1 Business Continuity Management For Small to Medium-Sized Businesses Produced by NORMIT and Norfolk County Council Resilience Team For an electronic copy of this document visit Telephone ~ or ~
2 Page 1
3 Business Continuity Management for small to medium-sized businesses (SME) Be Prepared Business Continuity Management (BCM) is about identifying those parts of your business that you can t afford to lose such as information, stock, premises, staff and planning how to maintain these if an incident occurs. Any incident, large or small, whether it is natural, accidental or deliberate, can cause major disruption to your organisation. But if you plan now, rather than waiting for it to happen, you will be able to get back to business in the quickest possible time. Delays could mean you lose valuable business to your competitors, or in the worst case your business is no longer able to continue. This affects you Whether you are a market trader, a voluntary organisation, a SME or a global institution you need to be able to continue with your critical activities, whatever happens. You also need to make sure that your key suppliers and partners have effective BCM arrangements in place to ensure that an incident affecting them doesn t impact on you. Developing Business Continuity arrangements, and documenting your procedures in a plan, will assist you in managing your risks to ensure that, at all times, your organisation can continue operating to at least a pre- determined minimum level. This will enable you to continue service delivery during and beyond an emergency. Who is this advice for? This advice is relevant to all owners, managers and employees of small to medium sized businesses. This information will guide you through some steps that could help your organisation survive an emergency. It s not a complex subject and doesn t have to take up vast resources and time. Time spent now can prevent disruption turning into disaster for your business. This document also contains an example template that you can adapt for your organisation. To obtain a free copy of the example template in Word format for you to amend you can download it from or call on By following this step-by-step guide, applying Business Continuity Management and completing a plan your organisation will be more able to deal with a disruption. Page 2
4 The Business Continuity Management (BCM) Lifecycle This information aims to guide you through the steps you will need to take to implement BCM in your organisation. There are six steps that make up the BCM lifecycle as set out in the Business Continuity Management Standard (BS , 2006) and depicted in the diagram below. By following this guide you will be able to understand Business Continuity Management and develop a Business Continuity Plan specific to your organisation. Step One ~ Step Two ~ Step Three ~ Step Four ~ Step Five ~ Step Six ~ BCM Programme Management Understanding the Organisation Determining BCM Strategy Developing and Implementing BCM Response Exercising, Maintaining and Reviewing BCM Arrangements Embedding BCM in the Organisation s Culture Page 3
5 Step One ~ BCM Programme Management Effective programme management will ensure that BCM capability is established and maintained within your organisation. Assigning responsibilities ~ It is essential that BCM has the support of senior management and it is suggested that an individual is nominated to be accountable for BCM. In addition to this, one or more individuals could be nominated with the responsibility for taking the programme forward. Establishing and implementing BCM in the organisation ~ The BCM policy needs to be agreed and should set out the scope, aim and objectives and what activities are required to deliver these. The policy will need to be implemented. This will involve communication and training of staff. Ongoing Management ~ To ensure BCM arrangements are up to date the plans and related documents need to be regularly reviewed, exercised and updated. Step Two ~ Understanding the Organisation Completing a Business Impact Analysis (BIA) and a Risk Assessment will enable you to better understand your business and priorities. Business Impact Analysis ~ A BIA identifies and documents your key functions and services, what activities and resources are required to deliver these, and the impact that a disruption of theses activities would have on your organisation. You should fill in a BIA for each of your key functions and services. You will find an example format for a Business Impact Analysis (BIA) on the following page. This will take you through the impact of a disruption over time and the resources you require to recover. The BIA needs to be completed before you complete your plan. Within the BIA there is an Impact Description column. The table below will assist you in deciding the Impact Description over time. You can add or amend this table to reflect your organisation. This information will assist you in prioritising your key functions and services. Impact Description Minor Moderate Significant Example Little or no disruption to service. No damage to reputation. Loss of?? to?? (to be added to reflect your organisation). Little effect on achieving organisations objectives. Some disruption to service. Coverage in media and/or some damage to reputation. Loss of?? to?? (to be added to reflect your organisation). Partial failure to achieve organisations objectives. Loss of service for more than 48 hrs. Extensive media coverage and/or damage to reputation. Loss of?? to?? (to be added to reflect your organisation). Non-delivery of organisations objectives. Page 4
