Glossary
Business continuity plan (BCP/DRP)
The arrangements that allow a financial entity to maintain or resume its critical activities after an ICT incident.
The business continuity plan (BCP) and the disaster recovery plan (DRP) are the arrangements a financial entity must put in place to limit the impact of an ICT incident on its critical functions: backups, backup sites, failover procedures, recovery time objectives (RTO) and maximum tolerable data loss (RPO).
DORA requires these plans to be tested regularly (Article 11) and the lessons learned from every significant incident to be used to improve them.