In developing a BCP, licensees must consider realistic threat scenarios that may (potentially) cause disruptions to their business processes.