This sample audit report assesses a second-generation business continuity management (BCM) program.
The four components of the BCM program include: corporate business continuity, IT disaster recovery (“IT DR”), transmission emergency response plan (“TERP”), and building emergency action team (“BEAT”). The scope included corporate business continuity, emergency response (“BEAT”), IT DR, EMS, and critical applications. TERP was out-of-scope; however, TERP plans were reviewed to understand the relationship between system operations recovery and corporate business continuity.