6 Business Impact Analysis (You will need to complete a BIA for each of your key functions or services). Key Function / Service: The table below details, over time, the impact the loss of this function would have on your ability to meet your organisation s Aim and Objectives and the impact on your stakeholders. Impact Time Description Minor, Moderate or Significant Example of Impact on Service First 24 hours hours Up to 1 week Up to 2 weeks Consider the maximum length of time that you can manage a disruption to this key function / service without it threatening your organisation s viability. What point in time would you need to resume in the event of disruption? This is called the Recovery Time Objective (RTO). Recovery Time Objective: The table below lists the resources required to meet Recovery Time Objective. Time People Premises Technology Information First 24 hours Suppliers / Partners hours Up to 1 week Up to 2 weeks The information collected in each of your BIAs can, after analysis, be added into your Business Continuity Plan. Page 5
7 Risk Assessment ~ In relation to Business Continuity Management, the Risk Assessment looks at the likelihood and impact of a variety of risks that could cause business disruption. You need to consider what risks could disrupt the key functions and services that you have identified within your BIA. These could include: Loss of staff Loss of systems (IT or telecommunications) Loss of utilities e.g. water, gas or electricity Loss of, or access to premises Loss of key suppliers / partners Disruption to transport You will find an example format for a Risk Assessment in Appendix F within the template plan at the back of this document. This will take you through considering the impact and likelihood of each risk, what arrangements you currently have in place to reduce the risk and what additional activities you could carry out. By using the Risk Matrix below, and the information you have in your BIA, you should be able to score the risk as high / low for both impact and likelihood and determine a risk score of A, B, C or D. Increasing Impact B High Impact Low Likelihood D Low Impact Low Likelihood A High Impact High Likelihood C Low Impact High Likelihood Increasing Likelihood The risk score will enable you to prioritise your risk reduction activities. For the higher risks (A or B) you should consider what you could do to reduce the risk. This could include: Treat the risk ~ put contingencies in place to reduce the impact or likelihood or ensure efficient recovery. This could include IT back up procedures or monitoring of flood warnings. Tolerate the risk ~ you may decide that you are willing to accept the risk as the cost of implementing any risk reduction strategies outweigh the benefits. Transfer the risk ~ this could be done by insurance or contractual arrangements. The Risk Assessment needs to be completed before you complete your plan. Page 6
8 Step Three ~ Determining BCM Strategy This stage of the process is about identifying the action that you can take now to ensure that you are able to maintain the critical activities that underpin the delivery of your organisation s functions and services following a disruption. The table below provides some of the strategies that you could adopt to protect your resources and critical activities. This list is not exhaustive. People Inventory of staff skills not utilised within their existing roles ~ to enable redeployment. Process mapping and documentation ~ to allow staff to undertake roles with which they are unfamiliar. Multi-skill training of each individual. Cross training of skills across a number of individuals. Succession planning. Use of third party support, backed by contractual agreements. Geographical separation of individuals or groups with core skills can reduce the likelihood of losing all those capable of undertaking a specific role. Premises Relocation of staff to other accommodation owned by your organisation such as training facilities. Displacement of staff performing less urgent business processes with staff performing a higher priority activity. Care must be taken when using this option so that backlogs of less urgent work do not become unmanageable. Remote working ~ this can be working from home or other locations. Use premises provided by other organisations, including those provided by third-party specialists. Alternative sources of plant, machinery and other equipment. Technology Maintaining the same technology at different locations that will not be affected by the same business disruption. Holding older equipment as emergency replacement or spares. Information Ensure data is backed-up and it is kept off site. Essential documentation is stored securely (e.g. fire proof safe). Copies of essential documentation are kept elsewhere. Suppliers and Partners Storage of additional supplies at another location. Dual or multi-sourcing of materials. Identification of alternative suppliers. Encouraging or requiring suppliers / partners to have a validated business continuity capability. Significant penalty clauses on supply contracts. Stakeholders Mechanisms in place to provide information to stakeholders. Arrangement to ensure vulnerable groups are accommodated. Page 7
9 Step Four ~ Developing and Implementing BCM Response This stage of the process is concerned with development of appropriate plans and arrangements. This should ensure that you could manage and respond to any disruption effectively ensuring continuity and recovery of critical activities that support key functions and services. It is important to ensure that your plans are easily accessible and copies should be kept on and off site. No one plan would be appropriate to all organisations, however the example template that follows at the end of this document can be adapted to suit your organisation. In general the plan content should incorporate the following: Purpose and Scope ~ It is important to state the purpose and scope of your plan and the relationship to any other relevant plans or documents. Document Owner and Maintainer ~ You should document who owns the plan and who is responsible for reviewing, amending and updating it at regular intervals. Roles and Responsibilities ~ The plan should detail specific roles in the implementation of the plan. Plan Activation ~ It should be stated how the plan is invoked, who has authority for this and under what circumstances. Contact Details ~ Your plan should contain, or provide a reference to, the essential contact details for all key stakeholders, including staff involved in the implementation of the plan. Incident Management ~ Your plan should document the tasks that will be required to manage the response. You should also consider pre-identifying a location or room (and alternative) from where the response could be managed. Business Continuity and Recovery ~ The plan should set out the critical activities to be recovered and the timescales required (from your BIA). You should also include details of resources available and methods for mobilising these. The example template at the end of this document provides additional guidance on the above requirements. Page 8
