BCP vs DRP

"John Fitzgerald" <[email protected]> Wed, 18 Sep 2002 16:46:38 +0100
Newsgroups gmane.comp.security.cissp
Message-ID <009301c25f2a$939cb0e0$148da8c0@khan>
Business Continuity Planning vs Disaster Recovery Planning
 
Has anyone come across (or derived) a good definition that underlines
the difference between these two disciplines? Any references that I've
come across seem to fudge the issue.it's a bit woolly in my head as
well.
 
Ignoring any of the CISSP references, if someone had asked me what BCP
was I'd have described it as the following:
 
The process of planning to mitigate incidents which threaten the
continued operation of the business - Equipment failure, Power Failure,
Security Incidents, Staff Turnover etc. But this definition can be
extended to Disaster Recovery (it's just that the incidents may be more
severe - Fire, Flood, War etc)..so how do I differentiate the two?
 
Is it just that BCP attempts to assure the continued 'smooth running' of
a business in the face of minor crises while DRP is  in place to assure
the 'viability' of a business in the event of a major crisis. 
 
In practice this is the way I have always approached BCP and DRP but it
will be useful to know what the CISSP is supposed to quote
 
Any comments welcomed