Business Continuity & Incident Response Programs
Complete, board-adoptable BCP and Incident Response programs built for smaller credit unions — finished in an afternoon, not a consulting engagement. Each package includes every document you need, a step-by-step Start Here guide, and a search-and-replace customization path from download to board adoption. Built from 45 years of banking experience.
BCP Complete Package
- All four recovery-model editions of the complete BCP/DR Plan — consortium, recovery vendor, cloud-based, and dedicated site. If your recovery approach changes, your plan is already written.
- BCP Risk Assessment (threat scoring workbook)
- BCP Risk Workbook (critical functions by department)
- Joint BCP/IRP Tabletop Exercise Record — a nine-section record with assigned-question format and a sample announcement email
- Start Here guide with edition selector and full search-&-replace table
Incident Response Package
- Complete Incident Response Plan with severity classification, ten incident playbooks, and member notification letter templates
- Incident Record Form — standalone, reusable documentation form covering chronology, counsel determination, the NCUA 72-hour determination, notifications, and conversations log
- Vendor Data Inventory workbook (which vendors hold which member data)
- Vendor Emergency Contacts quick-reference sheet
- Joint BCP/IRP Tabletop Exercise Record
- Start Here guide with completion order and search-&-replace table
BCP + IRP Bundle
- Everything in both packages — the two plans reference each other, and the joint annual tabletop test satisfies the testing requirement for both at once
- All four BCP editions + complete IRP
- All supporting workbooks and forms — risk assessment, risk workbook, vendor inventory, vendor contacts, incident record form, and the joint exercise record
- Both Start Here guides
Built on your risk assessment
The BCP Risk Assessment workbook identifies your institution’s specific threats first — so the scenarios and recovery approach you adopt actually match your risk profile, not a generic list.
All four editions included
Every BCP purchase includes all four recovery-model editions — reciprocal/consortium, third-party vendor, cloud-based, and dedicated backup site. Adopt the one that matches your operation; keep the rest on the shelf.
One test covers both plans
The joint Tabletop Exercise Record documents a single annual test satisfying both policies — and its assigned-question format proves staff actually opened the plan and found current information, which a narrative summary cannot.
Guided from download to adoption
Each package opens with a Start Here guide: which edition to use, exact search-and-replace tables for every placeholder, the items to complete by hand, and a pre-exam checklist.
From purchase to board-adopted plan
These programs are templates that must be adapted to your institution. They do not constitute legal or regulatory advice, and no guarantee of regulatory acceptance, examiner approval, or compliance is expressed or implied. Your completed plan must reflect your institution’s own risk assessment and current NCUA/FFIEC business continuity expectations. Your institution is solely responsible for reviewing, adapting, and testing these documents before adoption; review by qualified legal counsel or a compliance professional is recommended before reliance in an examination context.
