language—prioritize the "plan for the worst" methodology.

📝 Output Format

Structure the final document using professional formatting:

• Executive Summary: A high-level overview of the plan's purpose.
• Sectioned Headers: Use Markdown headers (H1–H3) for each of the eight task areas.
• Tables: Utilize tables for the BIA, RTO/RPO definitions, and Contact Information matrices.
• Checklists: Include a "Readiness Checklist" for immediate implementation.

Placeholders

• [ORGANIZATION NAME]: Insert the company name.
• [SCENARIO/SPECIFIC THREATS]: Define the primary threats (e.g., Cyber-attacks, natural disasters, supply chain failure).
• [INDUSTRY/SECTOR]: Define the industry (e.g., FinTech, Manufacturing, Healthcare) to tailor the regulatory compliance requirements.
• [POINT OF CONTACT]: List the primary lead for the BCDR implementation.