---
title: CIR PD Overview of CIR Plan Development
description: CIR PD Overview of CIR Plan Development
image: https://blog.bcm-institute.org/hubfs/Manager%20Guide%20to%20BCM%20for%20Cyber%20Security%20Incidents/C8%20Plan%20Development/C8%20Morepost/IC_CIR_CIR%20Plan%20Development.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Cybersecurity Series
# CIR PD Overview of CIR Plan Development
This article discusses the various content and BCM techniques for developing and documenting a CIR Plan.
Information from the previously conducted processes is only known by selected employees involved with the brainstorming and the development.
Reference: Chapter 8 Plan Development 8.1 Introduction to 8.5 Identify Resources
[Moh Heng Goh](https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh) Nov 22, 2022
### CIR Plan Development
This article discusses the various content and BCM techniques for developing and documenting a CIR Plan. Information from the previously conducted processes is only known by selected employees involved with the brainstorming and the development.
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/22fc254d-a9c9-45eb-b783-725835ade170)However, with increased usage of IT infrastructures and the pervasive nature of the internet, developing a cyber incident response plan is crucial for organisations to protect their health, safety and economic interests.
Hence, this information, together with activities to be carried out in future, has to be documented in detail. Proper management of cyber security incidents can mitigate or minimise impacts from disruptive cyber security attacks.
#### 1. Purpose
The purpose of the CIR plan addresses the policy for effective management of cyber security incidents and the overall framework for developing and executing the plan. (Goh, 2010a)
It aligns the document's readers with the organisation’s mission of improving its ability to tackle cyber security. It has to be understood at the beginning before proceeding.
#### 2. Reasons for Developing a Cyber Incident Response Plan
With IT infrastructures being a common tool utilised by many organisations, it is the natural target for cybercriminals to launch attacks depending on their motives. Although these IT infrastructures improve the efficiency of operations, it becomes a liability if cybercriminals can exploit them to disrupt business.
Therefore, organisations will aim to maintain these IT infrastructures as assets, reducing attack vectors and lessening the opportunities for a successful cyber security attack to be launched onto the organisation.
At the same time, cyber security threats have evolved vastly, and the associated impacts from a successful cyber security attack are very detrimental to organisations. For organisations to manage cyber security incidents in the current situation, they must be well-prepared to handle them efficiently.
#### 3. Scope
Defining the scope of the CIR plan streamlines mitigation and response activities so that resources are not spent unnecessarily on non-critical IT infrastructures. Every business function within the organisation is addressed, highlighting the importance of cyber security. The scope covers the content of the plan and supporting appendixes.
#### 4. Identify Resources
Resources required to perform the activities documented in the plan must be prepared beforehand so that processes are conducted in the shortest amount of time, facilitating effective mitigation or response to cyber security incidents.
#### Related CIR PD Topics
| **Teams Involved in CIR** | **PD Strategies** | **Develop Template** | **Back To: CIR Plan Development** |
| --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1804229c-2c6e-4145-b1a7-5de38222276c) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/98aa61c2-fa2a-4ab7-99ba-f707eb34c7c3) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/8053337b-63f9-4e1d-b56d-c0b9fcd72111) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/ba4c1630-64e7-495d-994f-88968343043d) |
---
#### 
#### Do You Want to Continue BCM Training onsite or online?
| **Competency-based Course** | **Certification Course** | | |
| --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/685c93a7-08d2-4175-bee7-71781494334e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/95fc21bd-88bf-43d8-9464-5b00190d76e0) | [![\[BL-3-Catalog\] What Specialist Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c) | [![\[BL-5-Catalog\] What Expert Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478) |
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/2a55f179-a251-4490-bd1c-856467aea198)
Goh, M. H. (2017). A Manager's Guide to Business Continuity Management for Cyber Security Incidents, 2nd Edition. GMH Pte Ltd.
Reference: Chapter 8 Plan Development 8.1 Introduction to 8.5 Identify Resources
Note: This version was the draft 2nd Edition being updated in 2023. The numeric in the square bracket \[X-X\] cross-refers to the actual chapter and section in the 1st Edition.
**Comments:**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/04334171-099a-49e5-becc-c8c082c7947f)
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh"
},
"dateModified" : "2022-11-26T15:01:54.077Z",
"datePublished" : "2022-11-22T15:25:57.000Z",
"headline" : "CIR PD Overview of CIR Plan Development",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/cyber-security/cir-pd-overview-of-cir-plan-development",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```