Professional Documents
Culture Documents
Business
continuity plan
[ORGANISATION NAME]
[DATE]
1. Introduction....................................................................................................................... 3
2. Priorities and responsibilities for [ORGANISATION NAME]..............................................3
3. Key risks and minimisation measures...............................................................................5
3.1. Assumptions.............................................................................................................. 5
3.2. Disaster events......................................................................................................... 5
3.2.1. Loss of technology............................................................................................ 7
4. Roles and responsibilities................................................................................................. 8
5. Emergency recovery process............................................................................................ 9
5.1. Activate the Emergency Evacuation Procedures......................................................9
5.2. Activate the Business Continuity Plan.......................................................................9
5.3. Manage staff's immediate concerns (during business hours)..................................11
5.4. Letting staff know about the emergency (outside normal business hours)..............12
6. Business recovery process.............................................................................................13
6.1. Set up the business recovery office (temporary off-site location)............................13
6.2. Communication priorities and processes................................................................14
6.3. Reinstate services at the office...............................................................................16
7. Business continuity plans for ICT....................................................................................17
7.1. Payroll..................................................................................................................... 17
7.2. Email....................................................................................................................... 17
7.3. Network (including file & print) & remote access.....................................................19
7.4. Phones – landlines.................................................................................................. 20
7.5. Phones – mobile..................................................................................................... 21
7.6. [Specialist application] and accounting systems.....................................................22
7.7. Website................................................................................................................... 22
8. Emergency delegations list............................................................................................. 23
9. Contact lists.................................................................................................................... 24
9.1. Staff call tree........................................................................................................... 24
9.2. Staff, supplier, and stakeholder contact lists...........................................................25
Document control
Revision history
Revision Date Author Reason for change
410403839.docx Page 2 of 25
[Organisation name] business continuity plan
Under each chapter heading you’ll see a description in italics of what the section is intended
to cover, then some sample text that you can adapt to match your organisation’s needs – text
under each heading is designed to be an example, and should be replaced by information
relevant to your organisation.
Wherever [ORGANISATION NAME] appears in text it should be replaced with the name of
your organisation. Wherever [TIME FRAME] appears, you should replace it with the time
frame after a disaster at which your business operations will be severely disrupted. Whenever
[POSITION NAME] appears, replace it with the appropriate position title for your organisation.
Italicised text can be deleted once you’ve finished filling out the document.
1. Introduction
The business continuity plan has been developed to minimise disruption to [ORGANISATION
NAME] services in times of crisis. It lays out what the business should do if normal business
activities cannot be continued due to a disabling event such as loss of technology, the
building or a large proportion of staff.
During an emergency these are the priorities and responsibilities for the [ORGANISATION
NAME].
410403839.docx Page 3 of 25
[Organisation name] business continuity plan
General All [ORGANISATION NAME] staff are safe and accounted for.
In order to ensure the safety of our clients during a civil emergency, and
continuing provision of services for them, [ORGANISATION NAME] will
[insert text here].
410403839.docx Page 4 of 25
[Organisation name] business continuity plan
Because [ORGANISATION NAME] operates from a single office, it is possible that the whole
of the [ORGANISATION NAME]’s core business could be disrupted.
Business support system failure could disrupt business, but the assumption is that serious
disruption is not likely to occur until at least after [TIME FRAME]. The business continuity
plan takes this into account.
This plan concentrates on the events that are most likely to occur. These three events (in
order of impact) are:
1. Loss of office building (e.g. earthquake, fire)
2. Loss of office building functions (e.g. electricity, gas, flood)
3. Loss of technology:
a. Payroll
b. Email
c. Network (including file and print) and remote access
d. Phones – landlines
e. Phones – mobile
f. Client/whānau management system
g. [other specialist applications]
h. Financial system
i. Website
j. Loss of building/functions
Think about the likelihood and effect of each of those and graph them below. The top graph
show options which are just examples; add your own examples to the bottom graph then
delete the top one.
