Every article, consultant and standard written for business continuity advocates the completion of a business impact...
analysis and risk assessment before a business continuity plan is developed. These steps provide valuable data about your organization and the risks it faces -- critical information needed to craft a BC plan or disaster recovery plan.
In reality, it's not always possible to conduct a BIA or RA due to time constraints. These activities can also take a chunk out of your BC budget -- if one exists -- and many employee work hours during discovery activities. Sometimes, for whatever reason, senior management may just want a BC plan and nothing else. For any of these reasons, an organization may skip a BIA or RA and jump right to developing its business continuity plan.
Many of my consulting projects are for a BC plan only. In time, the client may decide to pursue other complementary activities -- risk assessments, business impact analyses and training programs -- so it's always a good idea to provide a roadmap of subsequent BC/DR-related activities.
While it's not a best practice, you could prepare a BC plan without any preliminary discovery and analysis of the organization by asking people in key roles the following questions:
- What are the most important business activities performed by the company?
- What would happen if those activities could not be performed?
- What technologies and other resources are needed to support those activities?
- What staffing is required to perform the activities?
- What physical components, such as office space, will be needed?
- Are there any internal or external dependencies that may impact the firm's ability to recover?
- What events have disrupted operations over the past few years?
The above questions can act as a "compressed" BIA and RA, and the answers can help you to focus your development efforts more precisely.
The next step would be to select a plan development process that is quick, comprehensive and affordable. There are a number of free templates available from SearchDisasterRecovery. Rothstein Associates also offers a good selection of reading material to help organizations with their planning.
How to create a BC plan without management buy-in
A guide to the growing market of disaster recovery as a service
How to conduct a DR test without a large budget
Related Q&A from Paul Kirvan
Definitions for business continuity and resilience sometimes clash, but both processes help an organization stay on its feet. A new ISO standard ... Continue Reading
Emergency response planning needs to be specific and varied enough that it will enable an organization to recover in the event of many different ... Continue Reading
From mainframes to the cloud, the business continuity profession has seen a lot over the decades. How did we get to the business continuity process ... Continue Reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.