Education, education, education
Many organisations get hung up on the goal of producing "the plan" as the be-all and end-all of their business continuity project.
But the plan itself won’t save the business in the event of a disaster. What will save the business is the right people making the right decisions and performing the right actions at the right times. The purpose, albeit vital, of the incident management and recovery plans is to provide supporting information to this process.
If the right people don’t know who they are, or what they need to do, or what’s actually in their plan, or what issues they may come up against when they invoke it, recovery will at best be severely hampered and at worst may not happen at all.
"The plan" should therefore be seen as merely the documented presentation of management competence. The importance of training and awareness, and exercising of the plans and the people involved, cannot be over-emphasised.
It therefore follows that a significant amount of effort needs to go into the education process – an important point that is, sadly, often overlooked.