BCP, BCM & ISO 22301 Consulting Service

Business Continuity Plan

A Business Continuity Plan (BCP) is a plan for preparing and responding to emergencies or disasters that may affect an organization's operations to the point of disruption. A good BCP enables an organization to resume business operations quickly and efficiently, reducing financial, reputational, and operational losses.

The Difference Between BCP, BCM, and ISO 22301

Business Continuity Plan (BCP)

A Business Continuity Plan is a procedural document that provides guidance to an organization on how to respond, recover, and resume operations following a disruption. It covers the Incident Management Plan (IMP), Emergency Response Plan (ERP), Disaster Recovery Plan (DRP), and Recovery & Resumption Plan (RRP).

Business Continuity Management (BCM)

Business Continuity Management differs from BCP in that it involves regular testing and review of the plan. Organizations must test their response plans on a regular basis to verify that the plan is complete and can be used in practice.

Business Continuity Management System (ISO 22301)

ISO 22301 is an international standard that sets requirements for planning, establishing, implementing, operating, monitoring, reviewing, maintaining, and continually improving a management system — in order to protect against, reduce the likelihood of, prepare for, respond to, and recover from incidents when they occur.

5-Phase Service Process

Phase 1: Understanding & Planning — Understand the organizational context, define the scope of the BCMS, and develop the Project Plan.


Phase 2: Analysis — Conduct the Business Impact Analysis (BIA) and Risk Assessment, and identify Critical Activities.


Phase 3: Strategy & Plan Development — Develop the BC Strategy, prepare the BCP Document and the Crisis Management Plan.

Phase 4: Implementation & Exercise — Train personnel, conduct exercises (Tabletop, Simulation, Full-scale), and improve based on lessons learned.

Phase 5: Management System (ISO 22301) — Prepare BCMS documentation, conduct Internal Audit and Management Review, and prepare for Certification.

Deliverables from the BCP/BCM Project

• BIA Report (รายงานผลการวิเคราะห์ผลกระทบทางธุรกิจ)
• Risk Assessment Report
• Business Continuity Plan (BCP)
• Crisis Management Plan & Crisis Communication Plan
• Incident Management Plan (IMP)
• Emergency Response Plan (ERP)
• IT Disaster Recovery Plan (DRP)
• Exercise Scenario & Report
• BCMS Documentation (Policy, Procedures, Records)