OR-17 IT Operations & Resilience

Business Continuity Plan

Business operations continue through disruption.

Domain: IT Operations & Resilience
Control type: Preventive
Automated / manual: Manual
Frequency: Annual
Framework reference: MAS – Business Continuity

What good looks like

BCP addresses critical processes, dependencies and strategies, aligned to DRP.

Risk if it fails

Inability to sustain operations.

How Tess tests it

2 tests — each concludes only on cited evidence.

BCP covers critical processes & dependencies

Design

Procedure: Inspect the BCP.
Expected: Defined.
Sample: 1 (design inspection)
Evidence: BCP document, exercise records.

BCP current and tested

Operating

Procedure: Inspect review/exercise.
Expected: Reviewed; exercise evidenced.
Sample: 1
Evidence: BCP document, exercise records.

Evidence Tess looks for

BCP document, exercise records.

More in IT Operations & Resilience

OR-01 IT Governance & Oversight OR-02 IT & Information Security Policies OR-03 IT Risk Assessment OR-04 Asset & Configuration Management

Want Tess to test OR-17 against your evidence?