Emergency Preparedness And Business Continuity Planning Go Hand In Hand

Emergency Preparedness includes planning and training and taking proactive action to be ready to do what needs to be done to ensure survival and safety, in case of an unplanned emergency or disaster.  Emergency Preparedness is important for families and communities as well as organizations. 

Business Continuity Planning (BCP) focuses on taking proactive steps to ensure the viability of a business during and after a time of unplanned emergency or disaster.  This a goes above and beyond IT disaster recovery, as the focus of IT disaster recovery is to restore IT systems and data but does not address other aspects of the business.

The bottom line is that without Emergency Preparedness for people, families and communities, effective Business Continuity Planning is not possible.  If people are faced with serious challenges threatening their survival and/or their family, these resources are not available to support BCP.  For the vast majority of human resources (i.e. people / employees) supporting a business, their first commitment will be to their families, households and communities.  The human issues relating to Business Continuity and Disaster Recovery should never be overlooked.  These must be proactively addressed as part of a comprehensive strategy to mitigate risks of unforeseen events.

To ensure the viability of your BCP, it is critical that the human factors are considered in the form of Emergency Planning for the people, families and communities potentially impacted. ​

​A Business Continuity Plan (BCP) is a roadmap to enable a business to continue operations under adverse conditions, such as an unforeseen disaster or other unplanned interruption to the business.  This includes:

• Natural Disasters, such as: bad weather, flooding, earthquake, disease, etc.
• Man-made business interruptions, such as: labor strikes, power outages, arson, theft, terrorism, trade embargo, etc. 
• Any other identified risk to the business, such as: critical supplier closes their doors unexpectedly. 

Business continuity planning is a process of identifying the potential risks to your business and then evaluating how to prepare for these so that if they do happen, your business can continue to be viable.  This means that you are still able to operate at some level needed to meet customer needs and to be able to resume normal operations at a defined point in the future.  Lack of adequate BCP means that a disaster could put you out of business permanently.

This is not the same thing as IT disaster recovery.  IT disaster recovery involves making sure your IT systems can continue to function and your data is still available in the event that your primary systems go down; if a fire wipes out your server room for example or a massive blackout disables your primary network routers.  Typically your IT service provider will provide you with options for backup hosting at other sites as part of Disaster Recovery Planning (DRP).  Large companies with big IT departments in different locations can manage DRP internally by having backup servers at different sites. 

DRP is an important part of BCP, but BCP goes beyond just IT systems and looks at the entire business structure.  It is critical that the IT system continue to function after a disaster, but if there is no one available or able to use these systems then how will the business continue to operate?  BCP seeks to answer the big-picture questions such as:

• In the event of a disaster where will your people work from?  
• If downed trees and power lines cut off major roadways needed for distributing your product what will you do?  
• If a swine flu outbreak keeps 3/4 of your staff at home can your business still function?  

This is what BCP looks at; being prepared for the unplanned interruptions.  Making advanced preparations just in case of disaster is good business, but it does involve some cost, which can be significant.  This is where cost-conscious organizations and businesses with limited budgets have major concerns.  The result can be avoidance or undue risk-taking; hoping for the best because it just costs too much to be adequately prepared.  This need not be the case.  Spending a lot of money to set up a BCP does not make it more value added nor better for your business.  Taking a logical approach that makes sense for your business and understanding the risks does make a BCP more value-added.

To be effective and value-added the level of preparation needs to be evaluated against the potential risk. This is what a good BCP plan will evaluate. The plan needs to be created after carefully looking at each critical business operation and identifying the associated level of risk should this operation go down.  In addition, there needs to be a thorough evaluation of the options for maintaining business operations in the event of a disaster; i.e. backup or contingency plans.  Based on this evaluation (typically know as a Business Impact Analysis or BIA), an effective and realistic BCP can be created which will effectively help the business to survive and operate during an unforeseen interruption or disaster.