10 Step Five ~ Exercising, Maintaining and Reviewing BCM Arrangements This stage of the process ensures that an organisation s BCM arrangements are validated by exercise and review and that they are kept up to date. Exercising ~ Your BCM arrangements cannot be considered reliable until they are exercised and have proved to be workable. The frequency will depend on your organisation and the rate of change however it is suggested that a minimum frequency is annually. There are four types of exercise: Testing ~ Not all aspects of your plan can be tested but some elements can, such as contact lists and activation process. You can also test back up power, communications equipment and IT back ups. Discussion based exercises ~ This involves bringing people together to discuss the plan and their individual responsibilities. It is useful for training purposes and for validation of a new plan. Table-Top exercise ~ This is an efficient method of validating plans and rehearsing key staff. Staff are brought together to take decisions on their actions as a scenario unfolds. To run this type of exercise you need to develop a scenario and set questions for the participants to consider. Live exercise ~ This can range from a small scale test of one component, such as evacuation, through to a full scale test of many components of the plan. Before running a large scale live exercise you must consider if your organisation has the capacity to run it without causing a disruption to your ability to deliver your key functions and services. Whatever type of exercise you conduct, you need to ensure that you record and evaluate the event, hold a debrief to identify any lessons and produce an action list to follow up. Maintaining your BCM arrangements ~ This involves having a system in place to ensure that your arrangements and plans are reviewed and updated following exercises, incidents or following changes within your organisation. Reviewing your BCM arrangements ~ It is recommended that your BCM arrangements are reviewed regularly, either through formal audit or self-assessment. Step Six ~ Embedding BCM in the Organisation s culture To be successful BCM has to become part of the culture of your organisation. This can be achieved through a combination of awareness raising and training to ensure that all staff are aware of why BCM is important to the organisation and the role they are expected to play. The six steps above will assist you to implement Business Continuity Management in your organisation. Page 9
11 Preparing an Emergency Pack To assist you in your response you can develop an Emergency Pack in advance. An Emergency Pack contains items that will help you implement your plans. Your pack should be stored safely and securely off-site. Ensure that the pack is checked and updated regularly. Examples of items to go in an Emergency Pack include: Documents Business Continuity Plan ~ your plan to recover your business List of employees with contact details and next of kin List of customers and suppliers Contact details for emergency glaziers, salvage organisations and building contractors Contact details for utility companies Building site plan / floor plan including location of gas, electricity and water shut off points Insurance, finance and banking details Equipment Computer back up tapes / disks / USB memory sticks or flash drive (consider security of these if placed in your emergency pack) Spare keys / security codes Torch and spare batteries Hazard and cordon tape Message pads General stationary Disposable camera (useful for recording evidence in an insurance claim) Cash Wind up radio Mobile phone charger Key to using the Example Template: Before you fill in the example template you must carry out a Business Impact Analysis and Risk Assessment. Details of these can be found in Step 2 on pages 3 to 6. Try to prevent the plan becoming a wish list of resources you would like. The BIA enables realistic planning based on your organisation s priorities. You may need to change the plan template to ensure it is relevant to your organisation s requirements. Text in blue italics needs to be amended to reflect your organisation. Text in red italics provides guidance on completing a plan and should be deleted before you issue your document. This guidance is provided as general information about Business Continuity Management and planning for emergencies. It is not intended to replace detailed guidance and planning specific to you and your organisation. You should consider whether you need to obtain this. To the extent permitted by law, Norfolk County Council and NORMIT excludes any liability arising from the use of this document and example template. Page 10
