Scope
Define which parts of the organization, products and services are covered.
Roles
Senior accountability, program ownership, plan ownership and participation expectations should be clear.
Requirements
Set expectations for BIA, strategy, plans, exercises, training, review and improvement.
Review
Policy should change when the organization, obligations or continuity objectives materially change.
Business continuity is organization-specific. Recovery priorities, legal duties, safety requirements, contracts, insurance terms and technical recovery methods should be validated by the responsible people in the organization.