BCP (Business Continuity Plan) and DRP (Disaster Recovery Plan) projects are often approached as IT-only projects, but these approaches must cover all the activities and processes that make up the company’s business, from IT systems to energy suppliers, logistics and the premises where employees can return to work if the company's own are no longer available practicable. Both of these approaches, if combined, can help a company enter a continuous improvement Cyber-Resilience lifecycle from the preparation, identification, protection, detection, analysis, response and recovery steps.