---
title: CIR PM Cyber Relationships Between the BCM & CIR Structures
description: "A Manager's Guide to Business Continuity Management for Cyber Security Incidents: Project Management for BCM for Cyber Security Incidents"
image: https://blog.bcm-institute.org/hubfs/Manager%20Guide%20to%20BCM%20for%20Cyber%20Security%20Incidents/C3%20Typical%20IT%20Teams%20Handling%20Cybersecurity/BCM-CS%20Aligning%20BCM%20and%20CIR.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Cybersecurity Series
# CIR PM Cyber Relationships Between the BCM & CIR Structures
In any organisation, BCM and Cyber Security are two very distinct structures. The question is how the BCM team can operate with the cyber security structure.
[Moh Heng Goh](https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh) Nov 20, 2022
### Relationships Between the BCM and CIR Structures
There are two very distinct organisational structures for BCM and cyber security. The question is how the BCM team can use the cyber security structure.
Firstly, the BCM team needs to stop having the misconception that cyber security lies only with the IT unit. Also, the cyber security team structure does not necessarily contain just members from the IT unit. There can be representatives from other business units. For example, multiple business units must be involved during security testing because the business functions utilize technological infrastructures to test their recovery capabilities.
Secondly, the BCM team members can complement the roles and responsibilities of the cyber security team. The fundamentals are identical: each business unit (including the BCM business unit) has representatives within the team who voice the respective team’s concerns and contribute to the overall cybersecurity plan.
Therefore, on top of performing daily BCM operations and planning, including cyber security as part of the routine discussion. The questions discussed include:
- What are the concerns about cyber security that each business unit has?
- How should each business unit work with the IT unit to develop mitigation, preventive or response measures?
#### Alignment of BCM and CIR
It is imperative that the BCM team can align themselves to develop a comprehensive CIR plan. Figure 5-12 shows the alignment, starting from the organizational structure and framework, and relationships are drawn between the teams and processes of BCM and CIR.
Figure 5-12: Aligning BCM and Cyber Security Incident Response
(PwC, 2011)
The BCM team has to be responsible and utilize the relationships to lay out the foundations so that future required processes are executed accordingly to meet the organization’s objectives towards both BCM and cyber security.
#### Related Topics for CIR Project Management
| **5.5.1 Cyber Security Specific Scope** | **5.6 Scenario Development** | **5.7.1 BCM Team Structure for CIR** | **5.7.2 Cyber Security Team Structure** |
| --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/d920d007-fe61-452b-9cdb-fac714899b43) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/e4bbce76-45f3-4661-b3e1-b285286f0dc3) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/d8613cb9-6a1c-4608-8df9-0bc3d694fbfc) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/ed8245c9-4464-47b9-9ace-b9ac746f3688) |
| **5.8 BCM and Cyber Security Framework** | **5.9 Relationships Between the BCM & CIR Structures** | **5.10.1 Relook at Existing Structure and Initiatives** | |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/cacbdd73-342b-4eee-8685-7d737e9d5bf5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/264abb31-3f3c-4b36-86ed-295f7fa7951e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fb29df09-2d67-4c89-a62a-14bcce6d22f4) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/a0017d9e-e717-4a96-8d02-d5580f3d3124) |
---
#### 
#### Do You Want to Continue BCM Training onsite or online?
| **Competency-based Course** | **Certification Course** | | |
| --- | --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/685c93a7-08d2-4175-bee7-71781494334e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/95fc21bd-88bf-43d8-9464-5b00190d76e0) | [![\[BL-3-Catalog\] What Specialist Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4b22a53c-6e3e-4b9e-8c2a-888423f1d26c) | [![\[BL-5-Catalog\] What Expert Level Blended Learning Courses that are Available?](https://no-cache.hubspot.com/cta/default/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/fe175db3-7f57-4636-bf09-e9a836aa5478) |
#### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/2a55f179-a251-4490-bd1c-856467aea198)
Goh, M. H. (2017). A Manager's Guide to Business Continuity Management for Cyber Security Incidents, 2nd Edition. GMH Pte Ltd.
Chapter 5 Project Management 5.8.3 Finding Relationships Between the Structures
Note: This version was the draft 2nd Edition being updated in 2022. The numeric in the square bracket \[X-X\] cross-refers to the actual chapter and section in the 1st Edition.
#### **Comments:**
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/04334171-099a-49e5-becc-c8c082c7947f)
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/cyber-security/author/moh-heng-goh"
},
"dateModified" : "2022-11-25T04:37:14.806Z",
"datePublished" : "2022-11-20T03:58:00.000Z",
"headline" : "CIR PM Cyber Relationships Between the BCM & CIR Structures",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/cyber-security/cyber-relationships-between-the-bcm-cir-structures",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```