Category 4 investment firms must maintain a business continuity plan (BCP) appropriate to the size and complexity if its operations. The BCP must include procedures for ensuring that critical systems, functions and operations can be maintained or recovered in a timely manner in the event of a disruption