Business Continuity Tip of the Month   -  April 2016

What’s the use?

It may come as a shock to some – particularly those who championed or funded the development of their organisation’s business continuity plan – but, despite the time and effort spent on them, most ¬†plans won’t work.

Because most business continuity plans aren’t designed to actually be used. They’re designed to pass an audit. So they’re crammed full of all the peripheral stuff that an auditor, quite reasonably, wants to see to prove that you’ve done things “properly”. Which means there are often several dozen pages of scope, objectives, policy, assumptions, version control, maintenance, testing, business impact analysis, risk assessment and goodness knows what else before you get anywhere near the bit that actually helps you to deal with the crisis/incident/disaster/emergency (delete as applicable) that you’re faced with. Does this sound familiar?

But we have to include all of that stuff in order to pass the audit, don’t we? Well, to an extent, that’s true – it probably has to be documented somewhere. The question is, where?

One option is to write two plans – one for the auditor and one for the people who might actually have to use it in anger. But that would almost certainly result in some duplication of effort, not to mention some awkward questions from said auditor.

A better option is to simply remove all of the peripheral information and put it into a separate document, which forms part of your overall business continuity management system. That way those called upon to put the plan into operation might actually be able to find the stuff they need, when they need it, rather than ploughing through pages and pages of “stuff” first. Or, worse still, ignoring the plan completely, at precisely the time that it should be of most use.

 


Subscribe

Did you know that Acumen’s Consultancy Director, Andy Osborne, publishes an expert tip each month for people with an interest in developing a business continuity capability?

Why not subscribe now and have Andy’s ‘Tip of the Month’ delivered to your inbox.

Andy also writes the occasional blog, which is somewhat more light-hearted, but with a serious business continuity message. Subscribe to ‘Oz’s Blog’ instead and receive an email notification when Andy posts a blog, in addition to the Tip of the Month emails.

 

Please note that by submitting this form you are opting in to allow us to use your information to contact you and to store and handle your information as per our Privacy Policy