{"id":3384,"date":"2018-07-13T08:11:59","date_gmt":"2018-07-13T07:11:59","guid":{"rendered":"https:\/\/citysecuritymagazine.com\/?p=3384"},"modified":"2018-07-18T17:52:20","modified_gmt":"2018-07-18T16:52:20","slug":"business-continuity-plans-step","status":"publish","type":"post","link":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/","title":{"rendered":"Business continuity plans: A step-by-step guide"},"content":{"rendered":"

Bringing your business continuity plans to life<\/strong><\/h1>\n

\u201cNo plan of battle ever survives first contact with the enemy.\u201d Helmuth von Moltke, German military strategist.<\/p>\n

Insert the words \u2018business continuity plan\u2019(BCP) and \u2018real life incident\u2019 into this quote and it would still hold true. In fact, not only do most business continuity plans not survive first contact with a real life incident, but many BCPs are not even looked at when an actual incident occurs.<\/p>\n

I was recently facilitating the desktop simulation of a significant business disruption incident for a client in which the scenario was that their entire data network appeared to have been compromised. This was the once a year test of the business continuity plan; the organisation\u2019s top team sat around the table and they had a hard copy of the plan in a grab bag in the room in which the exercise was taking place. As soon as the scenario was put to the team they leapt into action, securing their IT network, considering the impact on the business and making alternative arrangements. All very commendable, but it was not until almost three quarters of the way through the exercise that any of them actually picked up the BCP and looked at it.<\/p>\n

That seems very strange, doesn\u2019t it? Why go to all the trouble and expense of drawing up a business continuity plan, appointing a business continuity team, testing the plan on a regular basis, and then not actually using it, even in a simulation exercise, let alone in the white heat of a real incident?<\/p>\n

Human decision making<\/h6>\n

Actually it is not strange, or even surprising, at all. The science of human decision-making (popularised by US psychologist Daniel Kahneman in his seminal book \u2018Thinking, Fast and Slow\u2019) teaches us that even in non-stressful situations human beings will make non-rational choices based on their intuitive responses to presenting situations. The effect is multiplied in situations of extreme pressure such as a catastrophic business disruption event.<\/p>\n

Kahneman argues that human decision-making is often based on a set of intuitive mental short cuts (heuristics) that can lead us in the wrong direction. The so-called \u2018availability\u2019 heuristic is particularly relevant, being related to judgements about the probability of an event based on how easy it is to recall other similar events. So research shows that business continuity managers almost always overestimate the real likelihood of their business being the subject of a terrorist attack, because it is so easy to recall examples of actual terrorist events, such as the 9\/11 attacks in New York.<\/p>\n

A business continuity plan is critical<\/h6>\n

Given that a well thought out and well tested BCP is critical to the chances of an organisation surviving a major business disruption without fatal damage to its operations or reputation, what could be done to bring the plan to life in a real incident and persuade the business continuity team to intuitively turn to it and pick it up?<\/p>\n

The most important thing you can do is to make your business continuity plan salient, so that it is more likely to be directly relevant to the incident at hand. The scenario put to my client represented one of the highest threats on their corporate risk register, but it was not specifically addressed in their BCP, so when the desktop incident kicked off they did not intuitively turn to the plan for help.<\/p>\n

Disruption threats<\/h6>\n

As with the heightened perception of terrorist events, there is often a significant disconnect between the potential disruptions that are expected and those that actually happen.<\/p>\n

According to the Chartered Management Institute 2013 Business Continuity Management Survey, the top three perceived disruption threats amongst managers were loss of IT (63%), loss of access to site (53%) and loss of telecommunications (52%).<\/p>\n

The same managers reported that actual disruption events they had experienced were extreme weather (54%), loss of people due to illness (42%) and loss of IT (40%).<\/p>\n

Step-by-step to business continuity<\/h6>\n

This salience can be achieved through the following steps:<\/p>\n

Step 1<\/strong> – Be prepared to review and restructure your BCP, so that it is a living document which is easily accessible and useable in the chaotic few moments when your incident is launching.<\/p>\n

Step 2<\/strong> – Build up a wide-ranging library of possible business disruption scenarios relevant to your own organisation.<\/p>\n

Step 3<\/strong> – Break the business continuity plan down into a set of specific tasks, each with clear \u2018how to\u2019 instructions.<\/p>\n

