{"id":4778,"date":"2010-11-04T11:04:24","date_gmt":"2010-11-04T11:04:24","guid":{"rendered":"https:\/\/multiacademstg.wpengine.com\/27001academy\/blog\/010\/11\/04\/disaster-recovery-vs-business-continuity\/"},"modified":"2025-07-08T14:19:42","modified_gmt":"2025-07-08T14:19:42","slug":"disaster-recovery-vs-business-continuity","status":"publish","type":"post","link":"https:\/\/advisera.com\/27001academy\/blog\/2010\/11\/04\/disaster-recovery-vs-business-continuity\/","title":{"rendered":"Disaster recovery vs. business continuity"},"content":{"rendered":"<p><em>Updated: December 15, 2023. <\/em><\/p>\n<p>Has it ever happened to you that your management has given you the responsibility to implement business continuity just because you are in the IT department? Why is business continuity usually identified with information technology?<\/p>\n<p>This is probably because business continuity has its roots in disaster recovery, and disaster recovery basically is all about information technology. Twenty or thirty years ago business continuity (BC) did not exist as a concept, but disaster recovery (DR) did \u2013 the main concern was how to save the data if a disaster occurred. At that time it was very popular to purchase expensive equipment and place it at a remote location so that all the important data of an organization would be preserved if, for instance, an earthquake would occur. Not only preserved, but also that the data would be processed with more or less the same capacity as if it was at the main location.<\/p>\n<p>But after a while it was realized \u2013 what use would there be of the data if there were no business operations to use such data? This was how the business continuity idea was born \u2013 it\u2019s purpose is to enable the business to keep going on, even if in case of a major disruption.<\/p>\n<div class=\"post-featured\">\n<div class=\"post-featured--content\">\n<p><strong>Business continuity<\/strong> is the concept of enabling a company to continue its business operations after a disruption, whereas disaster recovery is about enabling the recovery of IT systems that support the business continuity.<\/p>\n<\/div>\n<\/div>\n<p><div id=\"middle-banner\" class=\"banner-shortcode\"><\/div><script>loadMiddleBanner();<\/script><div id=\"side-banner-trigger\" class=\"banner-shortcode\"><\/div><\/p>\n<h2>Definitions<\/h2>\n<p>Let\u2019s take a look at the definitions \u2013 business continuity is the \u201ccapability of an organization to continue the delivery of products and services within acceptable time frames at predefined capacity during a disruption\u201d (ISO 22300:2021), while disaster recovery is \u201cthe process, policies and procedures related to preparing for recovery or continuation of technology infrastructure critical to an organization after a natural or human-induced disaster\u201d (Wikipedia.org).<\/p>\n<p>As you can see from the definitions, the emphasis in DR is on technology (i.e., in <a href=\"https:\/\/advisera.com\/27001academy\/knowledgebase\/what-is-the-difference-between-recovery-time-objective-rto-and-recovery-point-objective-rpo\/\" target=\"_blank\" rel=\"noopener\">Recovery Time Objectives and Recovery Point Objectives<\/a>), while in BC it is on business operations. Therefore, disaster recovery is part of business continuity \u2013 you might consider it as one of the main enablers of business operations, or the technological part of business continuity.<\/p>\n<p>However, you may have noticed something else too \u2013 the definition of BC is quoted from ISO 22300, the vocabulary document for <a href=\"https:\/\/advisera.com\/27001academy\/what-is-iso-22301\/\" target=\"_blank\" rel=\"noopener\">ISO 22301<\/a>, the leading ISO standard on business continuity management, while the definition of DR is quoted from Wikipedia \u2013 actually, \u201cbusiness continuity\u201d is an official term recognized in standards, while \u201cdisaster recovery\u201d is not.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-90769\" src=\"\/wp-content\/uploads\/\/sites\/5\/2010\/11\/business-continuity-disaster-recovery.png\" alt=\"Business continuity and disaster recovery\" width=\"2500\" height=\"1309\" srcset=\"\/wp-content\/uploads\/sites\/5\/2010\/11\/business-continuity-disaster-recovery.png 2500w, \/wp-content\/uploads\/sites\/5\/2010\/11\/business-continuity-disaster-recovery-300x157.png 300w, \/wp-content\/uploads\/sites\/5\/2010\/11\/business-continuity-disaster-recovery-768x402.png 768w, \/wp-content\/uploads\/sites\/5\/2010\/11\/business-continuity-disaster-recovery-1024x536.png 1024w, \/wp-content\/uploads\/sites\/5\/2010\/11\/business-continuity-disaster-recovery-1536x804.png 1536w, \/wp-content\/uploads\/sites\/5\/2010\/11\/business-continuity-disaster-recovery-2048x1072.png 2048w\" sizes=\"(max-width: 2500px) 100vw, 2500px\" \/><\/p>\n<h2>Implications for implementation<\/h2>\n<p>So why is it a bad idea for an IT department to implement business continuity for the whole organization? Because business continuity is primarily a business issue, not an IT issue. If the IT department was implementing business continuity for the whole organization, it would neither be able to define the criticality of business activities, nor the criticality of information. Further, it is a question whether it would achieve commitment from the business parts of the organization.<\/p>\n<p>The best way to organize the implementation of BC is for the business side to lead such a project \u2013 this is how you would achieve greater awareness and acceptance of all parts of the organization. The IT department should play its role in such a project \u2013 a key role \u2013 to prepare <a href=\"https:\/\/advisera.com\/27001academy\/blog\/2010\/04\/08\/how-to-write-business-continuity-plans\/\" target=\"_blank\" rel=\"noopener\">disaster recovery plans<\/a>.<\/p>\n<p><em>Check out this <\/em><a href=\"https:\/\/advisera.com\/27001academy\/iso22301-documentation-toolkit\/\" target=\"_blank\" rel=\"noopener\">ISO 22301 Documentation Toolkit<\/a><em>\u00a0that enables you to implement business continuity and disaster recovery according to this standard. <\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Updated: December 15, 2023. Has it ever happened to you that your management has given you the responsibility to implement business continuity just because you are in the IT department? Why is business continuity usually identified with information technology? This is probably because business continuity has its roots in disaster recovery, and disaster recovery basically &#8230;<\/p>\n","protected":false},"author":26,"featured_media":90884,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4778","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"_links":{"self":[{"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/posts\/4778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/comments?post=4778"}],"version-history":[{"count":2,"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/posts\/4778\/revisions"}],"predecessor-version":[{"id":104279,"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/posts\/4778\/revisions\/104279"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/media\/90884"}],"wp:attachment":[{"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/media?parent=4778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/categories?post=4778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/advisera.com\/27001academy\/wp-json\/wp\/v2\/tags?post=4778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}