StudyToCert

All certifications / CISM / Lessons

ISACA Certified Information Security Manager (CISM) 2026 exam content outline · Domain 4: Incident management

Business continuity plan (BCP) development

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

A business continuity plan (BCP) describes how the organization will keep critical business functions running, or restore them quickly, during and after a significant disruption. Disruptions include cyberattacks, but also power failures, pandemics, supplier failures, natural disasters, loss of a building and loss of key staff. The BCP focuses on the business: people, processes, locations and suppliers. The disaster recovery plan (DRP), covered in the next lesson, focuses on restoring technology. Both sit inside a wider business continuity management program that is owned by senior management.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CISM for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CISM study plan