When an organization restructures its business processes, the first step in revising the BCP is to identify new potentially disruptive scenarios that may affect the continuity of the critical functions and processes. This can be done by conducting a risk assessment or a business impact analysis (BIA) to determine the likelihood and impact of various threats and vulnerabilities onthe organization's objectives and operations. By identifying new potentially disruptive scenarios, the organization can then update its recovery strategies, objectives, and plans accordingly.
References:
*ISACA, Risk IT Framework, 2nd Edition, 2019, p. 761
*ISACA, IT Business Continuity/Disaster Recovery Audit Program, 2021, p. 52