Business Continuity Plan

When a disaster hits, for example, because a foreign USB stick was plugged into the system with ransomware, you want to be 100% confident that you can recover your data and get on with the job. 

What does a business continuity plan typically include?

Disaster plans and Business continuity plans are made to prepare the organization for the worst, and ensure continuity of the team as good as feasible.

How do the Business Continuity Plan and the EU General Data Protection Regulation (GDPR) relate to each other? 

This is a common question, when you are working on the improvement of your business continuity, in relationship to the way the company is storing and processing (personal data). There are several key principles of GDPR that you need to take into consideration when you are preparing your disaster recovery solution(s). For example, the following key principles of GDPR are important: transparency, data minimization, accuracy, storage limitation, integrity and confidentiality (security), and accountability. Therefore, your disaster recovery solution must be able to recover your data every time and on time. 

On top of this, the GDPR will require you to deal with the personal data of European citizens responsibly, and therefore requires substantial changes to data protection management. Any company (regardless of geographic location) who is holding data on EU citizens will need to comply with the regulation. The penalties for non-compliance can be upward of 4% of the global turnover of the organization, and therefore be very large. The GDPR puts an obligation on companies to have an effective Disaster Recovery solution in place, which is regularly tested. 

Download this Business Continuity Plan template now in order to support you improve your risk management and data security, and personalize it according to your needs. If your organization collects personal data directly from EU Citizens, or do a quick gap analysis and check out this sample Business continuity plan, overview of mandatory documents required by the GDPR or GDPR Document Kit. Fast, safe, and easy!