Contingency Planning

Security+ 🏆 • Security Operations 🛡️ • Difficulty: premium

Definition

Contingency planning prepares an organization to keep operating through disruptions and to recover quickly. It bundles policies, people, procedures, and resources for business continuity, disaster recovery, incident response, and alternate work methods.

Examples

  • A regional power outage takes down the primary data center. The plan moves critical apps to a warm cloud site within a 4-hour RTO while staff work from an alternate office.
  • Ransomware impacts file shares. The contingency plan isolates affected networks, executes incident response, restores priority data from immutable backups to meet an 8-hour RTO and 2-hour RPO, and runs manual invoicing until systems are back.

Discover 🔎

Contingency planning is the umbrella for “what we do when things go wrong.” It ensures you can protect people, continue essential work, and restore technology in a controlled way. Rather than one giant document, it’s a set of coordinated plans: business continuity for keeping work going, disaster recovery for restoring IT, incident response for cyber events, and procedures for alternate sites and manual work. Together they turn uncertainty into practiced action.

Remember: Contingency planning is an end-to-end capability—decide what must continue, design how it will continue, document steps, and rehearse them.
Open the interactive lesson Browse more topics

Tip: The interactive version includes progress tracking, decks, and premium deep dives.