"Highly anticipated" GAP(draft) from DRJ Editorial Advisory Board’s (EAB) Generally Accepted Business Continuity Practices Committee and DRII. Open for public review. Similar to TR-19 from Spring Singapore. Another source for comparison perhaps?

Got this summary from www.drj.com. More elaborated version (I think) compared to DRII's.

Reorganized them slightly. Agree? ;)

1. Management commitment to the process.
2. Develop a justification document for management approval for the BCP process.
3. Obtain funding for the BCP effort.
4. Determine if you have in house experience, will you be learning the process, or bringing in an experienced planner.
5. Perform a risk assessment.
6. Select the appropriate software tool (Word based if less than 1000 employees, or consider database if more).
7. Develop a project plan.
8. Perform a Business Impact Assessment (BIA).
9. Develop recovery timelines, or recovery time objectives (RTO).
10. Develop recovery strategy.
11. Document BCP in-scope coverage and out-of-scope.
12. Document assumptions.
13. Identify recovery teams and select the team leaders.
14. Build your team plan templates to include: response, recovery, resumption of business, reconstruction, and relocation back (the 5 “R’s, the first three being your focal point).
15. Address required resource requirements, media spokesperson, call notification process, BCP reporting structure, manual work around processes, critical contacts and numbers, process for declaring a disaster, and damage assessment.
16. Build the team plans, that when all have been completed you will have a BCP.
17. Determine plan distribution,
18. Identify and secure work area recovery for the business units and a hot/warm/cold/mobile location for information technology.
19. Ensure information technology backups and sends those backups to offsite storage.
20. Ensure that business, support, and information technology stores copies of critical documentation offsite.
21. Select and stock a command center
22. Run an exercise on the BCP, a test on the information technology segment, and a drill on the response team.
23. Develop a BCP maintenance schedule.
24. Train existing and new staff members.
25. Ensure that you periodically review the existing hot/warm/cold/mobile location, offsite storage, command center, and work area resources/processes and see if they are still adequate.
26. Remain current on BCP techniques and processes, and become certified at a later date if appropriate.

10 Professional Practices for Business Continuity Professionals

• Subject Area 1: Project Initiation and Management
• Subject Area 2: Risk Evaluation and Control
• Subject Area 3: Business Impact Analysis
• Subject Area 4: Developing Business Continuity Strategies
• Subject Area 5: Emergency Response and Operations
• Subject Area 6: Developing and Implementing Business Continuity Plans
• Subject Area 7: Awareness and Training Programs
• Subject Area 8: Exercising and Maintaining Business Continuity Plans
• Subject Area 9: Public Relations and Crisis Coordination
• Subject Area 10: Coordination With External Agencies

Why is this designation necessary? ;)

Retired Business Continuity Professional (RBCP)
The "Retired" category is reserved for those individuals who have achieved the CBCP or MBCP designation, and who have maintained their certification in good standing, for a minimum of five years prior to retiring from active employment or full or part-time consulting in the Business Continuity Planning profession. Individuals seeking this designation must obtain prior approval from the DRII administrative office. No continuing education activities required.