BCM (Business Continuity Management)

Systematic approach for identifying critical business processes and developing plans to protect them against disruptions.

A

B

BCM ensures that an organisation can continue operating during and after disruptive events. It involves identifying critical functions, assessing risks, and developing recovery strategies.

A comprehensive BCM program includes business impact analysis (BIA), disaster recovery planning, and regular testing to ensure resilience.

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

Z

Frequently asked questions

What is Business Continuity Management (BCM)?
BCM is the discipline of keeping critical business processes running during a disruption and restoring them afterwards. It covers the plans, roles and tested procedures for incidents such as outages, cyberattacks or supplier failure.
Which standard and regulations cover BCM?
ISO 22301 is the dedicated management-system standard. ISO 27001 addresses continuity of information security in Annex A, and NIS2 makes business continuity — including backup management and crisis handling — an explicit obligation under Article 21(2)(c).
How is BCM different from disaster recovery?
Disaster recovery is the technical restoration of systems and data; BCM is the wider business question of which processes must survive, how long they can be down, and who does what. Disaster recovery is one component of BCM.
← Back to all terms