Rudolph the red-faced business continuity manager (a Christmas tale – sort of!)
Once upon a time there was a senior manager called Rudolph who, on top of his many other responsibilities, was put in charge of the business continuity project. Rudolph was a busy chap with a lot on his plate. He didn’t have time for detail. And anyway, disasters never happen do they? Well, only to other people.
So, rather than doing any proper analysis, or thinking about strategies or solutions, he leapt straight into plan-writing. He wrote a lovely looking plan and it didn’t take him long at all really. He had to make a few assumptions, in order to get it done so quickly, but that was ok. Except he didn’t bother to validate any of those assumptions.
Neither did he bother to brief or train the incident management or recovery teams or exercise their plans or even tell anyone about them – no need, disasters never happen do they? Job done. A tick in the box. Sorted. Now on to more important stuff.
Then one foggy Christmas eve, an electrical fault caused a huge fire and the company’s factory and head office were gutted. Rudolph was called out in the middle of the night to invoke his business continuity plan. His chance had come to shine.
The trouble was, his assumptions about recovery time and recovery point objectives were flawed, as were his assumptions about critical processes, IT requirements vs. achievable recovery times, plant and equipment availability, people’s willingness to drop everything and rush to his aid and the ability to set up and equip a new factory, office and computer room in anything like acceptable timescales. In fact, none of the assumptions on which his plan was based were actually valid.
The upshot was that the business failed to recover and not long into the New Year it ceased trading. Rudolph went down in history all right – as the bloke whose business continuity plan wasn’t worth the paper it was written on!
Don’t be a Rudolph. If you’re embarking on a business continuity programme, do at least try to get the groundwork right. Or if you already have a mature business continuity management system in place, do revisit the analysis and the strategy and validate the underlying assumptions from time to time.