12 Preparation of this booklet has been co-ordinated by NORMIT. For additional information, advice or guidance about Business Continuity Management please contact NORMIT or your local authority. The list below has the contacts for Norfolk. If your organisation is situated outside Norfolk you can contact NORMIT or your local council. NORMIT Promoting Resilience and Business Continuity Local Authority Emergency Planning / Business Continuity Teams Norfolk County Council Breckland Council Broadland District Council Great Yarmouth Borough Council North Norfolk District Council Norwich City Council South Norfolk Council Borough Council of King s Lynn and West Norfolk Useful Links Business Continuity 10 Minute checklist Guidance and Templates for Business Continuity Planning Cabinet Office Emergency Planning and Business Continuity Information and ncies/index.htm Contact if you require this booklet in an alternative format. Page 11
13 Insert Company Logo Insert name of company Business Continuity Plan Version Number: insert version number Date: insert date
14 Contents of Business Continuity Plan 1. Distribution List 2. Document Owner and Maintainer 3. List of related plans and documents 4. Purpose and Scope 5. Plan Activation Procedure 6. Training and Exercise Programme 7. Critical Activities and Resources 8. Incident Management, Roles and Responsibilities 9. Appendices Appendix A ~ Key Contacts Appendix B ~ Holding Statement Appendix C ~ Map of site / floor plan Appendix D ~ Blank Log Sheet Appendix E ~ Business Impact Analysis for each critical function Appendix F ~ Risk Assessment Appendix? ~ Add any other information relevant to your organisation 1. Distribution List Copy Number Job Title Location 001 Emergency Pack Note One person may be issued with two copies of the document, one for the office and one to be kept at home. 2. Document Owner and Maintainer Document Owner: Document Maintainer: If you have any suggested changes to this plan, please notify either the Owner or Maintainer. 3. List of related plans and documents Document Title List in the table above any other relevant plans or documents that relate to Business Continuity Management.
15 4. Purpose and Scope The purpose of the Business Continuity Plan is to prepare this organisation to be able to respond to and recover from a disruption. The objectives are as follows: To list the critical functions in priority order for recovery To detail the activation procedure and roles and responsibilities for staff To detail the agreed response actions following a disruption 5. Plan Activation Procedure This plan can be activated by the following people: Examples of trigger events that would necessitate the activation of the plan include the following: Note this is a guide only and the list is not exhaustive. The primary location for the response to be managed from is: The alternative location for the response to be managed from is: The following people can be requested to form an Incident Response Team: The following people have been training in the role of Incident Manager: 6. Training and Exercise Programme The details in the table have been added as an example and will need to be amended to reflect your organisation. Training: Induction for new staff includes Business Continuity Management (BCM). Programme of briefings to ensure all staff are updated on BCM on an annual basis. All staff who are named within this plan as having authority to invoke the plan or to be part of the Incident Response Team have been trained / briefed on their role and responsibilities. Exercising: Contact details, back up power and IT back up & restore is tested annually. Every year there is a table top exercise covering a scenario relating to one of the highest risks to the business as detailed in the Risk Assessment. Every 3 years there is a live exercise involving a different team / process.
16 7. Critical Activities and Resources The table below lists the Key Function / Services in priority order and can be used during a disruption to assist the decision making of your Incident Response Team. Priority Key Function / Service 1 Recovery Time Objective (RTO) What resources or actions are needed to recover within RTO? Detail also any specific availability or methods for mobilising resources Using the information in your Business Impact Analysis and Risk Assessment you should be able to complete the table above.
17 8. Incident Management, Roles and Responsibilities Once the decision has been made to invoke the plan, an Incident Manager is appointed to lead the Incident Response Team. Key responsibilities for each of the roles are as follows: Person Authorised to Invoke the Plan will: Action Start a log of information received, decisions made and actions taken. If the disruption is of a significant scale, particularly if it meets any of the suggested triggers, make the decision to invoke the plan. Appoint an Incident Manager and pass on relevant information. Comments Time Completed The Incident Manager, with support from the Incident Response Team will: Action Start a log of information received, decisions made and actions taken. Decide on a suitable location for the Incident Response Team. (pre-identified locations detailed in section 5) Call in members of the Incident Response Team. Provide direction to the Incident Response Team to ensure an effective and efficient response and recovery. Identify any damage or disruption to key functions / services. Liaise with stakeholders as necessary. (For example Health & Safety, Insurance company, building owner). Liaise with Emergency Services as required. Provide information to staff. Decide on course of action and priorities, taking into account the Critical Activities and Resources detailed in Section 7. Communicate decisions to staff and business partners. Provide public information to maintain reputation and business. (Consider issuing the Holding Statement in Appendix B). Stand down at conclusion of disruption. Arrange a debrief to capture any lessons. Comments Time Completed Compile a log of actions to be taken, write a report on the disruption and review Business Continuity Plan. You may want to include in this section details of any arrangement you already have in place, including any specific actions you would take for specific hazards. (The information in your Risk Assessment could assist with this).
