BCP

Term from Information Security industry explained for recruiters

BCP (Business Continuity Planning) is a company's plan for keeping work going during emergencies or disasters. Think of it like a backup plan that helps businesses stay running when things go wrong, such as during power outages, natural disasters, cyber attacks, or other major disruptions. It's similar to having a fire escape plan, but for an entire business. People might also call it Business Continuity Management (BCM) or Business Continuity and Disaster Recovery (BC/DR). This is a crucial part of protecting companies and their employees during unexpected events.

Examples in Resumes

Led development and implementation of BCP strategies across multiple office locations

Created and maintained Business Continuity Planning documentation and procedures

Conducted quarterly BCP drills and updated Business Continuity Plan based on results

Managed BC/DR program implementation for a Fortune 500 company

Typical job title: "Business Continuity Planners"

Also try searching for:

Business Continuity Manager BC/DR Specialist Risk Management Specialist Business Continuity Analyst Disaster Recovery Coordinator Emergency Preparedness Manager Business Resilience Manager

Where to Find Business Continuity Planners

Example Interview Questions

Senior Level Questions

Q: How would you develop and implement a BCP program for a large organization?

Expected Answer: Should describe a comprehensive approach including risk assessment, business impact analysis, creating recovery strategies, training staff, and regular testing of the plan. Should emphasize stakeholder communication and budget management.

Q: How do you measure the success of a BCP program?

Expected Answer: Should discuss key metrics like recovery time objectives, successful drill completions, employee awareness levels, and incident response effectiveness. Should mention the importance of regular reviews and updates.

Mid Level Questions

Q: What elements should be included in a business impact analysis?

Expected Answer: Should explain how to identify critical business functions, determine acceptable downtime, assess potential losses, and prioritize recovery efforts. Should mention the importance of interviewing key personnel.

Q: How do you conduct BCP testing and training?

Expected Answer: Should describe different types of tests (tabletop exercises, full simulations), training methods for employees, and how to document and learn from results.

Junior Level Questions

Q: What is the difference between business continuity and disaster recovery?

Expected Answer: Should explain that business continuity focuses on keeping the entire business running during disruptions, while disaster recovery specifically deals with restoring IT systems and data.

Q: What should be included in a basic business continuity plan?

Expected Answer: Should list key elements like emergency contact lists, critical business functions, backup procedures, and emergency response steps.

Experience Level Indicators

Junior (0-2 years)

  • Basic understanding of BCP concepts
  • Ability to maintain and update existing plans
  • Experience with document management
  • Basic risk assessment knowledge

Mid (2-5 years)

  • Plan development and implementation
  • Conducting business impact analyses
  • Training and exercise coordination
  • Emergency response management

Senior (5+ years)

  • Program development and management
  • Strategic planning and budgeting
  • Cross-functional team leadership
  • Crisis management expertise

Red Flags to Watch For

  • No experience with risk assessment or business impact analysis
  • Lack of knowledge about industry standards and regulations
  • No experience conducting drills or exercises
  • Poor understanding of emergency response procedures
  • Limited communication or documentation skills