alvaro-reyes-735660-unsplash

In general terms Business Continuity is about protecting the things in your business that you can’t afford to live without (staff, premises, IT etc) and how to plan to try and prevent these things being affected.

It doesn’t matter what size of business you hold you need your business to be able to continue to keep the profits coming in and to be able to pay your staff.

What Can I do? (6 basic steps)

Take 2 Minutes to Ask Yourself These Questions:

Business Continuity Guidance for Organisations of Different Sizes
Different sized orgnaisations have different considerations and therefore will require different plans and organisation, below is some guidance that can help with plan writing:

1-10 staff

Having the correct insurance to cover all aspects of the business
Back up of all key documents and data
Good clear lines of communication between staff and contractors in and out of hours
Nominated deputies, with access to all the information the manager has
Ensure supply chains and contractors have a form of business continuity

10-30 Staff

Having the correct insurance to cover all aspects of the business
Back up of all key documents and data
Good clear lines of communication between staff and contractors in and out of hours
Nominated deputies (more than 1), with access to all the information the manager has
Ensure supply chains and contractors have a form of business continuity
Financial plans for loss of business trading for prolonged periods must be in place.
Plans to deal with a loss of staff or a staff member with a specific key skill
Staff must have back-ups available for their role 

30+ Staff

Having the correct insurance to cover all aspects of the business
Back up of all key documents and data
Good clear lines of communication between staff and contractors in and out of hours
Nominated deputies (more than 1), with access to all the information the manager has
Ensure supply chains and contractors have a form of business continuity
All staff should be aware of the business continuity of their section
The plan must state the difference between operations at different sites the organisation run
The Plan must mention standard practice for dealing with evacuations/ invacuation of properties and denial of access of buildings
The Plan must mention potential risks to the organisation and the process by which they will be assessed.
A command structure for the organisation in an emergency must be highlighted and explained 
The Plan must have details regarding ability to source emergency funds. .
The retention of data both physical and digital must be commented on and IT Disaster Recovery arrangements mentioned. 

Questions to Ask Yourself

Within the past 3 years, have there been any occasions when the business operation(s) have been disrupted by: 

•  Computer or critical system failure for more than 2 hours 
•  More than 40% of your staff unable to attend work for 24 hours 
•  Loss of a building/premises for more than 2 hours

Have you put in place procedures to learn from these events and stop/minimise their affect?
What contingency plans does the organisation have in place to identify and control against (or minimise) risk / threats to the business operations?
Does the plan contain or point to, a risk register for your business?
Does the plan state the requirement for decision logs and documentation retention during and after an incident?
Does the plan state there must be a minimum of an annual test of the business both for managers and staff members?
Does the plan show the need to ensure that all staff are aware of the business continuity procedures (to some level) and that the procedures are not directed towards senior management only?
Is the plan clearly defined to have and ensure, employees are aware of the different protocols for different locations within the organisation?
Does the plan contain arrangements to deal with evacuations/ invacuations of properties?

In the event of an emergency, does the plan: 

•  Have, or identify where, the company’s contact details are so that staff and/or customers can contact a group of senior managers both in and out of hours? 
•  Have contact details, or identify where the company can get contact details for all clients it has to use in or out of hours, to report a problem? 
•  Show the command structure of the company that should be used in an emergency to coordinate the response?

Does the plan have or point to, a disaster recovery plan for the IT of the organisation? 
 Does the plan have details regarding ability to source emergency funds and how those funds will be used and monitored in an emergency?
Does the plan contain requirements to ensure that companies in your supply chain have business continuity plans to maintain your services?

Further details can be found here

Resources

Prepare your business for the UK leaving the EU

open_in_new

A tool to help you find the relevant documentation to preparing for a No Deal

www.gov.uk/business-uk-leaving-eu
More info