Business Continuity Planning (BCP) / Disaster Recovery (DR)
We know the unfortunate damages and interruptions the earthquakes in Christchurch caused businesses but how would your business cope? What if a gas leak caused your building to be evacuated for 2 days? How would you work if disaster stuck and you couldn't access your office? Would you need access to files and information to keep working? How long can you survive with no email – or no phone?
These are some situations that a business continuity plan will help you prepare for. Business Continuity Plans are sometimes referred to as Disaster Recovery Plans (DRP) and the two have much in common. However a DRP should be oriented towards recovering after a disaster whereas a BCP shows how to continue doing business until recovery is accomplished. Both are very important and are often combined into a single document for convenience.
You can then minimise the interruption to your business or worst case, save your business from going under. Such a plan is simply to help you look at your exposure and have a strategy if disaster strikes.
We have heard about the earthquakes, floods in Australia and Tsunami in Japan. But what about careless tenants next to you? Â IT outages or a contractual breach? What if your Internet went down for 10 hours or an employee stole important information? How would you deal with these situations?
For many businesses a few hours out of action is frustrating but may not be significant. However for some businesses this can be a significant issue. The cause of the disaster may vary, however the need to be prepared and know how to respond is the same. Small businesses face the same risk as large businesses or worse if they cannot recover their data and costs.
BCP is about protecting your data. You can insure your server and computer but you can’t buy insurance for your data. That is your responsibility. So often we see businesses with no backup (or an inadequate backup solution) putting them at real risk. It’s so vital, for most businesses because if you lose your data you may lose your business. In addition to losing data you could risk losing money, opportunities, staff, wages, stock and perhaps getting bad publicity and legal penalties.
Research suggests 80% of downtime is from problems caused by mistakes by people. Your best protection against these issues is to have a Business Continuity Plan, which is understood by everyone and reviewed regularly.
So how do you write a Business Continuity Plan (BCP)?
Creating a plan is quite simple but some experience does help immensely. Ask what you would do if you didn’t have your database, or files or customer information? What impact would it have if you lost your internet connection for a few days? What would you do if a virus made your computer unusable o deleted data? What if you accidentally deleted your hard drive or it crashed, how would you get it back and how quickly would you need it restored?
We can help build your plan, identify systems (computer based and manual) and the level of impact, priority and the steps required in each area of your plan. Actions to consider may include if staff can work from home? How? What will they need - remote access? Does your system have that capability? How will you connect with staff and clients (what if you don’t have phone or email)? Who will call who to advise them of procedures/decisions? How will you handle the press or any other enquiries?
Ask yourself if you are prepared to temporarily relocate? Do you have access to vital applications? How long could you be with no connection to your customers and what is the impact?
Some actions can really be quite simple and we can advise on this. The benefit is in having a plan so you know what has to be done in the stressful time of a disaster.
Your plan should identify how much data you can afford to loose. For example, could you use yesterdays or last week’s backup? You also need to assess for how long you can survive without access to data or information. How long can you conduct business without email, or without computers – or without access to your office?
Other tasks you can do to protect your business and data
- Develop and educate staff with your plan and test your BCP restoration procedures
- Have your critical data offsite and geographically distant (e.g. Auckland and Wellington or Brisbane)
- Work out all your costs of downtime and set a disaster plan budget
- Select the right technology – tape backup is reliable but slow to recover
- Enable staff to easily recover deleted data themselves
It seems a timely reminder to check your plans. If you are interested in further information, of you would like to discuss creating your own plan please call us and speak with David.
How to Create your BCP Plan. 