Step 4<\/strong> – Provide a range of multi-media assets that can support the \u2018how to\u2019 implementation of your BC tasks, such as video and audio files, process maps and contact lists.<\/p>\n

Step 5<\/strong> – Customise the response to each of your scenarios by identifying the tasks necessary to respond to that particular disruption event.<\/p>\n

Step 6<\/strong> – Allocate each of those tasks to a nominated member of your BC team in advance.<\/p>\n

\u201cThere cannot be a crisis next week. My schedule is already full.\u201d Henry A Kissinger<\/p>\n

Having gone through these steps, you should then put in place a regular programme of engaging with your business continuity team, to create what I call \u2018Responsive People\u2019.<\/p>\n

By engaging with your team on a regular basis, making them aware of their responsibilities and keeping track of how quickly they respond to regular BC messages, you can identify and build a team of \u2018Responsive People\u2019 who will be primed to act, and intuitively refer to the plan, when a real business disruption event takes place.<\/p>\n

Rickie Sehgal<\/p>\n

Founder of Crises-Control<\/p>\n

www.crises-control.com<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Bringing your business continuity plans to life \u201cNo plan of battle ever survives first…<\/p>\n","protected":false},"author":19,"featured_media":3364,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"footnotes":""},"categories":[71,2,35],"tags":[],"class_list":["post-3384","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business-continuity","category-editors-choice","category-risk-management"],"acf":[],"yoast_head":"\nBusiness continuity plans: A step-by-step guide - City Security Magazine<\/title>\n<meta name=\"description\" content=\"A well thought out and well tested business continuity plan is critical to the chances of an organisation surviving a major business disruption.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Business continuity plans: A step-by-step guide\" \/>\n<meta property=\"og:description\" content=\"Bringing your business continuity plans to life \u201cNo plan of battle ever survives first contact with the enemy.\u201d Helmuth von Moltke, German military\" \/>\n<meta property=\"og:url\" content=\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/\" \/>\n<meta property=\"og:site_name\" content=\"City Security Magazine\" \/>\n<meta property=\"article:published_time\" content=\"2018-07-13T07:11:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-07-18T16:52:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1170\" \/>\n\t<meta property=\"og:image:height\" content=\"780\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Contributor CSM\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@CitySecuritymag\" \/>\n<meta name=\"twitter:site\" content=\"@CitySecuritymag\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Contributor CSM\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/\"},\"author\":{\"name\":\"Contributor CSM\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/1b424dabf8b3cf40177efb7350e059f2\"},\"headline\":\"Business continuity plans: A step-by-step guide\",\"datePublished\":\"2018-07-13T07:11:59+00:00\",\"dateModified\":\"2018-07-18T16:52:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/\"},\"wordCount\":915,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg\",\"articleSection\":[\"Business Continuity\",\"Editor's Choice\",\"Risk Management\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/\",\"url\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/\",\"name\":\"Business continuity plans: A step-by-step guide - City Security Magazine\",\"isPartOf\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg\",\"datePublished\":\"2018-07-13T07:11:59+00:00\",\"dateModified\":\"2018-07-18T16:52:20+00:00\",\"description\":\"A well thought out and well tested business continuity plan is critical to the chances of an organisation surviving a major business disruption.\",\"breadcrumb\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#primaryimage\",\"url\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg\",\"contentUrl\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg\",\"width\":1170,\"height\":780,\"caption\":\"Business continuity plans\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/citysecuritymagazine.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Business continuity plans: A step-by-step guide\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#website\",\"url\":\"https:\/\/citysecuritymagazine.com\/\",\"name\":\"City Security Magazine\",\"description\":\"News and advice for security professionals\",\"publisher\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/citysecuritymagazine.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#organization\",\"name\":\"City Security Magazine\",\"url\":\"https:\/\/citysecuritymagazine.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/06\/header-logo-2.jpg\",\"contentUrl\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/06\/header-logo-2.jpg\",\"width\":2048,\"height\":573,\"caption\":\"City Security Magazine\"},\"image\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/CitySecuritymag\",\"https:\/\/www.linkedin.com\/company\/city-security-magazine\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/1b424dabf8b3cf40177efb7350e059f2\",\"name\":\"Contributor CSM\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/267a3b16d581feb77df68e95969d9bcf7cfe93d4e2f5f699b331bf4de6a055b9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/267a3b16d581feb77df68e95969d9bcf7cfe93d4e2f5f699b331bf4de6a055b9?s=96&d=mm&r=g\",\"caption\":\"Contributor CSM\"},\"description\":\"City Security magazine is proud to work with contributors from across the security sector and beyond, including police forces, security associations, security providers, consultants and specialists who produce a range of varied and interesting content.