Business continuity and impact analysis

A BCP plan captures:

• RTO (Recovery Time Objective) — the time you have to restore the process.
• RPO (Recovery Point Objective) — the maximum tolerable data loss, measured in time.
• Team members, plan owner, and the next scheduled test date.

For each critical business process, add a Business Impact Analysis (BIA) entry: severity, impact type (financial, reputation, regulatory, operational), max tolerable downtime, dependencies, and your recovery strategy.

Test cadence matters more than the plan document — schedule exercises via the next test date field (surfaced on the dashboard's expiring panel) and follow through.