Business continuity plan

A business continuity plan (BCP) is a written strategy for continuing the firm’s business in the event of a business interruption event.

This subtopic:

•
covers the regulatory requirements that must be complied with when preparing a BCP, and
•
provides guidance on formulating a BCP

Industry standards

Lexcel

The Lexcel Practice Management Standard imposes certain requirements in relation to business continuity planning. These should be considered compulsory for firms or in-house legal teams that have or are working towards Lexcel accreditation; they are not compulsory for others although they provide an indicator of good practice.

Lexcel requires firms to have a BCP that must include:

•
an evaluation of potential risks that could lead to business interruption
•
ways to reduce, avoid and/or transfer the risks
•
key people relevant to the implementation of the plan
•
a procedure to test the plan annually, to verify that it would be effective in the event of a business interruption

See further Practice Note: Lexcel practice management standard v6.1—Precedents

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Practice Compliance News

OFSI issues General Licence INT/2025/5855272

The Office of Financial Sanctions Implementation (OFSI) has issued General Licence INT/2025/5855272 under regulation 64 of the Russia (Sanctions) (EU Exit) Regulations 2019, S.I. 2019/855. This new licence specifically permits International Organisations to receive permitted payments that are transferred from accounts held with Gazprombank (DP), representing a targeted modification to existing sanctions arrangements.

Practice Compliance weekly highlights—20 February 2025

This week's edition of Practice Compliance weekly highlights includes: our new Practice compliance forecast, the latest on financial sanctions, SARS and data protection as well as other practice compliance news.

European Commission issues guidelines on the definition of AI systems

EU Law analysis: The European Commission has issued long awaited comprehensive guidelines on the definition of AI systems, as established by Regulation (EU) 2024/1689 (EU AI Act). With these practical guidelines, the Commission aims to assist providers, deployers, importers, distributors of AI systems in determining whether a system constitutes an AI system within the meaning of the EU AI Act, thereby facilitating the effective application and enforcement of that Act. The definition of AI systems entered into force on 2 February 2025. Dóra Petrányi, Central Eastern Europe managing director and co-head of the Technology, Media and Communications Group, Katalin Horváth and Ian Stevens, partners at CMS, analyse the key elements of the AI system definition.

New Practice Compliance forecast as at 18 February 2025

Our new Practice Compliance forecast (as at 18 February 2025) is now live. This month we report on items including: (1) publication a consultation on proposed revisions to Part I of its Guidance by the JMLSG; (2) the next FATF Plenary to take place on 19–21 February 2025; (3) plans to launch a Data Essentials training and assurance programme for SME’s by the ICO, and (4) our updated and enhanced fraud risk management content.

View Practice Compliance by content type :

News