Business continuity planning for businesses
Business continuity is a process developed to counteract systems failure and is essential to businesses. This is regardless of size and sector. Business continuity plans are required to ensure that your business/organisation is able to function in the event of an emergency. Unplanned events may arise, such as:
- the foot and mouth epidemic in 2002;
- the floods in 2005 and 2009; and
- emergencies may arise from within the organisation, such as deliberate or accidental damage to systems.
Reasons to have a business continuity plan
Should any unplanned event occur, such as the November floods, or the continued cold weather, it is essential that there is a certain degree of confidence that your business could continue to deliver its services and achieve its objectives. Ensuring that there is an effective business continuity plan in place is an invaluable step that can be taken to make sure that your business suffers minimal disruption and is able to continue operating.
The following statistics provide further evidence, emphasising the necessity of a business continuity plan:
- 80% of businesses affected by a major incident close within 18 months
- 90% of businesses that lose data from a disaster are forced to shut within two years
- 58% of UK organisations were disrupted by September 11th. One in eight was seriously affected.
Without an effective plan in place, possible consequences for your business are:
- Complete failure of your business
- Loss of income
- Loss of reputation and/or loss of customers
- Financial, legal and regulatory penalties
- Human Resources issues
- An impact on insurance premiums
Developing an effective plan
An effective business continuity plan will encompass all eventualities. It should enable your business to recover quickly and efficiently should an emergency/disaster take place. The business continuity plan should be concise and available to all staff members that are responsible for components of the plan.
The following action points should be considered when developing your business continuity plan:
- Analyse your business: this involves listing the business' critical services and considering areas in which your business may be vulnerable, for example: suppliers, partners, buildings, staffing and natural disasters, such as fires, floods and flu pandemics
- Assess the risks: consider the likelihood of certain risks and what effect certain risks will impose on your business.
- Prepare a plan: the plan should outline how you are able to continue each of your critical services and various actions for different risks should be highlighted
- Test your plan: employees should be involved and training needs should be addressed. It is essential for the plan to be reviewed regularly
- Consider if you are ready for all eventualities
To help businesses to build resilience against any disaster the National Counter Terrorism Security Office provides advice set out in the booklet 'Expecting the unexpected: Business continuity in an uncertain world'.
For details, see Business continuity planning on GOV.UK.