\",\"url\":\"https:\/\/citysecuritymagazine.com\/author\/contributor-csm\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Business continuity plans: A step-by-step guide - City Security Magazine","description":"A well thought out and well tested business continuity plan is critical to the chances of an organisation surviving a major business disruption.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/","og_locale":"en_GB","og_type":"article","og_title":"Business continuity plans: A step-by-step guide","og_description":"Bringing your business continuity plans to life \u201cNo plan of battle ever survives first contact with the enemy.\u201d Helmuth von Moltke, German military","og_url":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/","og_site_name":"City Security Magazine","article_published_time":"2018-07-13T07:11:59+00:00","article_modified_time":"2018-07-18T16:52:20+00:00","og_image":[{"width":1170,"height":780,"url":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg","type":"image\/jpeg"}],"author":"Contributor CSM","twitter_card":"summary_large_image","twitter_creator":"@CitySecuritymag","twitter_site":"@CitySecuritymag","twitter_misc":{"Written by":"Contributor CSM","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#article","isPartOf":{"@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/"},"author":{"name":"Contributor CSM","@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/1b424dabf8b3cf40177efb7350e059f2"},"headline":"Business continuity plans: A step-by-step guide","datePublished":"2018-07-13T07:11:59+00:00","dateModified":"2018-07-18T16:52:20+00:00","mainEntityOfPage":{"@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/"},"wordCount":915,"commentCount":0,"publisher":{"@id":"https:\/\/citysecuritymagazine.com\/#organization"},"image":{"@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#primaryimage"},"thumbnailUrl":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg","articleSection":["Business Continuity","Editor's Choice","Risk Management"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/","url":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/","name":"Business continuity plans: A step-by-step guide - City Security Magazine","isPartOf":{"@id":"https:\/\/citysecuritymagazine.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#primaryimage"},"image":{"@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#primaryimage"},"thumbnailUrl":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg","datePublished":"2018-07-13T07:11:59+00:00","dateModified":"2018-07-18T16:52:20+00:00","description":"A well thought out and well tested business continuity plan is critical to the chances of an organisation surviving a major business disruption.","breadcrumb":{"@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#primaryimage","url":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg","contentUrl":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/07\/54p13.jpg","width":1170,"height":780,"caption":"Business continuity plans"},{"@type":"BreadcrumbList","@id":"https:\/\/citysecuritymagazine.com\/risk-management\/business-continuity-plans-step\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/citysecuritymagazine.com\/"},{"@type":"ListItem","position":2,"name":"Business continuity plans: A step-by-step guide"}]},{"@type":"WebSite","@id":"https:\/\/citysecuritymagazine.com\/#website","url":"https:\/\/citysecuritymagazine.com\/","name":"City Security Magazine","description":"News and advice for security professionals","publisher":{"@id":"https:\/\/citysecuritymagazine.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/citysecuritymagazine.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/citysecuritymagazine.com\/#organization","name":"City Security Magazine","url":"https:\/\/citysecuritymagazine.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/logo\/image\/","url":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/06\/header-logo-2.jpg","contentUrl":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/06\/header-logo-2.jpg","width":2048,"height":573,"caption":"City Security Magazine"},"image":{"@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/CitySecuritymag","https:\/\/www.linkedin.com\/company\/city-security-magazine"]},{"@type":"Person","@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/1b424dabf8b3cf40177efb7350e059f2","name":"Contributor CSM","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/267a3b16d581feb77df68e95969d9bcf7cfe93d4e2f5f699b331bf4de6a055b9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/267a3b16d581feb77df68e95969d9bcf7cfe93d4e2f5f699b331bf4de6a055b9?s=96&d=mm&r=g","caption":"Contributor CSM"},"description":"City Security magazine is proud to work with contributors from across the security sector and beyond, including police forces, security associations, security providers, consultants and specialists who produce a range of varied and interesting content.","url":"https:\/\/citysecuritymagazine.com\/author\/contributor-csm\/"}]}},"_links":{"self":[{"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/posts\/3384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/comments?post=3384"}],"version-history":[{"count":0,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/posts\/3384\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/media\/3364"}],"wp:attachment":[{"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/media?parent=3384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/categories?post=3384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/tags?post=3384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}