According to FEMA, “Following a disaster, 90% of smaller companies fail within a year unless they can resume operations within 5 days.”[1]
Disaster recovery and business continuity plans will always make a difference when the worst happens. You can’t predict a disaster, but you can prepare to survive it with effective plans that are designed for your business. If your current plans are outdated or nonexistent, it’s time to develop new ones.
It’s important to understand that although disaster recovery plans and business continuity plans are considered by some to be one and the same, they each have a specific role in resuming business operations. Disaster recovery focuses on restoring the data, software applications and infrastructure that support business functions. Business continuity focuses on resuming operations with minimal disruption when a disaster occurs.
Separate plans, overlapping goals
Disaster recovery planning starts with an assessment of what’s needed to recover from a disaster: what’s required to restore access to data, infrastructure, applications, and hardware.
Business continuity planning starts with an assessment of the business processes to figure out which functions are critical to operations. For example; at the start of the COVID-19 pandemic, for many businesses it was the ability for their staff to securely work from home but still maintain contact with suppliers, partners and their customers.
The elements of each plan defines the recovery instructions and organizational procedures for the entire company. Written details and business functions are prioritized, and IT processes necessary to restore operations are developed.
Additionally, these plans should include steps and processes to prevent avoidable disasters, mitigation processes to reduce the impact of disasters where possible, and protocols that allow for restoration of operations as quickly as possible.
Test for success
To be sure the plans meet their objectives, they need to be tested:
- Table-top sessions – conference roundtable represented by each business unit.
- Walk-throughs – representatives from each area preview the plan for accuracy.
- Simulations – virtual or live run throughs of the plan.
Test teams are looking for strengths and weaknesses in the plan. The teams should be a mix of managers and workers who bring different perspectives from each business unit.
Maintenance required
Once the plans are approved, it’s essential to establish a schedule for re-testing the plan. Why? Because business practices and technology both change. At least once a year, bring key personnel together to review the plan and modify it to the current business functions and IT processes.
If you would like to see how Ramsey Consulting Services can help your company or organization develop disaster recovery and business continuity plans, contact us today.
