As part of its risk management program, the Swiss city of Lucerne regularly reviews its important and critical processes from a business continuity management (BCM) perspective. We advised city and its departments in the updating of the business impact analysis (BIA). Based on the findings, we developed a set of recommendations for individual and overarching measures, thus providing the basis for closing gaps or updating processes.