18 Appendix A ~ Key Contacts Incident Response Team Members Contact Office Mobile Comments Senior Management Team Contact Office Mobile Comments Other Locations Contact Office Mobile Comments Head Office Company Media Key Suppliers / Customers Contact Office Mobile Comments Other Contacts Contact Office Mobile Comments Key holder Security Company
19 Appendix B ~ Example Holding Statement This holding statement can be used during an emergency to pass information to the media if required. Before adding this to your plan, the additional information about your organisation needs to be added and the format and procedure for approving and issuing agreed. During an emergency the specific information about the emergency is completed and, once agreed, the statement can be issued to any staff that may take telephone calls, or have contact with the public or media. We can confirm that there has been an incident at name of company / organisation. At add the time on add the date there was a add type of incident ie fire, explosion at our premises at add location. We deeply regret that this incident has happened and our thoughts are with the family(s) and friends of those involved. Safety is always our top priority. (Amend paragraph as necessary) We have well rehearsed procedures to deal with emergencies and we have implemented our Emergency Plan. We are working closely with name emergency services and agencies on site. An area has been set aside for the media to use. This is located state location of media centre if applicable. Further updates will be issued as more information becomes available. For more information on name of organisation please log onto General information Add here some general information about your organisation i.e. number of employees / type of work or service you perform / How many sites you have / international or local only / any partners you work with, etc. NOTE: This Holding Statement is to be used as an example only Further guidance, advice and agreement should be sought from an organisations Public Relations / Communications Department prior to this statement being added to your plan.
20 Appendix C ~ Map of Site / Floor Plan
21 Appendix D ~ Blank Log Sheet Date: Disruption: Log Completed by: Page Number: Time Information / Decision / Action Initials
22 Appendix E ~ Business Impact Analysis You would have produced this document during your preparation. (You will need to complete a BIA for each of your key functions or services). Key Function / Service: The table below details, over time, the impact the loss of this function would have on your ability to meet your organisation s Aim and Objectives and the impact on your stakeholders. Impact Time Description Minor, Moderate or Significant Example of Impact to Service First 24 hours hours Up to 1 week Up to 2 weeks Consider the maximum length of time that you can manage a disruption to this key function / service without it threatening your organisations viability. What point in time would you need to resume in the event of disruption? This is called the Recovery Time Objective (RTO). Recovery Time Objective: The table below lists the resources required to meet Recovery Time Objective. Time People Premises Technology Information First 24 hours Suppliers / Partners hours Up to 1 week Up to 2 weeks
23 Appendix F ~ Risk Assessment You would have produced this document during your preparation. In relation to Business Continuity Management, the Risk Assessment looks at the likelihood and impact of a variety of risks that could cause a disruption to your organisation. Risk What key functions / services would be impacted? List arrangements already in place to reduce the likelihood or impact List additional arrangements that could put in place Risk Score (Considering impact & likelihood) A, B, C or D Loss of staff Loss of systems (IT or telecommunications) Loss of utilities e.g. water, gas or electricity Loss of, or access to premises Loss of key suppliers Disruption to transport You will need to consider any additional risks that are relevant to your organisation. These could include flooding (particularly if you are in a flood risk area), fire, use of chemicals, breakdown of critical plant / equipment, etc
24 Produced by NORMIT and Norfolk County Council Resilience Team For an electronic copy of this document visit Telephone ~ or ~ Version 006
Business Continuity Planning Assistance for Young Enterprise Business Continuity Planning for small to medium-sized businesses This information will guide you through some steps that could help your business
>Insert Company Logo Here< >Insert Company Name Here< BUSINESS CONTINUITY PLAN Date Version Author Address Telephone (Landline/Mobile) E-mail Plan Approval Approved By (Please print) Signature Date Page
BUSINESS CONTINUITY MANAGEMENT A Guide for Businesses In Northamptonshire 1 What is Business Continuity? Business Continuity is a planning process which provides a framework to ensure the resilience of
Business Continuity Policy and Business Continuity Management System Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain
Business Continuity (Policy & Procedure) Publication Scheme Y/N Can be published on Force Website Department of Origin Force Operations Policy Holder Ch Supt Head of Force Ops Author Business Continuity
