---
title: CIR PM BCM Team Structure for CIR
description: "A Manager's Guide to Business Continuity Management for Cyber Security Incidents: Project Management for BCM for Cyber Security - BCM Team Structure for CIR"
image: https://blog.bcm-institute.org/hubfs/Manager%20Guide%20to%20BCM%20for%20Cyber%20Security%20Incidents/C3%20Typical%20IT%20Teams%20Handling%20Cybersecurity/BCM-CS%20BCM%20Structure.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Cybersecurity Series
# CIR PM BCM Team Structure for CIR
When an organization decides to establish a business continuity management (BCM) team to complement the Cyber Security program for its cybersecurity incident response, the organization needs to use its existing BCM team or develop a structure consisting of the different teams involved to facilitate and kick off the plan's development.
These are some examples of a business continuity management (BCM) team structure.
Reference: Chapter 5 Project Management 5.7.1 BCM Structure
[Moh Heng Goh](https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh) Nov 8, 2022
### Organisational Structure
When an organization decides to establish a BCM or a cyber security program, the organization needs to develop a structure consisting of the different teams involved to facilitate the development of the plan.
Figures 1 to 3 are examples of existing BCM structures.
***Figures 1*** and ***2*** show structures the organizations have established for developing their BCM program.
BCM Structure
|  |  |
| --- | --- |
| Figure1: BCM Recovery Structure for Government Agency | Figure 2: Components of a Business Continuity Steering Committee |
Figure 3: BCM Structure
The two structure is combined, as shown in ***Figure 3***, because of the need for the BCM process to accommodate both the planning and response phases.
*[](https://cta-redirect.hubspot.com/cta/redirect/3893111/0640d98f-f2d5-4673-92db-0b63a6119e79)*
The planning phase involves input from various business units, which are under the supervision of the Organisation BCM Coordinator, to develop BCM processes and procedures to ensure CBFs can continue to operate during an incident. The respective recovery team members then execute the set procedures.
Combining the two makes it easier to see the importance of the Organisation's BCM Coordinator, as this designated professional is charged with facilitating the exchange of information between the business units and the senior management. Whatever policies and procedures are developed must go through the senior management to seek their approval. Once approved, the procedures are taught to the recovery team members so that they can execute them efficiently.
Roles and Responsibilities
1. Executive Management
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/ae419414-f1a4-43c6-8d0c-1b94d0895bf5)Made up of high-ranking stakeholders that ultimately decide if the business continuity and cyber security program are to be implemented. They are the ones who make the final decision on what procedures are to be executed. Therefore, the business case for the BCM and cyber security program must be well presented to justify implementation.
2. BCM Steering Committee
The BCM Steering Committee comprises the Chief Executive Officer, the CXOs, the Head of the respective business units, and the secretariat by the Organisation's BCM Coordinator. These groups are in charge of setting the strategic direction for the BCM program for the organization.
3. Organisation BCM Coordinator/ Project Manager
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/0640d98f-f2d5-4673-92db-0b63a6119e79)The BCM subject matter expert or overall in-charge of the BCM program. This designated person is responsible for coordinating the development of the BCM program for the organization. He/ She facilitates the exchange of information via a top-down approach or vice versa.
He / She ensures that the BCM plan is comprehensive and aligns with the organization’s policies and standards. This person is the key coordinator to be involved with the cyber security team when developing the CIR initiatives for the organization.
4. Business Unit (BU) BCM Coordinators
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/21dc4ec5-60b3-4040-ab64-14879e4edc47)They are representatives from each business unit (or divisions/ departments) within the organization. They seek direction and collaborate with the Organisation's BCM Coordinator to maintain the BCM program and plan.
5. Business Unit BCM Team Members
These consist of employees carrying out daily operations for the organization to develop products or provide customer services. They are responsible for executing the recovery procedures during an incident to ensure business functions can continue to operate.
#### Related Topics for CIR Project Management
| **5.5.1 Cyber Security Specific Scope** | **5.6 Scenario Development** | **5.7.1 BCM Team Structure for CIR** | **5.7.2 Cyber Security Team Structure** |
| --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/d920d007-fe61-452b-9cdb-fac714899b43) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/e4bbce76-45f3-4661-b3e1-b285286f0dc3) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/d8613cb9-6a1c-4608-8df9-0bc3d694fbfc) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/ed8245c9-4464-47b9-9ace-b9ac746f3688) |
| **5.8 BCM and Cyber Security Framework** | **5.9 Relationships Between the BCM & CIR Structures** | **5.10.1 Relook at Existing Structure and Initiatives** | |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/cacbdd73-342b-4eee-8685-7d737e9d5bf5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/264abb31-3f3c-4b36-86ed-295f7fa7951e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fb29df09-2d67-4c89-a62a-14bcce6d22f4) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a0017d9e-e717-4a96-8d02-d5580f3d3124) |
---
#### 
#### Do You Want to Continue BCM Training onsite or online?
| **Competency-based Course** | **Certification Course** | | |
| --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/685c93a7-08d2-4175-bee7-71781494334e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/95fc21bd-88bf-43d8-9464-5b00190d76e0) | [![\[BL-3-Catalog\] What Specialist Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c) | [![\[BL-5-Catalog\] What Expert Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478) |
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/2a55f179-a251-4490-bd1c-856467aea198)
Goh, M. H. (2017). A Manager's Guide to Business Continuity Management for Cyber Security Incidents, 2nd Edition. GMH Pte Ltd.
Reference: Chapter 5 Project Management 5.7.1 BCM Structure
Note: This version was the draft 2nd Edition being updated in 2023. The numeric in the square bracket \[X-X\] cross-refers to the actual chapter and section in the 1st Edition.
#### **Comments:**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/04334171-099a-49e5-becc-c8c082c7947f)
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh"
},
"dateModified" : "2022-11-25T04:41:50.766Z",
"datePublished" : "2022-11-08T14:35:44.000Z",
"headline" : "CIR PM BCM Team Structure for CIR",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/cyber-security/bcm-team-structure-for-cir",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```