Developing a Business Continuity Plan
Business continuity planning is the process of creating an action plan to minimise the impacts of interruptions to your business. A robust business continuity plan (BCP), in conjunction with Business processes and insurance, will help to make your company more resilient against any type of incident or disasters such as a flood, fire, etc and keep your business running and potentially reduce costs.
At TenIntelligence we think are 10 specific considerations when creating, implementing and maintaining a business continuity plan:
Risk Assessment – Identify the threats your business may face and what measures are in place or need to be put in place to protect your business, building and its assest. Understand the potential scale and impact of an incident from short-term power and IT outages and major incidents such as flood or fire.
Business Impact Analysis – Identify your critical business functions and the parts of your company that are most vulnerable in the event of business interruption. How would they be impacted by an emergency? How long is it likely to take to get the business back up and running? What is the potential for damage to your reputation?
Command and Control – Establish an Emergency Management Group (EMG) who will be responsible for controlling all incident-related activities and developing the business continuity plan.
Create & Implement a Business Continuity Policy (BCP) – Your BCP should contain all the procedures and details necessary to continue business operations during or after an emergency. All employees should be briefed on the BCP and trained on emergency evacuation, business recovery & restoration procedures.
Communication – A solid communication plan and supporting system is crucial for reporting emergencies, warning personnel of any danger, keeping families and off-duty employees informed about events happening at your facility, coordinating response actions and keeping in contact with customers and suppliers.
Your people – Ensure the health, safety and well-being of all your staff should be your first priority during an emergency. Evacuation, accountability, shelter and preparedness plans during a business interruption are key.
Protect your assets -
Organising a system for protecting facilities, equipment and vital records is essential to restoring operations once an emergency has occurred. Intruder alarms, CCTV, fire alarms, and IT systems all need to be recorded, monitored and maintained.
Stakeholder and Community – Your relationship with stakeholders, emergency services and the local community will influence your ability to protect personnel and property as well as return to normal operations.
Recovery & Restoration –
Business recovery and restoration goes right to a facility’s bottom line – keeping your business operational. Your plan should ultimate cover all the steps need to restore & resume your business as quickly as possible.
Test, Monitor & Maintain –
Review & update your plan regularly to consider new and emerging threats, new technology, operational and personnel changes. Regular training, from walk-through drills to full-scale mock disaster exercises, will help you stay one step ahead of potential issues.
If you need any support with any of the above, contact TenIntelligence at [email protected]
About Richard Bell
Our Business Bunker Xtra co-host Richard Bell, can be found every month with Amanda between 11-12 talking about current security issues, from cyber security to knowing your customer. Specialising in client support for ‘all things security’ throughout the world, Richard is the Chief Operating Officer of TenIntelligence. Spanning a career of almost 30 years, he has previously involved in some of the most significant threats London has faced in recent times and led TfL’s strategic and tactical cyber response programme implementation to ensure resiliency. Richard is a Fellow of The Security Institute, Member of the Institute for Strategic Risk Management, Registered Independent Security Consultant and Member of the Association of Security Consultants. You can follow him on Twitter @securityspeak
About Ten Intelligence
With teams in our Kent, London and Dubai offices, our consultants consistently deliver due diligence, investigations, protection advisory services. Ten Intelligence prides itself on maintaining an outstanding and consistent reputation for excellence, integrity and success, building long term and rewarding relationships with our clients, associates, consultants and others with whom we do business with. Follow them on Twitter @TenIntelligence