BCM activities in each of the six areas identified above therefore can be further examined in terms of the following four BCM components:

Policies
Executive Management of the organization needs to stipulate policies to guide BCM efforts to be carried out by staff in the organization.  Policies underlie the process events and people involvement in BCM activities.

Processes
These processes are set of activities with defined outcomes, deliverables and evaluation criteria to attain BCM policies on an ongoing basis.  They include formal change control and documentation processes.  For example, changes to keep the BC Plan current should be controlled and documented in a formal manner.  In addition, BCM efforts go towards reducing the risks and their impacts on the operation processes in the organization.

People
Participation and the skill sets of participants in various BCM activities are crucial to the success of BCM in an organization.  For example, a steering committee comprising representatives from various business units and headed by a member of Executive Management should be established to oversee BCM efforts in the organization.  In addition, BCM efforts go towards reducing the risks and their impacts on staff in the organization.

Infrastructure
The organization should allocate resources to support critical business functions against risk events.  This invariably requires a good understanding and application of available technology and equipment, and physical facilities to respond to risk occurrences.