Business Continuity Planning
RQA can help you to develop your business continuity plans to meet your business, insurance, retail or customer requirements. We offer a comprehensive and customised service from initial business continuity plan development to business continuity plan review and business continuity plan training and testing.
Our approach is based on developing practical plans that will be fit for purpose. Our business continuity planning consultancy is based around the ISO 22301 (formerly BS25999) business continuity standard, applied in a practical manner to ensure your business continuity plans meet your business needs.
“I am often asked what single piece of advice I can recommend that would be most helpful to the business community. My answer is a simple, but effective, business continuity plan that is regularly reviewed and tested.”
Eliza Manningham-Buller, the Director General of MI5 (retired)
- Demonstration by senior management and board of due diligence
Financial services authority requirements
- Protect shareholders and other stakeholders
- Protect brand and reputation
- Competitive advantage in tender situations
- Insurance requirements - property insurance, product recall insurance
- To protect production and long term business
- Corporate manslaughter act
- Due diligence: Sale of company – implemented BCP looks favourable
- Expansion to new facility. BCP required for new site
- BRC Issue 6 requires BCP (clause 3.11.1)
- Specific retailer standards
Our specialist consultants will work with you to assist you in developing your business continuity plans including effective procedures for specific crisis types, e.g. flood, fire, loss of a key supplier, IT failure, fatal accident, mass absenteeism, etc. The RQA consultant will spend time with individuals within your company to best understand the issues and current crisis plans (if any); looking for best practice as well as gaps to fill. The consultant will then remotely start to develop the business continuity plans (BCP) whilst keeping in regular contact with the appointed contact person within your company.
There will be the need for further communication for the consultant to ensure that the business continuity plans that they develop are completely in line with your business. Once a draft BCP is completed the RQA consultant will send it to you for review. The consultant will also highlight areas that need additional attention and data / information. After further discussion, a final plan will be issued by you.
As a first step towards developing effective business continuity plans one or more meetings will take place between the RQA consultant and key members of your crisis management team. The first meeting will concentrate upon compiling a risk profile of 5 - 12 specific crises that could affect your business and classify them in accordance to severity and likelihood.
In addition to the risk profiling, the consultant will work with your team to develop a business impact analysis. This will identify specific processes or equipment or business functions that would cause significant business continuity issues if they failed or did not perform as expected. Factors such as down time impact, ability to replace, outsourcing, related timescales and costs will be included in a concise but effective matrix.
The business continuity plans will take the form of a series of procedures for dealing with each crisis identified in the risk profiling exercise. Each will be a practical tool that is easy to follow and considers notification, escalation and communication with an accompanying action plan.
It is very important to test your business continuity plans, your team and company systems once they have been completed and then annually. RQA’s test formats include: “incident run through”, “table top simulation”, “live exercise with emergency services”.
“Incident run through”
The RQA consultant would run through a specific incident type and assess your business continuity plans, related systems and capability for incident management and business continuity. A report will be compiled that will highlight strengths and weaknesses in the process from incident start, through crisis management and business continuity.
“Table top simulation”
The RQA consultant will develop a scenario with input from a member of your team. This will relate to one of your crisis types identified in your risk profiling. Your team (based in your board room or located remotely) will be fed information from the consultant regarding a serious incident, followed by various “injects” that escalate the scale as time goes on.
On completion of all simulations and exercises, a full report will be prepared highlighting findings from the exercise with recommendations for further developments of plans and capability.
For more information about any of RQA's services call +44 (0)118 935 72 42