The InfoSec Blog

BCP or BIA

Posted by Anton Aylward

Business continuity planning life cycle
Image via Wikipedia

A business might possibly choose not to have a BCP but they might be interested in doing a BIA
After all, the "impact" might be something positive resulting from some change.

Oh, the Irony!
Expeditious and cost effective.

I've audited BCPs and always found them lacking. They are difficult to build and often make assumptions that are necessary to get the plan done but are unreasonable in reality.