The graph below shows the relative impact and likelihood of possible disaster events.
410403839.docx Page 5 of 25
[Organisation name] business continuity plan
High
Likelihood
Low
Low High
Extent of impact
For each of your main risks, think about how you would respond, then draw up a table like
that below. You will need to determine what constitutes a short-term and long-term
410403839.docx Page 6 of 25
[Organisation name] business continuity plan
interruption for your organisation and add those in the spots where it says TIMEFRAME. Text
below is just an example.
A key risk for staff is inability to access or leave the office building. Departure or access may
be denied as a result of transport failure, nature (e.g. floods, earthquake), personnel or
political reasons.
The key response for responding to inability to depart or access the building is outlined
below. Specific instructions for particular issues are detailed in the specific business
continuity plans (see Section 7).
Characteristics Risk Action for short Action for long term interruption
of interruption asses term interruption More than More than
sment (up to [TIMEFRAME] [TIMEFRAME]
rating [TIMEFRAME]) (less than
Recovery [TIMEFRAME])
Location Recovery location Recovery location
No access to the med Staff to relocate to
[general area – This would be a civic emergency and business recovery
e.g. beyond the business continuity plan office
Christchurch]
Staff unable to low-
leave the office med
building
No access to the med Staff work off-site or remain at home Staff to relocate to
[city or town the business recovery
office is in – e.g. office
Christchurch
CBD]
No access to the med- Staff work off-site or remain at home Staff to relocate to
block on which low business recovery
office is located office
410403839.docx Page 7 of 25
[Organisation name] business continuity plan Roles and responsibilities
410403839.docx Page 8 of 25
[Organisation name] business continuity plan
This document is published under a Creative Commons Attribution – Non-commercial licence 3.0 New Zealand. You can share and adapt it, but not for
commercial purposes. The full licence is here.
410403839.docx Page 9 of 25
[Organisation name] business continuity plan
This document is published under a Creative Commons Attribution – Non-commercial licence 3.0 New Zealand. You can share and adapt it, but not for
commercial purposes. The full licence is here.
410403839.docx Page 10 of 25
[Organisation name] business continuity plan
You will need to [POSTION NAME eg [POSITION NAME] use 1 Note the physical location of all staff - confirm who
manage your staff The Department the following was due to work today, who is on leave, who is not
during an emergency to Managers] procedures to manage accounted for.
ensure they are safe, staff after the
kept informed and Emergency Evacuation
scheduled for work or Procedures have been
released to go home. completed.
2 Ensure that staff are congregated in a central
location and have been given access to telephones
to advise family they are safe. Check that food &
beverages have also been provided.
3 Liaise with the [POSITION NAME] to organise
private counselling and transport when and where
necessary.
4 Send home those staff who are not required with
instructions when they will be contacted to advise of
any change and when/where to return to work.
5 Provide regular updates as advised by the BCM.
(use staff call tree in section 9.1)
This document is published under a Creative Commons Attribution – Non-commercial licence 3.0 New Zealand. You can share and adapt it, but not for
commercial purposes. The full licence is here.
410403839.docx Page 11 of 25
[Organisation name] business continuity plan
5.4. Letting staff know about the emergency (outside normal business hours)
There is a call tree that determines who calls who in an emergency – see 9.1. This tree shows the first contact point and all the contact points after that.
This document is published under a Creative Commons Attribution – Non-commercial licence 3.0 New Zealand. You can share and adapt it, but not for
commercial purposes. The full licence is here.
410403839.docx Page 12 of 25
[Organisation name] business continuity plan
This document is published under a Creative Commons Attribution – Non-commercial licence 3.0 New Zealand. You can share and adapt it, but not for
commercial purposes. The full licence is here.
410403839.docx Page 13 of 25
[Organisation name] business continuity plan
This document is published under a Creative Commons Attribution – Non-commercial licence 3.0 New Zealand. You can share and adapt it, but not for
commercial purposes. The full licence is here.