SOMERSET COUNTY COUNCIL [NAME OF SETTING] BUSINESS CONTINUITY PLAN TEMPLATE 2013 Setting Name Author Date Completed Date to be Reviewed Version Page 1 of 18 Update Log VERSION NO. DATE BY WHOM ACTION Any
BRENTWOOD BOROUGH COUNCIL BUSINESS CONTINUITY SERVICE RECOVERY PLAN FOR... PHOTO Responsibility for this Plan Designation Name Business Continuity Plan Holder... Managers with responsibilities under this
Business Continuity Management Policy Statement and Strategy November 2011 Title Business Continuity Management Policy & Strategy Date of Publication: Cabinet Council Published by Borough Council of King
Business Continuity Business Continuity Management Policy : Date of Issue: 28 January 2009 Version no: 1.1 Review Date: January 2010 Document Owner: Patricia Hughes Document Authoriser: Tony Curtis 1 Version
BUSINESS CONTINUITY MANAGEMENT FRAMEWORK Document Author: Civil Contingencies Service - Authorised by the CCS Joint Management Board - Version 1.0. Issued December 2012 Page 1 FRAMEWORK STATEMENT Business
WWW. BASILDON. GOV. UK A guide to Business Continuity Planning Would your business survive a crisis? FOREWORD The Civil Contingencies Act 2004 introduced a responsibility on all local authorities to raise
Business/ Organisation Name Business Continuity Management Plan Date: Distribution list: Copy No Issued to Amendment record: Issues No Date Amended By Completed by Signature Checked by Signature Page 1
Business Continuity Management Who knows what tomorrow may bring... Is your business prepared? www.clevelandemergencyplanning.info INTRODUCTION WOULD YOUR BUSINESS SURVIVE IN A CRISIS? During a major incident
BUSINESS CONTINUITY PLAN [Name of Team/Service/Organisation] [Insert Building Name and Address] [Insert date] Detailing arrangements for: Incident Management Business Continuity Recovery and Resumption
Business Continuity Management Policy Business Continuity Policy Version 1.0 1 Version control Version Date Changes Author 0.1 April 13 1 st draft PH 0.2 June 13 Amendments in line with guidance PH 0.3
BUSINESS CONTINUITY MANAGEMENT PLAN For Thistley Hough Academy Detailing arrangements for Recovery and Resumption of Normal Academy Activity Table of Contents Section Content 1.0 About this Plan 1.1 Document
SUSSEX LOC Promoting Business Continuity G R OUP S U SSEX LOCAL AUTHORITYEMERGENCY PLA NNING SUSSEX LOCALA UTHORITY EME RGEN CY P LANNING GROU P A L AUTHORITY EME RGENCY PLANNIN G GROUP Sussex Local Authority
SCHOOLS BUSINESS CONTINUITY PLANNING GUIDANCE This guidance is to be used as a tool to support you in your business continuity planning and aligns to the schools business continuity plan template provided.
Would Your Business survive a crisis? A guide to business continuity Planning. Emergency Planning in Partnership Page 1 A guide to Business Continuity Planning. The main objective of a Business Continuity
Force Policy & Procedure Reference Number Business Continuity Management D269 Policy Version Date 23 July 2015 Review Date 23 July 2016 Policy Ownership Portfolio Holder Links or overlaps with other policies
Corporate Business Continuity Plan Introduction The Council is a major business in the Town, and as part of its Quality Management System must ensure that it can recover quickly from a disaster which affects
BUSINESS CONTINUITY POLICY Last Review Date Approving Body n/a Audit Committee Date of Approval 9 th January 2014 Date of Implementation 1 st February 2014 Next Review Date February 2017 Review Responsibility
Business Continuity Management Standard Operating Procedure Notice: This document has been made available through the Police Service of Scotland Freedom of Information Publication Scheme. It should not
University of Glasgow Business Continuity Management Guidance Notes 1 Contents Page 1 Introduction to Business Continuity Management 3 2 Roles and Responsibilities 4 3 Business Impact Analysis 5 4 Developing
Department for Work and Pensions Departmental Business Continuity Framework Part 2 Working Guides Page 1 of 60 CONTENTS Guide to business impact analysis...3 Guide to business continuity planning...7 Guide
Business Logo Here BUSINESS CONTINUITY PLAN FOR SMALL TO MEDIUM SIZED BUSINESSES DATE :??? VERSION:?? PRODUCED BY DURHAM CIVIL CONTINGENCIES UNIT BUSINESS CONTINUITY PLAN LIST OF CONTENTS 1. DISCLAIMER...4
South Norfolk Council Business Continuity Policy 1 Title: Business Continuity Policy Date of Publication: TBC Version: 2 Published by: Emergency Planning Team Review date: April 2014 Document Owner: Document
How to Develop a BUSINESS CONTINUITY PLAN To print to A4, print at 75%. TABLE OF CONTENTS SUMMARY SUMMARY WHAT IS A BUSINESS CONTINUITY PLAN? CHAPTER PREPARING TO WRITE YOUR BUSINESS CONTINUITY PLAN CHAPTER
Business Continuity Planning We believe all organisations recognise the importance of having a Business Continuity Plan, however we understand that it can be difficult to know where to start. That s why
Policy No: RM66 Version: 3.0 Name of Policy: Business Continuity Planning Policy Effective From: 19/06/2014 Date Ratified 05/06/2014 Ratified Business Service Development Committee Review Date 01/06/2016
Emergency Response and Business Continuity Management Policy Owner: John Duffy, Registrar & Secretary Last updated: September 2012 Version: 04 Document control Date Version Author Changes To be populated
