Project plan template content

Answer: The project plan template was designed to consider the implementation of both ISO 22301 and ISO 27001, but you can use it for implementing a single standard. To do that you only have to exclude the parts related to the standard you won't be implementing (these parts are indicated by the comments included in the template).

2 Do we have to do BCP as part of ISO or can we do after?

Answer: Implementation of ISO 27001 does not require implementation of a BCP, only a disaster recovery plan related to Information Technology infrastructure if you have risks or legal requirements that demands its implementation.

The Disaster Recovery Plan template can be found on folder 8 Annex A, subfolder A.17 Business continuity

This article will provide you further information:
- Business Continuity Management vs. Information Security vs . IT Disaster Recovery https://advisera.com/27001academy/blog/2017/02/27/business-continuity-management-vs-information-security-vs-it-disaster-recovery/