Business Continuity Plan Development: Step-by-Step

Risk Managemen Committee

A good way to visualise a business continuity plan is to think of it as a framework, rather than a huge document that describes a detailed process to be followed. Believe, me no-one uses these gargantuan documents during a crisis, they need information that they can access and understand quickly.  That's why effective business continuity plan development generates several different types of document, some which help later stages of development and some which are used for reference purposes and others - the really important ones that can be used when disaster strikes.  So here's a list and examples of the most important templates that you'll see in our business continuity plan development video:

Priorities Assessment. This is the initial stage of business continuity plan development. Some call it a Business Impact Assessment (or "BIA"), others may refer to it as a risk assessment.  What we decide to call it is less important than what this step actually does - which is the process of identifying the most important activities that need to be kept running to ensure staff safety,  maintain customer goodwill and assure the survival of your organisation. Once you have identified what is important you can then start to consider what your overall capabilities are to meet these priorities, especially  in terms of people, premises, IT and other resources. The first stage of Module 1 in our free business continuity training course takes you through these process and shows you some tools you can use to capture and analyse this information

Core Recovery Capabilities. Your overall ability for recovering IT systems, establishing alternative workplace arrangements and acquiring alternative equipment will determine whether or not your organisation has the intrinsic ability to recover from a major operational disruption. This stage draws in colleagues from the areas of the organisation that deliver these core capabilities and captures their feedback on what they can currently provide and whether this is sufficient to meet the organisations business continuity priorities. part 2 of Module 1 in free business continuity training course explains this process and shows you some tools that you can use to get the job done

 

Departmental Plans. This is where we get down into the "nitty gritty" of how the organisations activities are restored after certain types of disaster. Having established what can be done in terms of IT systems, alternative working arrangements and equipment, we get to the stage of defining actions plans for specific activities, deciding who does what where and when and who they need to communicate and collaborate with.  These "plans" are working documents that describe key actions, team members, roles and relationships. Part 3 of Module 1 of our free business continuity training course takes you through the steps for creating departmental plans.

Communications Framework. This part is the glue that holds together departmental action plans and the core capabilities recovery activities.  Also factored in are communications needs external to the organisation such as suppliers and customers.  The communications framework helps to define who will be responsible for communicating with particular groups and how that communication will be performed. The final part of Module 1 in our free business continuity training course shows you how to develop a communications framework for your organisation

Incident Management: Getting control of an incident, understanding it's implications and severity and deciding on the correct response helps a senior management team to achieve "command & control" of different types of incident and to then initiate the relevant business continuity capabilities of the organisation. A well-designed crisis or incident management plan will provide a clear road-map to navigate these situations. Module 2 of our free business continuity training course shows you how to develop an incident management plan

Plan Assurance & Organisational Awareness. Keeping your colleagues informed of what they need to know about business continuity arrangements, what will happen during a major incident, what they need to know (and do) during a major and where they will get information ensures that your whole organisation is prepared for the unexpected. Providing this information during initial employee and contractor  onboarding and via regular "refreshers" keeps everyone informed and prepared. Module 3 of our free business continuity training course shows you how to implement an assurance programme to ensure your plan remains current and relevant and demonstrates an organisational awareness programme to inform and engage the wider organisation.

Cyber%20Exchange_Member%20Badge_Full.png

RiskCentric | Cambridge, United Kingdom | enquiries@riskcentric.co.uk | Tel: +44 (0)1353 667374