• Menu
  • Skip to right header navigation
  • Skip to main content
  • Skip to secondary navigation
  • Skip to footer

Before Header

About Us | Articles | Free Resources | Podcast | YouTube Channel

Contact Us Subscribe

Bryghtpath

Business Continuity and Crisis Management Consultants

  • Start
        • Start your Resilience Journey

          Moving your organization – or your career – forward on your resilience journey can be a difficult and scary proposition.  Often, we find that prospective clients aren’t quite sure where to start.

          To help you along your journey, we’ve outlined below four curated collections geared towards momentum-building action and advice perfectly paired with your organization’s current stage of resilience.

        • I want to learn more about Resilience

        • We’re just getting started with our resilience program

        • We’re seeking to optimize & mature our resilience program

        • I’m a Resilience Professional seeking to further develop my skills

  • Company
        • About Bryghtpath

        • Our Core Values

        • Meet our Team

        • About Bryghtpath
          • Case Studies & Results
          • Certifications and Awards
          • Contact Bryghtpath
          • Contract Vehicles
          • Media & Professional Appearances
          • Our Clients
          • Our Proven Process
          • Security & Compliance
          • Strategic Partners
          • Work with Us
  • Capabilities
        • Our Capabilities
        • We help your organization strategically navigate uncertainty and disruption.

        • Case Studies & Results

        • Business Continuity as a Service

        • Business Continuity
          • Business Continuity - Overview
          • Business Continuity as a Service (BCaaS)
          • Business Continuity Software
          • Coaching
          • IT Disaster Recovery
          • Resiliency Diagnosis®️
        • Crisis Management
          • Crisis Management - Overview
          • Crisis Communications
          • Crisis Exercises
          • Cyber Crisis Exercises
          • Cyber Incident Response Planning
          • Crisis Playbook®️
          • Global Security Operations Center (GSOC)
          • Resiliency Diagnosis®️
        • Other Capabilities
          • Intelligence & Global Security Consulting
          • Speaking
          • Training
  • Courses & Training
        • Courses & Training

          We’ve created a number of free and premium courses that have helped thousands improve their skills, build more resilient organizations, and lead through organizations through difficult critical moments successfully.

        • Coaching
          • 1-on-1 Coaching Call
          • Private Backchannel
          • Private Coaching Program
        • Free Intro Courses
          • Overview
          • Business Continuity 101
          • Crisis Communications 101
          • Crisis Management 101
        • Premium Courses
          • Overview
          • Custom Training
          • 5-Day Business Continuity Accelerator
          • Communicating in the Critical Moment
          • Crisis Management Academy®️
          • Preparing for Careers in Resilience
  • Expertise
        • Our Expertise
        • Here at Bryghtpath, in our core values, we state that we are humbly confident in our resiliency expertise.

          We write, publish, speak, and train others constantly – striving to share our thought leadership publicly to advance our industry and exercise our curiosity by interacting with other leaders in our practice domains.

        • Ultimate Guide to Business Continuity

        • Ultimate Guide to Crisis Management

        • Case Studies & Results

        • Free Resources & Frameworks
          • Overview - Free Resources
          • Bryghtpath Frameworks
            • Bryghtpath Business Continuity Lifecycle
            • Bryghtpath Crisis Management Framework
            • Bryghtpath Exercise Maturity Model
            • Bryghtpath Global Security Framework
            • Bryghtpath Long-Term Recovery Framework
            • Bryghtpath Professional Reading List
            • Bryghtpath Workplace Violence & Threat Management Toolkit
          • Resiliency Professionals Facebook Group
          • Resource Library
          • Webinars & Videos
          • Whitepapers & Reports
        • Our Thoughts & Insights
          • Articles
          • Lead Through Disruption. Stay Ahead with Bryghtpath.
          • Managing Uncertainty Podcast
          • Media & Professional Appearances
          • YouTube Channel
        • Whitepapers & Reports
          • Global Security Operations Centers & Resilience
          • Managing the Whole Crisis: The Ransomware Challenge
          • Mastering Uncertainty: Strengthening Organizational Resilience
          • Social Activism Campaigns
          • The Resilience Roadmap: 250 Ways to Fortify your Business against Disruption
  • Industries
        • Our Industry Expertise

          Bryghtpath has extensive experience in a number of industries working with clients of all sizes, geographical locations, and business models. As a team, we possess, deep global operating experience on every continent around the world.

