Critical business processes are special tasks that are very valuable to the organisation. Classification into uncritical, less critical, critical, and highly critical business processes can proceed similarly as for given damage scenarios from the defining protection requirements determination (see [BSI2]). All business processes classified as critical or highly critical are entered into a list of critical business processes (for more detailed information, see BSI Standard 100-4 Emergency Management [BSI3]). This document uses the term ”organisation”. Organisation is used as a general term for government agencies, companies, and other public or private organisations. All personal pronouns used in this document refer equally to.