Understand
Current scope, BIA, critical activities, impact thresholds, dependencies and obligations.
Prepare
Approved strategies, recovery objectives, plans, contacts, alternate arrangements and technology recovery.
Validate
Training, exercises, technical tests, supplier evidence and recovery results.
Improve
Plan maintenance, corrective actions, audit, management review and lessons from real incidents.
Business continuity is organization-specific. Recovery priorities, legal duties, safety requirements, contracts, insurance terms and technical recovery methods should be validated by the responsible people in the organization.