Business continuity planning (BCP) is an essential but often unloved function that organisations generally hope they never have to test ‘in anger’. Focussed on planning for major incidents that you hope will never arise, such as floods, fires, power failures or terrorist alerts; BCP sets out how the business will operate following an incident and how to get back to ‘business as usual’ in the quickest possible time afterwards.
The plan itself sets out the agreed arrangements for bringing events under control, the necessary resources for maintaining critical business functions and the staff required for co-ordinating actions.
Plainly, there’s a high level of crossover between IT service management (ITSM) and disaster recovery but many businesses remain unaware of this crossover or how to take advantage of it. The scenarios for businesses cover a wide range of eventualities. For example, the BCP team of a major retailer will have to consider every kind of disaster or ‘business interruption risk’; from bad weather impeding deliveries, to fuel shortages disrupting distribution, to a fire at head office.
> See also: BCI reveals top 10 threats to business continuity
Underpinning all this is a need to get the business back on stream as quickly as possible and, most importantly, protect the safety of staff and customers.
Reams of paper cause dangerous inefficiencies
The challenge in terms of managing BCP is in keeping plans up to date to ensure that they reflect changes in an organisation, it’s staffing, infrastructure and external circumstances. The plans also need to be cross-referenced across different facilities, buildings and functions.
Traditionally, investment in BCP can be patchy, with the result that planning is often paper-based, cumbersome and inefficient; it’s a process that is rarely done accurately and efficiently, and as a result, the plan is often out of date before it’s even finalised. For example, you might hold a plan in a static Word document, which is updated on a six-monthly basis and then cross-referenced manually. This approach, which is by no means an uncommon one, leads to problems of speed, access, accuracy, and also reduces the efficiency of BCP staff.
Close connections to ITSM
The opportunity to improve BCP through automated, online, mobile-accessible systems is significant, and many of the latest applications developed for managing IT services are proving equally valuable in this arena. Because most organisations are so technology-dependent for their operations, there are clear similarities between managing and ensuring the availability of IT and BCP.
> See also: Two thirds of companies are undergoing a major IT transformation
Many businesses now look to adapt the techniques they are using for ITSM for BCP, using cloud-based Software as a Service. The development of BCP systems based on those used for ITSM can be relatively straightforward and taking just a few months; particularly where a business is already using SaaS ITSM solutions that do not require wholesale modifications.
The benefits of a dynamic, automated BCP system can be substantial. In addition to being easy to update both on a systematic and ad-hoc basis (for example when a team changes buildings), it also gives management much greater ability to analyse and interrogate information, and check that plans are being updated on schedule. Other valuable benefits emerge through integration with the ITSM system, ensuring that IT applications are visible to the BCP team. This enables much-improved scenario planning and risk assessment, plus better informed decisions on what investment is needed and where it is required.
Long-term savings and efficiencies
Taking an approach that amalgamates the BCP and ITSM functions and takes advantages of the parallels between them can help businesses identify substantial savings. For example, if an application only needs to be restored for BCP purposes within 24 hours and the IT function is currently working on the expectation of recovery within two hours, there is potential to reduce costs and free valuable resources to work in other areas.
Similarly, businesses that can identify where they don’t need to replicate physical office space in the event of a building loss – because technology and IT support services staff can enable staff to work remotely and via mobile devices – can unlock long-term cost-savings through better use of assets and resources on a day-to-day basis, supporting more home or remote-working.
BCP is ultimately an insurance policy, and a function that you never want to test in earnest. But this is no excuse for neglecting it, particularly when the stakes, from staff safety to financial profitability, are so high. In addition, it needn’t be a burden but instead an investment that pays for itself, highlighting inefficiencies and flagging cost savings while helping the business perform efficiently and minimising impact on the bottom line.
Sourced from Paul Cash, managing director, Fruition Partners UK