Business continuity plans in a larger company

Please note that department-oriented plans (e.g., IT plan, Facilities plan, HR plan, etc.) are the easiest way for mid-size companies like yours.

From our experience, the optimal structure for large companies is the following:

• one top-level document called Business Continuity Plan, where you define the crisis management plan, and the general rules by which all continuity activities will abide, ensuring all plans are aligned.
• separated Incident Response Plans for describing how you would respond to different incidents, covering related activities required by all areas of the organization.
• recovery plans for describing how to recover each of your processes/departments/projects in case of a disruption, also covering related activities required by all areas of the organization. For IT operations this plan is commonly known as the Disaster Recovery Plan

For more information, please see:

• How to write business continuity plans? https://advisera.com/27001academy/blog/2010/04/08/how-to-write-business-continuity-plans/
• Business continuity plan: How to structure it according to ISO 22301 https://advisera.com/27001academy/knowledgebase/business-continuity-plan-how-to-structure-it-according-to-iso-22301/

This material will also help you regarding business continuity planning:

• Book Becoming Resilient: The Definitive Guide to ISO 22301 Implementation https://advisera.com/27001academy/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/