410403839.docx Page 14 of 25
[Organisation name] business continuity plan
This document is published under a Creative Commons Attribution – Non-commercial licence 3.0 New Zealand. You can share and adapt it, but not for
commercial purposes. The full licence is here.
410403839.docx Page 15 of 25
[Organisation name] business continuity plan
This document is published under a Creative Commons Attribution – Non-commercial licence 3.0 New Zealand. You can share and adapt it, but not for
commercial purposes. The full licence is here.
410403839.docx Page 16 of 25
[Organisation name] business continuity plan
7.1. Payroll
Core business Characteristics of Short term (Up to Long term (More than
functions interruption [TIMEFRAME]) [TIMEFRAME])
Payroll No access to building Arrange with the the Technology Advisor to
& no access Payroll [??? Bank] to arrange for Payroll
system. process the same software & backups to be
payments as the installed on a standalone
previous pay run. PC.
Access to building Arrange with the the Technology Advisor to
but no access to [??? Bank] to arrange for Payroll
Payroll system process the same software & backups to be
payments as the installed on an alternative
previous pay run. PC.
7.2. Email
Core business Characteristics of Short term (Up to Long term (More than
functions interruption [TIMEFRAME]) [TIMEFRAME])
Delivery of email No access to building Technology Advisor Collect backup tapes
and Exchange server will advise ISP from off site storage.
down (Actrix).
Purchase/borrow server
Accounts will be and rebuild.
setup for accessing
email via webmail if
the outage is
extended.
(After 5 days of
holding email, Actrix
return email to
sender.)
(Domain Control
services on
Exchnage server
automaticaly taken
over by BDC on the
Terminal Server)
410403839.docx Page 17 of 25
[Organisation name] business continuity plan
410403839.docx Page 18 of 25
[Organisation name] business continuity plan
IT assist staff to
access the new
configuration.
410403839.docx Page 19 of 25
[Organisation name] business continuity plan
Install a temporary
phone system
410403839.docx Page 20 of 25
[Organisation name] business continuity plan
410403839.docx Page 21 of 25
[Organisation name] business continuity plan
7.7. Website
Core business Characteristics of Short term (Up to Long term (More than
functions interruption [TIMEFRAME]) [TIMEFRAME])
Website Website not working Technology Advisor If website is unrepairable,
to contact website work with current or new
suppliers ([names of suppliers to recreate
supply orgs]). website from backups or
redevelop
Website suppliers to
attempt repair of
website.
410403839.docx Page 22 of 25
[Organisation name] business continuity plan
410403839.docx Page 23 of 25
[Organisation name] business continuity plan
9. Contact lists
9.1. Staff call tree
The flow chart below describes who is responsible for calling who, in the event of an
emergency and to keep in contact with staff. Someone should hold each of the positions in
the left-hand boxes; the other boxes should be filled in to suit your organisation, making sure
all staff are accounted for.
[???]
[POSITION TITLE
* Business
eg CEO]
Recovery Office
Manager
* Technology
advisor
* Commun-ication [POSITION TITLES]
Contact Role [POSITION TITLE For example:
eg Deputy CEO] Consultant - Marketing & Comms
Consultant – IT
Any other [ORGANISATION NAME]
consultants
[POSITION TITLES]
CRO (Chief
Review Officer) [POSITION
TITLE]
[POSITION TITLES]
[POSITION
TITLE]
410403839.docx Page 24 of 25
[Organisation name] business continuity plan
The staff, supplier, client and stakeholder contact lists will be maintained by the Receptionist
and Executive Manager.
The contact lists are kept in a single spreadsheet on the I drive, in the following location:
I:\_RECEPTION_\_Contact Lists
The file is called:
Contact Details.xls
Every two months, at the beginning of the month, the Receptionist will email the spreadsheet
to all staff and [ORGANISATION NAME] consultants to both their [ORGANISATION NAME]
and personal email addresses.
The four contact lists are published in this plan as the last pages.
410403839.docx Page 25 of 25