Leicester City Council Schools Business Continuity Incident Management Plan GLEBELANDS PRIMARY SCHOOL CHANCEL ROAD LEICESTER LE4 2WF OII6 234 0010 firstname.lastname@example.org -! 2 - UPATED 31 March
NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY AUTHOR/ APPROVAL DETAILS Document Author Written By: Human Resources Authorised Signature Authorised By: Helen Shields Date: 20
Public Protection [insert organisation name] Emergency Planning Unit Business Continuity Management Plan Contents Section Page 1. Aim of the plan 3 2. Objectives of the plan 3 3. Critical function checklist
Business Continuity Plan IMMEDIATE ACTIONS Manager/Supervisor 1. Ensure emergency services contacted 2. Ensure safety of personnel 3. Co-ordinate with the emergency services 4. Contact Senior members of
Agenda Item 8.3a SNCCG Governing Body 11.03.2014 Business Continuity Policy & Plans Ref Number: Version: 1 Status: Pending Approval Author: A Brown Approval body Governing Body Date Approved Date Issued
Plan Ref No: [INSERT NAME OF SCHOOL] BUSINESS CONTINUITY PLAN PLAN DETAILS Date Written Plan Owner Plan Writer Version Number Review Schedule 6 monthly Annually Date of Plan Review Date of Plan Exercise
INTRODUCTION BUSINESS CONTINUITY GUIDE FOR SMALL BUSINESSES Organisations that have a business continuity capability are far more likely to survive the effects of a major incident than those that don t.
Business Continuity Planning advice for Businesses with over 250 employees Where to begin? You can compose an effectual business continuity plan in a relatively short period and for little expenditure.
Don t gamble with your business prepare for survival Businesslike, efficient and customer aware This guide will help you to identify potential risks, make preparations for emergencies and test how your
NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy Version 1.0 Document Control Title: Status: Version: 1.0 Issue date: May 2014 Document owner: (Name,
PROMOTING BUSINESS CONTINUITY Greater Manchester Local Authority Business Continuity Group What is Business Continuity? Business Continuity is a planning process, which provides a framework for ensuring
Appendix L DISASTER RECOVERY AND CONTINGENCY PLANNING CHECKLIST FOR ICT SYSTEMS I. GETTING READY A. Obtain written commitment from top management of support for contingency planning objectives. B. Assemble
REPORT TO CABINET TO BE HELD ON 15 SEPTEMBER 2015 Key Decision No Forward Plan Ref No 23K Corporate Priority The proposals in this report contribute to the delivery of all the Council s priorities Cabinet
How would your business cope if an emergency evacuation was needed and you couldn t return for a week, or it suffered a serious flood? What would you do if a staff syndicate quit their jobs after winning
Birmingham CrossCity Clinical Commissioning Group Business Continuity Management Policy Version V1.0 Ratified by Operational Development Group Date ratified 6 th November 2014 Name of originator / author
Business continuity strategy 2009 2012 Table of contents 1 Why this strategy is needed 3 2 Aim of the strategy 4 3 Our approach to business continuity 4 PROCESS 4 STRUCTURE 5 DOCUMENTATION 6 DISRUPTION
Business Logo or Name here BUSINESS CONTINUITY PLAN FOR RESIDENTIAL CARE HOMES PRODUCED BY DURHAM CIVIL CONTINGENCIES UNIT BUSINESS CONTINUITY PLAN LIST OF CONTENTS 1. DISCLAIMER...4 2. AIM...4 3. BUSINESS
Business Continuity Policy Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain its essential business functions during
CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT JANUARY 2008 GUIDELINE ON BUSINESS CONTINUITY GUIDELINE CBK/PG/14
disaster recovery and contingency plan RISK MANAGEMENT MADE TO MEASURE INTRODUCTION Contingency planning for business continuity (business continuity management) is defined by the Institute of Business
Business Continuity Management Understanding Risk We live in an unpredictable world. No matter how effectively a business protects itself through insurance, there are some risks that cannot be anticipated,
Top Tips On Disaster Recovery Would you be able to recover if your business suffered a major incident that affected trading? Fires, floods, gas explosions, terrorist attacks, theft and sabotage could all
Information on business continuity plans for businesses with 10 or fewer employees You will find that it is quick, easy and inexpensive to create a business continuity plan. This is a basic five-step guide
BUSINESS CONTINUITY POLICY RM03 Applies to: All NHS LA employees, contractors, secondees and consultants, contractors and/or any other parties who will carry out duties on behalf of the NHS LA Version:
BUSINESS CONTINUITY PLAN A GUIDE TO PREPARING A PLAN FOR SMALL TO MEDIUM SIZED BUSINESSES PREPARED BY DEVON COUNTY COUNCIL EMERGENCY PLANNING SERVICE CONTENTS 1. DISCLAIMER...3 2. BACKGROUND...3 3. METHODOLOGY...3
business continuity plan for: Insert your company name here Our statement of Business Continuity is: > To ensure all employees are competent to do their tasks, and to provide adequate training > To review
Business Logo or Name here BUSINESS CONTINUITY PLAN FOR PERSONAL CARE PROVIDERS TEMPLATE PREPARED BY DEVON COUNTY COUNCIL EMERGENCY PLANNING SERVICE BUSINESS CONTINUITY PLAN LIST OF CONTENTS 1. DISCLAIMER...
