Business continuity participation, physical security and personnel safety (travel, duress, emergency management)

Security operations teams do not own business continuity, but they participate heavily in it. Business continuity planning (BCP) keeps critical business functions running during and after a disruption, based on the business impact analysis (BIA). Security staff contribute by identifying systems and data that critical functions depend on, ensuring recovery environments are as secure as production, maintaining backups and access controls during a crisis, supporting exercises, and aligning incident response with continuity plans so a cyberattack can trigger continuity measures smoothly. Security must not be switched off in an emergency; attackers often exploit the confusion.