Every article, consultant and standard written for business continuity advocates the completion of a business impact analysis and risk assessment before a business continuity plan is developed. These steps provide valuable data about your organization and the risks it faces -- critical information needed to craft a BC plan or disaster recovery plan.
In reality, it's not always possible to conduct a BIA or RA due to time constraints. These activities can also take a chunk out of your BC budget -- if one exists -- and many employee work hours during discovery activities. Sometimes, for whatever reason, senior management may just want a BC plan and nothing else. For any of these reasons, an organization may skip a BIA or RA and jump right to developing its business continuity plan.
Many of my consulting projects are for a BC plan only. In time, the client may decide to pursue other complementary activities -- risk assessments, business impact analyses and training programs -- so it's always a good idea to provide a roadmap of subsequent BC/DR-related activities.
While it's not a best practice, you could prepare a BC plan without any preliminary discovery and analysis of the organization by asking people in key roles the following questions:
- What are the most important business activities performed by the company?
- What would happen if those activities could not be performed?
- What technologies and other resources are needed to support those activities?
- What staffing is required to perform the activities?
- What physical components, such as office space, will be needed?
- Are there any internal or external dependencies that may impact the firm's ability to recover?
- What events have disrupted operations over the past few years?
The above questions can act as a "compressed" BIA and RA, and the answers can help you to focus your development efforts more precisely.
The next step would be to select a plan development process that is quick, comprehensive and affordable. There are a number of free templates available from SearchDisasterRecovery. Rothstein Associates also offers a good selection of reading material to help organizations with their planning.
How to create a BC plan without management buy-in
A guide to the growing market of disaster recovery as a service
How to conduct a DR test without a large budget
Related Q&A from Paul Kirvan
When it comes to disaster preparedness, incident response is just one aspect of an incident management plan that should cover training, funding and ... Continue Reading
Business continuity and disaster recovery compliance is a valuable asset and may require a deeper understanding of modern standards and changes your ... Continue Reading
With ISO/TS 22330, the International Organization for Standardization covers the issues related to the people involved in BC/DR incident response. Continue Reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.