The majority of incidents that occur in organisations are managed locally (often at departmental level) and are resolved quickly with little or no disruption to the delivery of essential products or services.
Major incidents are defined as those that may not be within the immediate control of the organisation and:
- Have the potential to disrupt (or have already disrupted) the delivery of those essential products or services
- Sit outside of the those activities that can be managed locally and do need to be promptly escalated to Crisis Management or Emergency Management teams that are trained to manage and recover the business from these types of event
- Will significantly impact the business operationally, financially and may damage the brand/ reputation irrevocably if Business Continuity is not restored within predetermined timeframes
The Business Continuity plan should be written to provide practical information covering response, recovery and restoration activities for implementation by those teams and individuals responsible for business recovery.
The Business Continuity plan should be viewed as an essential tool that steers the impacted organisation back to business continuation as quickly as possible whilst also serving to keep damage to the business to a minimum. They should be activated as part of an effective incident reporting and escalation process communicated throughout the organisation and regularly rehearsed.
Business Continuity plans can be single documents and many documents. The scope of each Business Continuity plan needs to be clearly defined in terms of what it is designed to achieve, and its limitations also need to be stated.
The Business Continuity plan needs to be accessible at all times, be familiar and trusted to those responsible for business recovery, and should be regularly reviewed for information accuracy through testing and exercising activities; revising when requirements are identified.
DisasterComUK consulting practitioners provide significant expertise in Business Continuity plan development, writing and testing. Each plan is designed with business recovery at the centre of each project and is written with the end-users in mind at all times i.e. the Crisis Management teams/ Emergency Management teams.