A Business Continuity Plan (BCP) is a key document in information security risk management. It outlines the necessary actions and systems required to ensure the continuation of business operations during an emergency.

The goal of a BCP is to ensure that the organization can continue operating efficiently and swiftly during a crisis, as opposed to a DRP, which details how to recover after an emergency.