Skip to content
atlas

Don't confuse these

Business continuity plan (BCP) vs Disaster recovery plan (DRP)

Why they differ

The BCP keeps the business working during the crisis; the DRP gets the technology back afterwards.

Business continuity plan (BCP)

Incidents & continuity

A plan for keeping the most important work going during and after a crisis, even while the systems are down.

Formal

A documented set of procedures that keeps critical activities running at an agreed minimum level during a disruption, falling back on manual routines where needed, in the order of priority set by the business impact analysis.

In plain English

Like a shop that keeps selling with a paper notebook and cash when the card terminal dies.

In practice

When an attack takes a municipality's systems down for a week, its care homes follow the BCP - medicine charts on paper, phone lists printed in advance and meal orders phoned through to the central kitchen.

Why it matters

Citizens and patients still need help while IT is being repaired; without an agreed plan B, staff improvise and the most urgent tasks may be the ones that stop.

Disaster recovery plan (DRP)

Incidents & continuity

A technical plan for bringing data and systems back after a breakdown or attack, in a set order and time.

Formal

Step-by-step technical instructions for rebuilding systems and restoring data from backup, with a fixed order and target times taken from the recovery objectives and the business impact analysis.

In plain English

Like a rebuild guide for a house after a flood - which walls go up first, where the spare parts are, and how long each step takes.

In practice

After ransomware locks a shipping company's servers, the IT department wipes them and restores the booking system from last night's backup first, then email, then the rest.

Why it matters

A backup nobody knows how to restore is worthless, and guessing under pressure can turn a one-day outage into weeks.

Shared connections

Atlas is in beta.