        • Industries Overview

        • Case Studies

        • Start your Journey

        • Education

          Education Icon
        • Finance

          Financial Services 800x800
        • Government

          Government Icon
        • Healthcare

          Healthcare Icon 800x800
        • Hospitality & Leisure

          Hospitality & Leisure Industry Icon 800x800
        • Life Sciences

          Life Sciences 800x800
        • Logistics

          Transportation & Logistics Industry Icon 800x800
        • Manufacturing

          Manufacturing Industry Icon 800x800
        • Non-Profits

          Non-Profit Industry Icon 800x800
        • Retail

          Retail Industry Icon 800x800
        • Tech & Media

          Communications Industry Icon 800x800
        • Utilities

          Power & Utilities Icon
  • Products
        • Our Products

          College Classroom - Mature Teacher
        • Crisis Playbook™️

        • Exercise in a Box™️

        • Exercise in a Day™️

        • Books
          • From Panic to Poise: Crisis Management in the Modern World
          • The Continuity Code: Mastering Business Resilience
        • Crisis Playbook™️
          • Overview
          • Active Shooter Plan
          • Emergency Response Guide
          • Fatality
          • Food/Product Recall
          • Protest
          • Violent Attack
        • Maturity Models
          • Overview
          • ASIS Workplace Violence and Active Assailant
          • FFEIC Maturity Model – Business Continuity
          • ISO 22301 – Business Continuity
          • ISO 22361 – Crisis Management
          • ISO 27031 - IT Disaster Recovery
          • NIST 800-53 Contingency Planning Maturity Model
        • Templates & More
          • After-Action Process & Templates
          • Awareness Collateral
          • Business Continuity Plan Templates
          • Crisis Management Plan Templates
          • Disaster Recovery Plan Templates
          • Job Descriptions
  •  

Mobile Menu

  • Start
  • Company
    • About Bryghtpath
      • Case Studies & Results
      • Certifications and Awards
      • Contact Bryghtpath
      • Contract Vehicles
      • Media & Professional Appearances
      • Our Clients
      • Our Proven Process
      • Security & Compliance
      • Strategic Partners
      • Work with Us
  • Capabilities
    • Our Capabilities
    • Business Continuity
      • Business Continuity – Overview
      • Business Continuity as a Service (BCaaS)
      • Business Continuity Software
      • Coaching
      • IT Disaster Recovery
      • Resiliency Diagnosis®️
    • Crisis Management
      • Crisis Management – Overview
      • Crisis Communications
      • Crisis Exercises
      • Cyber Crisis Exercises
      • Cyber Incident Response Planning
      • Crisis Playbook®️
      • Global Security Operations Center (GSOC)
      • Resiliency Diagnosis®️
    • Other Capabilities
      • Intelligence & Global Security Consulting
      • Speaking
      • Training
  • Courses & Training
    • Coaching
      • 1-on-1 Coaching Call
      • Private Backchannel
      • Private Coaching Program
    • Free Intro Courses
      • Overview
      • Business Continuity 101
      • Crisis Communications 101
      • Crisis Management 101
    • Premium Courses
      • Overview
      • Custom Training
      • 5-Day Business Continuity Accelerator
      • Communicating in the Critical Moment
      • Crisis Management Academy®️
      • Preparing for Careers in Resilience
  • Expertise
    • Our Expertise
    • Our Thoughts & Insights
      • Articles
      • Lead Through Disruption. Stay Ahead with Bryghtpath.
      • Managing Uncertainty Podcast
      • Media & Professional Appearances
      • YouTube Channel
    • Free Resources & Frameworks
      • Overview – Free Resources
      • Bryghtpath Frameworks
        • Bryghtpath Business Continuity Lifecycle
        • Bryghtpath Crisis Management Framework
        • Bryghtpath Exercise Maturity Model
        • Bryghtpath Global Security Framework
        • Bryghtpath Long-Term Recovery Framework
        • Bryghtpath Professional Reading List
        • Bryghtpath Workplace Violence & Threat Management Toolkit
      • Resiliency Professionals Facebook Group
      • Resource Library
      • Webinars & Videos
      • Whitepapers & Reports
    • Whitepapers & Reports
      • Global Security Operations Centers & Resilience
      • Managing the Whole Crisis: The Ransomware Challenge
      • Mastering Uncertainty: Strengthening Organizational Resilience
      • Social Activism Campaigns
      • The Resilience Roadmap: 250 Ways to Fortify your Business against Disruption
  • Industries
  • Products
    • Books
      • From Panic to Poise: Crisis Management in the Modern World
      • The Continuity Code: Mastering Business Resilience
    • Crisis Playbook™️
      • Overview
      • Active Shooter Plan
      • Emergency Response Guide
      • Fatality
      • Food/Product Recall
      • Protest
      • Violent Attack
    • Maturity Models
      • Overview
      • ASIS Workplace Violence and Active Assailant
      • FFEIC Maturity Model – Business Continuity
      • ISO 22301 – Business Continuity
      • ISO 22361 – Crisis Management
      • ISO 27031 – IT Disaster Recovery
      • NIST 800-53 Contingency Planning Maturity Model
    • Templates & More
      • After-Action Process & Templates
      • Awareness Collateral
      • Business Continuity Plan Templates
      • Crisis Management Plan Templates
      • Disaster Recovery Plan Templates
      • Job Descriptions
  •  

