Every article, consultant and standard written for business continuity advocates the completion of a business impact...
By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
analysis and risk assessment before a business continuity plan is developed. These steps provide valuable data about your organization and the risks it faces -- critical information needed to craft a BC plan or disaster recovery plan.
In reality, it's not always possible to conduct a BIA or RA due to time constraints. These activities can also take a chunk out of your BC budget -- if one exists -- and many employee work hours during discovery activities. Sometimes, for whatever reason, senior management may just want a BC plan and nothing else. For any of these reasons, an organization may skip a BIA or RA and jump right to developing its business continuity plan.
Many of my consulting projects are for a BC plan only. In time, the client may decide to pursue other complementary activities -- risk assessments, business impact analyses and training programs -- so it's always a good idea to provide a roadmap of subsequent BC/DR-related activities.
While it's not a best practice, you could prepare a BC plan without any preliminary discovery and analysis of the organization by asking people in key roles the following questions:
- What are the most important business activities performed by the company?
- What would happen if those activities could not be performed?
- What technologies and other resources are needed to support those activities?
- What staffing is required to perform the activities?
- What physical components, such as office space, will be needed?
- Are there any internal or external dependencies that may impact the firm's ability to recover?
- What events have disrupted operations over the past few years?
The above questions can act as a "compressed" BIA and RA, and the answers can help you to focus your development efforts more precisely.
The next step would be to select a plan development process that is quick, comprehensive and affordable. There are a number of free templates available from SearchDisasterRecovery. Rothstein Associates also offers a good selection of reading material to help organizations with their planning.
How to create a BC plan without management buy-in
A guide to the growing market of disaster recovery as a service
How to conduct a DR test without a large budget
Related Q&A from Paul Kirvan
In conducting an IT risk assessment, are you asking the right questions to your staff? Are you talking to the right people? These elements are ...continue reading
As the desired recovery time objective continues to decrease, make sure your organization can handle it with the proper technology, employees and ...continue reading
With software, consultants and standards at the ready, plus the rise of DR as a service, it's easy to get started on a business recovery plan. So ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.