Your Plan of Reattack
What’s in a BC Plan?Regardless of your company size, a business continuity plan should contain all the critical information necessary to resume operations during any unforeseen event. It establishes risk management procedures and processes in order to do two important things: minimize disruption to vital services and restore operations as quickly (and seamlessly) as possible. Creating a BC plan from scratch can be overwhelming, so to get you going we’ve included a sample plan template to fill out for some peace of mind.
Download the Business Continuity Template from TechTarget and author Paul Kirvan.
What You Need for a Successful PlanHere’s our advice on turning this blank template into a successful business continuity plan.
- Get your facts straight. Your BC plan doesn’t have to be encyclopedia thick; it just needs the right information. A one-page plan with current and accurate information is more valuable than a lengthy document nobody can use.
- Get an emergency plan. Go to gov—part of the Federal Emergency Management Agency site—and complement your business continuity plan with suitable disaster preparedness and disaster response checklists.
- Exercise your plan regularly. Once your plan is complete, test it semiannually to ensure the documented procedures make sense in the indicated sequence, and that all information is current.
How the BC Template Is OrganizedNow, let’s take a look at the structure of our business continuity template and point out key issues to address and activities to perform.
- Initial data.It’s important to have your emergency contacts section filled out so you won’t have to waste valuable seconds searching for the information.
- Revision control page.This is page two of the plan, and it reflects your change management process.
- Purpose and scope.Provide details on these attributes, as well as assumptions, team descriptions, a list of terms, and other background information.
- Instructions for using the plan.Provide information about when and how the plan will be activated, including outage time frames, who declares a disaster, and who should be contacted.
- Emergency response and management.Specify situations in which the plan and response procedures are to be activated.
- Plan reviews and maintenance.Describe how often the plan is to be reviewed and updated and by whom.
- Checklists and flow diagrams. Assuming an incident has occurred, identify the steps to address it. These can be in the form of checklists—which are useful to keep track of scheduled and completed tasks—and flow diagrams that provide a high-level view of response and recovery.
- Notification of an incident affecting the site.Information needs to be gathered before officially declaring a disaster. This includes damage assessment data and firsthand reports from staff and first responders. Convene meetings as soon as possible with key emergency team members to evaluate the facts before proceeding to a declaration.
- Decide on a course of action.This section addresses actions to take when it becomes obvious that management needs to declare a disaster. A damage assessment can be initiated before or after the declaration—it is up to company leadership.
- Business recovery phase.This section provides instructions on recovering operations, relocating to an alternate site, and related activities.
- Detailed appendices are provided at the end of the template. These include lists and contact details for all emergency teams, primary and alternate vendors, alternate workspace locations, and other relevant information. It is very important to keep this information up to date.