As discussed in Part 1, the first step in Business Continuity Planning is to form the BCP Team, create the Mission, and draft the Policy. The next step is to conduct a vulnerability risk assessment.