4 Steps to Business Continuity Planning Success

You are here: Home / Business Continuity / 4 Steps to Business Continuity Planning Success

August 5, 2021 By //  by Bryan Strawser

Google search “business continuity planning steps” and you’ll find a yard sale of results.

Is it 5 steps, or 7, or 4?

Which are the most involved and which are the most important?

How long does the business continuity planning process take? And who should be involved?

I would love to be the definitive source of truth here, but in reality, there is no perfect answer. Size, location, industry, management structure, and existing reporting, resources, and experience—every company is different, as are their business continuity planning needs. These factors and more influence how we tailor our approach to business continuity planning with each of our diverse clients.

Still, like many you’re probably here because you’re getting ready to embark on the business continuity planning process and you have a lot of questions.

Bryghtpath has over 50 years of collective experience in business continuity planning working with a multitude of global clients in varied industries.

Here’s our take on the process, and a good idea of what you can expect from the business continuity planning process.

55PYF1zh8YmiSN6UHi93ua5YfKk_41ALYKoBM6U2_xDgZDu6q-VC9bzeLTUoX0_3qnFVxmg1MON7Y_u7Mo1FHQ=s0 4 Steps to Business Continuity Planning Success

Step 1: Establish the Fundamentals of Business Continuity Planning

When we start working with clients on their business continuity plan or BCP, the general end goal is always the same—create a plan to keep things running in the event of a disruption. But while most companies have the same vision for the outcomes of their business continuity planning process, they may have different ideas of how they are going to get there.

Your company should start the process by agreeing on a few fundamentals at the start.

What are the plan objectives?

Most companies have the same basic objective—minimize the impacts of disruptions and restore critical capabilities within acceptable timeframes. Improving overall company resilience and the decision-making process may also be important goals.

However, every business is different and will have a slightly different take on the overall goals and objectives for their business continuity planning endeavors. Getting clear on what these are at the outset is critical to achieving an optimal outcome.

Who will be responsible for creating and activating the plan?

There are many roles and responsibilities in business continuity planning. From senior-level leadership who ensures the business continuity program and planning process aligns with strategic objectives, to the business unit planners who do the actual work of creating the plan, each is critical and requires the right people to be placed in the right role. While some roles and responsibilities may change over time, you should initially establish exactly who will be involved and the role they will play in the planning process.

You also need to decide who will be responsible for actually activating the plan. This depends a lot on your company culture. Some may elect a centralized method that requires the authorization of a high-level incident leader or a crisis management team. Other businesses adopt a decentralized method in which authorization to activate the plan is distributed to different business unit leaders; we find the latter to be a more nimble and effective approach in most cases.

What resources are available for Business Continuity Planning?

Certain response and recovery strategies in your business continuity plan may require the development of new capabilities and/or the purchase of new equipment. Each company must determine the tradeoff of potential risks and disruption against the relative resources available to invest in its business continuity plan. For example, one company may choose to purchase spares of critical equipment to build new redundancies, whereas another with different resource capabilities may elect to accept the risk of a temporary shutdown.

4-Steps-to-Planning-Success-Fundamentals 4 Steps to Business Continuity Planning Success

Step 2: Assess Risks and Business Impacts

Just as the integrity of a well-built home depends on laying a sound foundation, so too does the effectiveness of a good business continuity plan rely on the right assumptions. A thorough business impact analysis, or BIA, is key to developing the accurate underlying assumptions that will ensure business continuity planning success.

