Industry: E-commerce (Online retail)

Business: An online retail business selling clothing and accessories

Business Continuity Plan (BCP) Checklist

Category 1: IT Infrastructure and Systems

1. Use an advanced IT system/antivirus software to detect and prevent potential cybercrimes and
threats besides ensuring the IT applications are stored in a secure site and backed up frequently
to prevent loss of important information/data. An example of the antivirus software is firewall
which prevents unauthorized access to the network.

2. Ensure safety of data through restoration of critical IT systems and applications for data recovery
and safe restoration procedures. In addition, ensure system restoration and data recovery test is
done regularly.

3. Develop a communication plan which immediately notifies customers, employees and other
stakeholders in case of IT system failure. The plan should also implement a multi-factor
authentication to ensure only authorized personnel are allowed to access the systems.

4. Regularly update the systems to ensure they are up to date and ensure the customers’ data are
secure in the event of breach.

Category 2: Customer Communication and Service

1. Have an effective communication plan with customers in relation to orders made, deliveries and
any issue which may need to be addressed. Ensure the plan handles customers inquires and
complains which may arise in event of service disruptions

2. Establish a communication protocol or process to manage customers complains including

implementation of alternative communication channels in the event of system failure or
disruptions.

3. Ensure effective communication to customers on the status of their orders, including delays or
disruptions of shipments.

4. Have multiple channels of communication. These systems/channels include social media pages,
emails, telephone numbers among others.

5. Install a communication system in place whereby customers can track their orders, inquires and
complains presented and the management can effectively resolve the issues promptly.

6. Ensure there is a plan to safely and securely safeguard customers information in compliance with
relevant bodies and regulation practices.

7. Ensure clear and accurate information is well-known to the customers and employees in charge
regarding the business policy in terms of refund policy, exchanges, refunds and defect goods.

8. Ensure there are alternatives in store in the event a specific commodity is out of stock/out of the
market.
Category 3: Supply Chain Management

1. Identify important suppliers and stakeholders that are crucial for effective operation of the
business (e.g., logistic providers, manufacturers, and distributors).

2. Identify potential supply chain disruptions through conduction of risk assessment (e.g., natural
disasters, transport disruptions, and labor strikes).

3. Ensure the right communication protocols are implemented with the suppliers in order to stay
informed about potential disruptions and work as a team to solve them.

4. Develop contingency plans to curb supply chain disruptions (e.g., backup logistics personnel and
establishment of secondary suppliers).

5. Have a business impact analysis in place to evaluate the potential impact of supply chain
disruptions on various parties (e.g., the customers, business operators, and financials).

6. Test the supply chain continuity plan to ensure it is effective and up to date through conduction
of mock drills in order to identify the weaknesses and any gaps present which are necessary in
order to make adjustments.

7. Maintain a good relationship with key suppliers to ensure they are able to work with you during
a disruption (e.g., by paying up on time/on the agreed date, picking up goods on time).

Category 4: Employee Safety and Well-being

1. Develop a plan for managing employee safety and well-being during a disruptive event, including
providing training on emergency procedures and identifying potential hazards.

2. Ensure that there are clear instructions for employees on how to report incidents, including
escalation procedures and contact information.

3. Develop a plan for managing employee absences during a disruption, including adjusting
schedules and reassigning duties as needed.

4. Have a plan in place to ensure the safety and well-being of employees during a disruption or
emergency situation, such as a natural disaster or pandemic.

5. Provide clear and concise guidelines and instructions on how to respond to emergency
situations, including evacuation procedures and first aid protocols.

6. Provide necessary personal protective equipment (PPE) to employees, such as gloves, masks,
and hand sanitizer, to ensure their safety and prevent the spread of infectious diseases.

Category 5: Financial Management

1. Identify critical financial functions: Identify the financial functions critical to your business
operations, including accounts payable and receivable, payroll, and cash management.
 2. Establish backup procedures: Develop backup procedures to ensure that you can continue to
manage financial transactions in the event of a disruption. For example, establish a secondary
system for processing payments and invoices.

3. Identify financial risks: Identify potential financial risks to your business, such as credit risk and
liquidity risk. Develop contingency plans to mitigate these risks, such as setting up lines of credit
or increasing cash reserves.

4. Establish communication protocols: Establish communication protocols with your financial

partners, including banks, credit card companies, and accounting firms, to ensure that they are
aware of any disruptions and can work with you to manage financial transactions.

5. Test your financial continuity plan: Regularly test your financial continuity plan to ensure that it is
effective and up-to-date. Conduct mock drills to identify any weaknesses or gaps in your plan
and make necessary adjustments.

6. Maintain adequate insurance coverage: Ensure that your business has adequate insurance
coverage to protect against financial losses resulting from disruptions, such as business
interruption insurance, cyber insurance, and liability insurance.

7. Develop a cash flow plan: Develop a cash flow plan to ensure that your business can continue to
operate in the event of a disruption. This plan should include an analysis of your current and
projected cash flows, as well as strategies for managing cash flow during a disruption.

8. Train staff: Train your staff on the importance of financial continuity planning and the steps they
can take to support financial management during a disruption. This includes ensuring that staff
understand their roles and responsibilities, and have access to the tools and resources they need
to manage financial transactions.

Category 6: Cybersecurity and Data Protection

1. protected, such as customer information, financial data, and website functionality.

2. Conduct a risk assessment: Conduct a thorough risk assessment to identify potential

cybersecurity threats, such as malware, hacking, and phishing attacks, and evaluate the impact of
these threats on your business.

3. Establish cybersecurity protocols: Develop cybersecurity protocols to protect your business from
cyber threats. This includes establishing secure passwords, regularly updating software, and
implementing encryption protocols.

4. Develop data backup and recovery procedures: Develop data backup and recovery procedures to
ensure that you can recover critical data in the event of a cyber attack or data breach. This
includes implementing cloud-based backup solutions and conducting regular backups.

5. Establish incident response protocols: Develop incident response protocols to ensure that your
team knows how to respond in the event of a cyber attack or data breach. This includes
establishing a clear chain of command, defining roles and responsibilities, and creating
communication protocols.
6. Train staff: Train your staff on cybersecurity best practices, including how to recognize and
respond to cyber threats, and how to protect sensitive data.

7. Regularly test your cybersecurity plan: Regularly test your cybersecurity plan to ensure that it is
effective and up-to-date. Conduct mock drills to identify any weaknesses or gaps in your plan and
make necessary adjustments.

8. Keep software up-to-date: Keep your software up-to-date with the latest security patches and
updates to prevent vulnerabilities that could be exploited by cybercriminals.

9. Use secure payment gateways: Use secure payment gateways to ensure that customer financial
data is protected during transactions.

10. Maintain adequate cyber insurance coverage: Ensure that your business has adequate cyber
insurance coverage