Complass
Business continuity management (BCM)
Tuesday, 6:40 a.m., the ERP system is encrypted: how mid-sized companies find out which process must run first, how long they can bear an outage, and what NIS2, the BSIG and DORA require.
NIS2 entities must ensure business continuity with backup management, disaster recovery and crisis management (§ 30(2) no. 3 BSIG). For IT service providers such as cloud providers and managed service providers, Implementing Regulation (EU) 2024/2690 makes this concrete; financial entities follow DORA.
The whitepaper explains the method of the free BSI-Standard 200-4 in plain language: business impact analysis with damage over time, maximum tolerable period of disruption (MTPD), recovery time objective (RTO), recovery point objective (RPO) and emergency operation, dependencies, strategies, emergency manual, crisis management team and exercises – with a ten-step roadmap and a checklist. ISO 22301 is only named with publicly available information.
Short "Implementation in Complass" boxes with screenshots show what the business continuity management module can do today: from the business impact analysis via business continuity plans with approval, the crisis management team and the emergency manual to exercises with measured recovery times.
17 pages · Version 1.0 · as of 10.10.2026 · Author Marc Linden, Complass GmbH i. G.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.