What is a Business Continuity Plan and is it something you need for your business? Let’s face it: you don’t always know when a disaster is going to strike your business. There are occasions such as weather events or flooding when you get some advanced warning. But other crises such as power outages, cyber attacks, theft and fire are unpredictable and can also cause a dramatic loss of revenue for your business.
Small businesses are particularly vulnerable when disasters occur. The US Small Business Association estimates that 25% of businesses don’t open again after a major disaster. The key to disaster management is planning. That’s where a good Business Continuity Plan comes into play. A Business Continuity Plan (BCP) is a proactive approach to protecting your business should some kind of disaster strike. It is a plan that outlines a strategy for your business to maintain essential functions until the crisis is resolved.
What is a business continuity plan?
A business continuity plan is a plan of action for your business to prepare for any type of catastrophic event: weather, flooding, fire, theft, outages or cyber attacks. This individualized plan is designed based on risk assessment and identification of critical functions of your business. A good BCP should be a comprehensive document that clearly outlines the plan for your business in the event of a disaster. It’s a good document to share with your business partners or even show to lenders to help you secure financing.
In order to design your BCP you first need to take a look at your small business and identify the key components necessary for your individualized plan. The scope of your plan should include your business’s critical assets and plan for safety, communication with employees, IT, and potential alternate locations to conduct business. This scope is specific to your business and determined by you.
What are the steps involved in developing a BCP?
1. Identify the essential functions of the business. The first step in any type of planning is assessment. Assessing your business is key to understanding what needs to be included in your BCP. Decide what are the time-sensitive or critical functions you need for your business to stay afloat. Then, identify what and who is needed to maintain these critical functions. Determine what safety measures are already in place within your business – these will be included in your BCP. Keep in mind; this evaluation should encompass the entire scope of your business.
2. Identify the most likely disasters that could affect your business. You may live in an area that is prone to extreme weather events. Hurricanes and tornadoes cause tremendous physical damage to physical structures and equipment. These weather events have also left cities without power and/or internet services for extended periods of time. Flooding and fires can occur and cause terrible damage. Another destructive event would be a security breach. Breaches in security have resulted in loss of revenue due to loss of client’s trust and loyalty. Healthcare companies in particular have seen a dramatic increase in cyber attacks and ransomware attacks since 2017. Identify how security breaches or malware attacks could disrupt your business. Your BCP should outline the resources you’ll use to adapt your business flow if such an attack occurs.
3. Identify critical assets to your organization. Critical assets encompass more than just physical property. They include equipment, intellectual property, employees and inventory. Critical assets also extend to include customer information, suppliers, important paper documents and data files. Evaluate your business and keep a checklist of these assets. Each of these need to be covered by your BCP.
4. Identify safety equipment and procedures. A strong business continuity plan covers safety equipment and procedures. Some companies enlist an employee or employees to become “safety officers” for the organization. These employees would be part of the planning and stay up to date on the safety procedures. Safety checklists are used by organizations because they are clear and concise. These checklists can be included in the BCP and should be easily accessible to employees in the event that they are needed. Also, a safety plan must clearly identify who to call and what procedure to follow in the event of any type of emergency.
5. Employee Management. Employees are the most vital assets of your business. Managing employees effectively in times of crisis is essential. During the acute phase of the crisis, employee safety is priority. Consider how to notify staff of emergencies and how safely evacuate employees if necessary. Long-term considerations for your BCP include potential scheduling changes, payroll delays and need for bringing in temporary staff if employees have difficulty accessing the site. This plan must be clear and easy to understand.
6. Critical information for disaster. There are certain types of information that every small business should have easy access to: insurance policies, customer contact information and supplier contact information. A copy of these should be stored in the cloud or at an offsite location. Your BCP should identify the location of this data and how to access the information. Easy access to insurance records and policy information will aid in your recovery. Your BCP should identify types of insurance plans and coverage, policy numbers and important contact information for each policy.
Other critical pieces of information are customer and supplier contact information. Being proactive and contacting your customers and suppliers as soon as possible will decrease inquiries and ease customer and supplier concerns. If you live in an area where weather events tend to occur, you may even want to review your BCP with your customers and suppliers before any events occur. This will give them valuable information to keep let them know that you have a plan in place and won’t be leaving them unserved.
7. Alternate business locations and outsourcing. Depending on the type and severity of disaster, you may need to consider a temporary alternative location for your business. This alternate location could house your whole business or your inventory and records. At the same time, if you cannot find an alternate location you may consider identifying companies you can temporarily outsource to in order to meet your clients’ needs. A good partnership that’s ready for an emergency can be a great value to your business, even when times are good.
At the end of the day, preparing for the worst is the key to making a full recovery. Your Business Continuity Plan will help you know exactly what you have to do to get back to business after any kind of disaster. What’s even better is that it can help you qualify for disaster recovery loans when you need them most.
A Business Continuity Plan will take time and energy and it can be overwhelming to get started. But, before you throw up your hands and say forget it to the BCP, remember that even an imperfect plan is better than no plan. Take just a few minutes to look at your business and develop a plan that works for you. It doesn’t need to be overwhelming – make a plan that is clear and concise and includes the correct information for your business. And remember, Business Continuity Plans protect your business and your property, but also your reputation.
By 