INFORMATION SECURITY: UNDERSTANDING BUSINESS CONTINUITY MANAGEMENT FACTSHEET This factsheet will introduce you to Business Continuity Management (BCM), which is a process developed to counteract systems
Business Continuity - IT Disaster Recovery Discussion Paper - - Version V2.0R Wednesday, 5 September 2012 Commercial in Confidence Melbourne Sydney 79-81 Coppin St Level 2 Richmond VIC 3121 414 Kent St
Principles for BCM requirements for the Dutch financial sector and its providers. Platform Business Continuity Vitale Infrastructuur Financiële sector (BC VIF) Werkgroep BCM requirements 21 September 2011
BUSINESS CONTINUITY MANAGEMENT POLICY AUTHORISED BY: DATE: Andy Buck Chief Executive March 2011 Ratifying Committee: NHS Rotherham Board Date Agreed: Issue No: NEXT REVIEW DATE: 2013 1 Lead Director John
GLEBE ACADEMY BUSINESS CONTINUITY PLAN To be used in conjunction with the Major Incident Policy and the Major Incident Emergency Kit The Governing Body of Glebe Academy recognises the need to have a Business
EMERGENCY PREPAREDNESS PLAN Business Continuity Plan GIS Bankers Insurance Group Powered by DISASTER PREPAREDNESS Implementation Small Business Guide to Business Continuity Planning Surviving a Catastrophic
Business Continuity Plan Guidance and Template to support Small Businesses Disclaimer This template and guidance is provided as general information about Business Continuity Planning. It is not intended
Business Continuity Planning Assessment www.cheshirefire.gov.uk Every business is at risk of disruption from a variety of threats, as well as fire, these threats can include flood, loss of power or even
Business Continuity Planning Manual Version 1 Business Continuity Planning for NHS Organisations Business Continuity Planning Manual CONTENTS INTRODUCTION... 1 BACKGROUND... 3 1. SCOPE, AIMS AND OBJECTIVES...
What is a COOP? Continuity of Operations Planning A step by step guide for business A Continuity Of Operations Plan (COOP) is a MANAGEMENT APPROVED set of agreed-to preparations and sufficient procedures
Aberdeen City Council Internal Audit Report 2012/2013 for Aberdeen City Council May 2013 Business Continuity Business Impact Analysis arrangements Final Report Contents Section Page 1. Executive Summary
Solihull Clinical Commissioning Group Business Continuity Policy Version v1 Ratified by SMT Date ratified 24 February 2014 Name of originator / author CSU Corporate Services Review date Annual Target audience
Business Continuity Is your Business Prepared for the worse? Major emergencies can develop suddenly without warning. Situations can threaten and disrupt your business and impact upon you and your staff.
BS 25999 BUSINESS CONTINUITY MANAGEMENT AUDIT, CERTIFICATION & training services HOW CAN YOU ENSURE BUSINESS CONTINUITY? BS 25999 AUDITS & CERTIFICATION FROM SGS Most organisations will, at some point,
BUSINESS CONTINUITY PLANNING THE 10-MINUTE ASSESSMENT BUSINESS CONTINUITY PLANNING - THE 10 MINUTE ASSESSMENT This is a quick assessment for you to see how far you have got with business continuity planning.