Business continuity plan

01 /

Business continuity vs emergency response

An emergency response focuses on immediate safety and the incident itself. A continuity plan focuses on maintaining or restoring critical business activities. Both matter, and the continuity plan must work alongside the appropriate emergency procedures and advice.

Disruption can involve a natural event, loss of premises, a supplier failure, a system outage or the sudden unavailability of a key person. A useful plan is not limited to one scenario. It asks which resources the business depends on and what happens when they are missing.

02 /

Identify the activities that cannot wait

List the products, services and obligations that matter most. For each, consider how long it could be interrupted before the consequences become unacceptable. Think about customers, safety, cash, contractual commitments and the ability of other activities to continue.

Prioritise honestly. If everything is labelled critical, the plan gives little direction when resources are limited. An owner and the relevant team should agree the minimum workable level of service and the order in which activities would be restored.

03 /

Map people, systems and dependencies

• Key staff, deputies and the knowledge required to perform the activity.
• Premises, equipment, utilities and physical access.
• Systems, records, authorised access and recoverable backups.
• Suppliers, logistics and external support.
• Customer communication and commitments.
• Cash, payment authority and essential financial processes.

Look for shared dependencies. Several activities may rely on one system administrator, supplier or location. Our guide to reducing owner dependence helps identify knowledge and authority held by one person.

04 /

Use a business continuity plan template

The worksheet provides one row per critical activity. Record the acceptable interruption, dependencies, fallback, decision owner and recovery test. Add contact details in a securely maintained version available to authorised people when normal systems are unavailable.

This is a business planning worksheet, not a substitute for emergency instructions, specialist technology recovery or an organisation's legal obligations.

05 /

A worked continuity planning example

Imagine a hypothetical service firm that loses access to its normal scheduling system for a day. Its immediate business priority is to confirm the day's customer commitments and allocate available staff. The operations lead activates an agreed fallback using a securely stored export of upcoming jobs and a controlled manual record.

A deputy contacts the authorised technology support provider, while a named person communicates realistic updates to affected customers. Staff record changes in one place so the system can be reconciled when restored. The recovery check confirms that no jobs, changes or customer promises were lost or duplicated.

The example depends on a current, accessible export, a tested process and authorised handling of customer information. It would fail if the only copy or password were held by the absent owner.

06 /

Plan communication and decision authority

Nominate a lead and deputy, with authority to make defined decisions such as temporary spending, changed delivery priorities and customer updates. Keep a decision log during the disruption. Make sure staff know where to get current information and how to report problems.

Use the principles in our communication planning guide: audience, message, sender, channel and feedback. Have a fallback channel if the usual one is part of the outage. Protect sensitive information and avoid promising a recovery time that has not been established.

07 /

Test the plan before relying on it

Run a short discussion exercise around a realistic scenario. Ask the responsible people to locate the plan, contact the deputy, explain the first decisions and demonstrate the critical fallback where appropriate. Testing should be controlled so it does not create a live business disruption.

• Can authorised people access the plan without the normal system?
• Are contacts, responsibilities and alternatives still current?
• Can the fallback handle the minimum required workload?
• Have backups and recovery arrangements been tested by the appropriate specialists?
• Can the team reconcile work completed during the disruption?
• What gaps need an owner and completion date?

Record the findings and repeat the relevant test after changes. A plan that has never been exercised may contain assumptions nobody has checked.

08 /

Keep the plan connected with the business

Review it when key staff, suppliers, systems, premises or customer obligations change. Link it with the change management plan so a major transition does not quietly remove a fallback the business depends on.

Consider the cash effect of disruption through scenario planning and cash forecasting. Insurance, contracts and specialist recovery arrangements need their own review; a continuity plan does not guarantee that every loss is covered.

We help owners identify critical dependencies and practical responsibilities, then connect continuity work with wider governance and operating decisions.