Your BIA will help you better understand:

  • Key business systems and processes
  • Specific areas of vulnerability
  • Potential impacts and losses from particular disruptions
  • Current and capabilities and redundancies
  • Maximum tolerable downtimes for different business functions

I can’t emphasize enough how important it is to get your BIA right. Without a good BIA, you might end up overlooking critical systems and processes or the full impact a disruption could have on your revenue, expenses, and reputation.

In our experience, after conducting their BIA, a lot of companies realize they’ve vastly underestimated the interdependencies in their operations—especially when it comes to technology and outsourcing to third-party service providers.

For example, an organization may think of a tool like Salesforce as impacting only their sales activities. But their BIA may reveal that this service is critical to many other operations that could be impacted in the event of a disruption to the Salesforce infrastructure.

We typically evaluate interdependencies in four core areas—workplace (the breakdown of work by geographical location and facility), workforce (the minimum number of key personnel assigned to critical functions along with required skill sets), third party relationships (outside services and products necessary to critical functioning), and technology (software and platforms). The BIA should also capture upstream and downstream dependencies between various business units within the organization.

A thorough business impact analysis, or BIA, is key to developing the accurate underlying assumptions that will ensure business continuity planning success.

Step 3: Select and Develop Your Response and Recovery Strategies

After evaluating your business processes and interdependencies and the potential impacts of a disruption, you will likely discover many gaps between your response and recovery requirements and your current capabilities. From this baseline, you can determine what needs to be done to address these gaps and develop a menu of resource and recovery strategy options that can be implemented in response to a particular incident. Some strategies may require new capabilities to be developed, especially where significant gaps in current capabilities are identified.

The menu of response and recovery strategies is typically broken down by resource (i.e. workplace, workforce, 3rd parties, and technology) and also includes an estimation of the time needed to implement and the expected sustainable duration for each strategy.

Each separate recovery strategy should include a detailed procedure that further describes how that specific response and recovery strategy will be accomplished.

4-Steps-to-Planning-Success-Develop 4 Steps to Business Continuity Planning Success

Step 4: Create Your Response and Recovery Roadmap

After all available response and recovery options have been cataloged, the next step is to develop the procedures and guidelines that will serve as your business continuity plan roadmap. Your team will use this roadmap to help you initially assess the disruption, activate the appropriate response strategy, and carry out that strategy to completion.

A critical part of preparing your response and recovery roadmap is detailing how and when you will evaluate your plan. While the inherent nature of business disruptions precludes testing your business continuity plan in a practical sense, regularly reviewing the performance of your BCP can provide important insights and improvements.

Likewise, roles change, people leave, and technology and processes evolve. And disruptions that were once imaginable (like a global pandemic) may emerge as all-important. You should evaluate and update your BCP on a regular (at least annual) basis and also in an after-action to any specific response and recovery plan activations.

Want to learn more about Business Continuity?

Our Ultimate Guide to Business Continuity contains everything you need to know about business continuity.

You’ll learn what it is, why it’s important to your organization, how to develop a business continuity program, how to establish roles & responsibilities for your program, how to get buy-in from your executives, how to execute your Business Impact Analysis (BIA) and Business Continuity Plans, and how to integrate with your Crisis Management strategy.

We’ll also provide some perspectives on how to get help with your program and where to go to learn more about Business Continuity.

Read our Ultimate Guide to Business Continuity

Business continuity planning is full of surprises

When we begin the business continuity planning process with our clients, we usually get one of two reactions.

“This is more complicated than I expected!”

The first is one of shock and overwhelm—as the saying goes, “ignorance is bliss.” Once the client begins to dig in, they realize that there’s a lot more to think through than they ever imagined; and that their business is vulnerable to a lot more risk than they ever realized.

Another common discovery for many businesses is that their business continuity plan resides mostly in Susan from Compliance’s head. While Susan has been through 30 years of disruption and response and recovery in your business and is a wealth of knowledge, what happens when she retires, has a medical issue, or your competitor hires her away?

In both cases, an experienced consultant can help you overcome the overwhelm of tackling the business continuity planning process for the first time. Likewise, they can help you get everything in Susan’s head on paper and also identify and address existing gaps from previous business continuity planning efforts.

“This is a lot less complicated than I expected!”

A second reaction we get from new clients is one of pleasant surprise.

