Business Continuity Planning

The Business Continuity Plan (BCP) is a key part of any organisations response planning. It defines how the business will operate following an incident, and how it expects to return to ‘business as usual’ in the quickest way.

A BCP need not be specific to cyber-terrorism incidents and apply to any major disruption such as a natural disaster, power faults, human error, or hardware failure.

The plan itself sets out the agreed process for bringing events under control, the necessary resources for maintaining critical business functions and the staff required for coordinating actions.

It also needs to be clearly presented, avoiding unclear internal references and abbreviations, and structured in such a way that staff can quickly find and understand what actions are expected from them.

Following is a summary of common principles for developing and maintaining BCPs:

Understanding the business

The first step is to clearly identify the assets and processes that are critical to the business. Some may have been identified during recent risk assessment exercises.

  • Which roles and individuals are vital for fulfilling business commitments?
  • What equipment, IT, transport etc. will staff need to maintain operations?
  • How long can the business function before full operations are restored?
  • What alternative resources are available?
  • Which departments are vital for fulfilling orders and contractual obligations?
  • Which suppliers and other third parties are integral to daily routines?

The BCP should then present all the steps that staff are expected to follow in the aftermath of an incident in order to maintain essential operations and return to ‘business as usual’ as soon as possible.

The structure and detail of the BCP will vary from business to business and from location to location but, in general, should include:

The initial response

  • Clear roles and delegated responsibilities for those who will take charge of coordinating the initial response and from where in each location.
  • Do those working with emergency services have access to any prepared response packs
  • Factors determining part or full evacuation of premises.
  • How first-aid will be provided
  • Arranging internal and external communications
  • Arrangements for marshalling crowds towards pre-determined muster points.
  • Support for people with disabilities, restricted mobility or other needs.

Longer-term planning

  • When and how alternative accommodation and facilities will be utilised.
  • Arrangements to maintaining access to key records and IT systems
  • Contingency arrangements for critical operations – financial transactions, client orders, receipt of deliveries, production commitments.
  • How the appropriate staff will be able to access any contingency sites
  • Agreed procedures for re-commencing routine operations.
  • How staff kept off-site from site can be kept informed

Continuity preparations

If you do not have a business continuity plan in place then consider how best to make your organisation more resilient while the plan is being developed Some initial planning and actions could be taken now, for example:

  • Cross-training of skills amongst the workforce.
  • Documenting procedures so that delegated staff can perform unfamiliar tasks.
  • Agreed relocation options both within and outside the premises (e.g. meeting rooms that could be quickly converted to work areas).
  • Nominated contingency staff familiarised with any response planning
  • Remote access to IT systems in nominated back-up locations or staff homes.
  • Alternative sources of production equipment.
  • Alternative sources of production equipment.
  • Secure/off-site storage of data back-ups and valuable documentation.
  • Agreed methods for out-of-hours contact for staff, suppliers, clients etc.
  • Provision of ‘Emergency packs’ include key documents and items that may be needed by those who manage from an incident room or work with the emergency services
  • Agree a communications plan for keeping both internal and external audiences informed in the midst of an incident

Tesrex cuts through these challenges to provide all the support and services you need, whatever resources you have and whatever stage you’re at.

Get in touch with us

Talk to us to find out more about our Business Continuity Planning services