Plan practical continuity and recovery
BCM examines which activities must continue or recover first during interruption. A usable plan connects priorities, resources, ownership and tested procedures.
Define the operations in scope
An organisation-wide brief differs from one site or process. Describe important services and dependencies. IT recovery, crisis communications and backup power planning are distinct interfaces, not automatically fully included.
Identify dependencies beyond IT
An available server is not enough without staff, premises or supplies. Identify resources with their owners.
| Resource | Clarify |
|---|---|
| People | Key roles, cover and contactability. |
| Systems / information | Access, data, recovery and alternative communications. |
| Sites / supplies | Alternatives, critical suppliers and dependencies. |
Justify impacts and recovery objectives
Discuss how an interruption affects customers, obligations and operations over time. Derive priorities and tolerances. Desired recovery times differ from demonstrated capabilities; a template does not prove availability.
Keep plans accessible and test them safely
Agree activation, escalation, cover and access when normal systems fail. Exercises need a scenario, owners and limits. Coordinate restoration tests and operational interruptions; document results and outstanding gaps.
Compare analysis, measures and maintenance separately
Consulting develops or reviews the agreed plan. Spare technology, external standby and future exercises are separate unless included. A national fee without scope and maturity would be unreliable.
| Work package | Agree |
|---|---|
| Analysis | Processes, interviews, dependencies and report. |
| Plan / exercise | Scenarios, records, facilitation and review. |
| Continuation | Updates, training and separate technical implementation. |
Describe the position without sensitive detail
Passwords, emergency contacts and attack details do not belong in the first enquiry.
- Activities. Name important workflows and sites.
- Existing work. Outline plans, ownership and past exercises.
- Brief. Distinguish analysis, development, review and exercise.
Prioritise, plan, check and maintain
An identified owner follows changes and outstanding actions.
- Analyse. Clarify critical activities and impacts.
- Plan. Agree realistic alternatives and ownership.
- Exercise. Run the agreed scenario and capture gaps.
- Update. Incorporate operational changes and exercise findings.
Frequently asked questions
Is BCM just an IT backup?
No. Include people, sites, suppliers and business processes too.
Must I already define recovery metrics?
No. Describe important activities. Impacts and objectives can be assessed together.
Can an existing plan be reviewed?
Yes. Agree scope, currency checks and desired exercises or evidence.
Does a plan guarantee uninterrupted operation?
No. It improves preparation and ownership but does not replace available, tested resources.
Are technical backup solutions included?
Only if commissioned. Separate purchasing, operation and costs from consulting.
How does the plan stay current?
Agree ownership and review when things change. Exercises identify further adjustments.
