> For the complete documentation index, see [llms.txt](https://davidjosearaujo.gitbook.io/online-courses/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidjosearaujo.gitbook.io/online-courses/cyber-incident-response/stages-of-incident-response/incident-recovery/certification-and-validation-of-business-continuity.md).

# Certification and validation of Business Continuity

## What is Business Continuity?

Business can continue to operate and do normal activity through a disaster, event or incident

## Who decides if an organization is back to normal?

Usually decided by policy, driven by the BCP or DR team

IR team may serve as only support in the continuity effort

BCP/DR may serve as support for IR team in the same

* Depends on incident specifics

## Evaluation/validation period

Define time frame for how long validation and monitoring will be

How long will we look for abnormal behavior before moving on to follow-up

## Begin preparations for follow-up

Part of recovery should be to begin data preparations and findings preparation for follow-up

Another recovery goal is to make sure infections don't recur from previous infections