A lot of business continuity professionals and consultants are focused on building the best, most detailed, and complex business continuity program that they can. They try to follow every standard to the letter and impose a rigid methodology into each step of the process. But a misplaced focus on complexity and complying to an industry-standard often causes more confusion and complication than it solves. Approaches like this often fail to meet the organization’s objectives of minimizing disruption and optimizing resilience.

I’m all for diving into detail and complexity—when it makes sense. But taking this approach to business continuity planning doesn’t necessarily mean you’re delivering what your clients really need. Reams of binders with 175-page plans are cumbersome and seldom used, frustrating efforts to respond to an actual disruption in the future.

The Bryghtpath approach is informed by our practical business experience. We know what senior leaders care about and what’s truly important to the success of your business. Rather than creating an overly complex business continuity plan and program, our goal is to demystify the process and ensure that we produce a BCP that is practical, usable, and applicable—and with the least disruption possible in the creation process. The result is a tight integration of your business continuity program and business continuity plans with your business’s overall objectives and strategy.

Want to work with us or learn more about Business Continuity?

  • Our proprietary Resiliency Diagnosis process is the perfect way to advance your business continuity & crisis management program. Our thorough standards-based review culminates in a full report, maturity model scoring, and a clear set of recommendations for improvement.
  • Our Business Continuity (including effective Business Continuity planning processes) & Crisis Management services help you rapidly grow and mature your program to ensure your organization is prepared for the storms that lie ahead.
  • Our Ultimate Guide to Business Continuity contains everything you need to know about Business Continuity
  • Our free Business Continuity 101 Introductory Course may help you with an introduction to the world of business continuity – and help prepare your organization for your next disruption. Our paid 5-Day Business Continuity Accelerator might just be the thing you need to jumpstart your business continuity program.
  • Learn about our Free Resources, including articles, a resource library, white papers, reports, free introductory courses, webinars, and more.
  • Set up an initial call with us to chat further about how we might be able to work together.

Category: Business ContinuityTag: bc planning, bc program, Bryan Strawser, bryghtpath, bryghtpath llc, Business Continuity, business continuity consultant, business continuity management, business continuity planning, business continuity program

About Bryan Strawser

Bryan Strawser is Founder, Principal, and Chief Executive at Bryghtpath LLC, a strategic advisory firm he founded in 2014. He has more than twenty-five years of experience in the areas of, business continuity, disaster recovery, crisis management, enterprise risk, intelligence, and crisis communications.

At Bryghtpath, Bryan leads a team of experts that offer strategic counsel and support to the world’s leading brands, public sector agencies, and nonprofit organizations to strategically navigate uncertainty and disruption.

Learn more about Bryan at this link.

Previous Post: « Business Continuity Program Roles & Responsibilities
Next Post: 10 Tips for framing your case for Business Continuity to Executives »

Footer

Contact

BRYGHTPATH LLC
+1.612.235.6435

PO Box 131416
Saint Paul, MN 55113
USA


contact@bryghtpath.com

  • Facebook
  • LinkedIn
  • RSS
  • Twitter
  • YouTube

Our Capabilities

  • Business Continuity
    • Business Continuity as a Service (BCaaS)
    • Business Continuity Software
    • Coaching
    • IT Disaster Recovery Consulting Services
    • Resiliency Diagnosis®️
  • Crisis Communications
  • Crisis Management
    • Crisis Exercises
    • Cyber Crisis Exercises
    • Cyber Incident Response Planning
    • Global Security Operations Center (GSOC)
  • Speaking
  • Training

Our Free Courses

Business Continuity 101

Crisis Communications 101

Crisis Management 101

Our Premium Courses

5-Day Business Continuity Accelerator

Communicating in the Critical Moment

Crisis Management Academy®️

Preparing for Careers in Resilience

Our Products

After-Action Templates

Books

Business Continuity Plan Templates

Communications & Awareness Collateral Packages

Crisis Plan Templates

Crisis Playbook®

Disaster Recovery Templates

Exercise in a Box®

Exercise in a Day®

Maturity Models

Ready-Made Crisis Plans

Resilience Job Descriptions

Pre-made Processes & Templates

Site Footer

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.


Bryghtpath®, Crisis Management Academy®, Crisis Playbook®, Exercise in a Box®, Exercise in a Day®, Resiliency Diagnosis®, Resilience Operating Model™
and their respective logos are registered trademarks of Bryghtpath LLC in the United States and other countries.


About Bryghtpath LLC | Disclaimer | Privacy | Status Page | Terms of Use

Proudly powered by Mai Theme, the Genesis Framework, and Wordpress.