Business Continuity Plan Template by xuyuzhu

VIEWS: 3 PAGES: 10

									                             [COMPANY NAME}

                      BUSINESS CONTINUITY PLAN
                           Revised: [January 31, 2010]


This business continuity plan template targets small to medium sized companies
in multiple locations. None of this material is copyrighted, so please feel free to
use and change this template to suit your unique situation. Follow this simple
step-by-step process to complete your business continuity plan.

      Create your own Crisis Management Team to evaluate and enumerate
       your mission critical business processes. Your team could even be just
       yourself.
      Complete your business continuity “action task lists” in as much detail as
       possible. Your “action task lists” will become the guides that step you
       through any business continuity situation.
      Replace the text in each section with information specific to your unique
       organization, including your mission critical business processes and
       detailed action task lists.
      Distribute copies of your business continuity plan document to your
       partners and employees and place a copy away for safekeeping.
      Test, review and modify this plan every year.

The information in this plan is by no means exhaustive. I’ve read hundreds of
Business Continuity Plans over the past twenty-five years, some as little as four
pages and others well over a hundred pages. I hope you can put this plan to
work to help you jump-start your business continuity efforts. No businessperson
deserves to go down the path of disaster recovery without a plan.

Please contact us if you need help with your plan or with business continuity
services designed to fail over your systems to backup systems within minutes.

 Planning - Continuous Data Protection - Active Disaster Recovery And Failover

       BAKUPZ.COM - BUSINESS CONTINUITY FOR THE REST OF US
                                LES MURPHY - CEO
GENERAL OVERVIEW

   Disaster

   A disaster is any event that is capable of disrupting our business or just portions of it for
   any period of time including Significant Business Disruptions or Data and/or Systems
   Loss During The Normal Course Of Business.

   Significant Business Disruption

      Regional events such as fires, earthquakes, or storms that close primary offices,
       temporarily or permanently
      Local events like a bulldozer accidentally cutting electrical or data line that partially or
       completely shut down your data center
      Company-specific events such as ceiling tiles falling due to water leaks

   Data and/or Systems Loss During The Normal Course Of Business

      System-specific events such as employee errors or software bugs that erase six
       months of data or take down an entire system
      Loss of any business task dependant electronic folder or file such as a sales
       presentation, product purchase quotation or tracking spreadsheet report

   Crisis Management Team

   Our Crisis Management Team is a group of leaders responsible for developing and
   updating this Business Continuity Plan and to serve as go to leaders in a disaster.

   Approval Authority

   [Name – Title] and Director of the Crisis Management Team is responsible for approving
   the plan and for conducting the required annual review.

   Execution Authority

   [Name – Title] has the authority to execute this Business Continuity Plan.

   Disaster Response Policy

   Our Disaster Response Policy is to return mission-critical business processes to full
   functionality immediately. Our Crisis Management Team will execute a planned
   methodical response to any Significant Business Disruption by safeguarding employees’
   lives and company property, making financial and operational assessments, quickly
   recovering and resuming operations, protecting all of the company’s books and records,
   and allowing our customers to continue to transact business with us.

   Plan Location and Access

   Copies of this Business Continuity Plan, the annual reviews, and the changes made to it
   are available at any of our offices. Every employee has a copy of the plan and should
   maintain a current copy of the plan at their residence for reference.
EMERGENCY CONTACT PERSONS

    These Emergency Contact Person’s names and contact information will be updated in
    the event of a material change, and our Crisis Management Team will review them within
    10 business days of the end of each month.

    Management Contact: (Senior Management Contact On Crisis Management Team)

    [Name]
    [Title]
    [Telephone Number]
    [Email Address]

    Operations Contact: (Senior Operations Contact On Crisis Management Team)

    [Name]
    [Title]
    [Telephone Number]
    [Email Address]

    Information Technology Contact: (Senior IT Contact or Primary IT Service Provider)

    [Name]
    [Title]
    [Telephone Number]
    [Email Address]


CRISIS MANAGEMENT TEAM

    Senior Management

    [Name]
    [Title]
    [Telephone Number]
    [Email Address]

    Operations

    [Name]
    [Title]
    [Telephone Number]
    [Email Address]

    Information Technology

    [Name]
    [Title]
    [Telephone Number]
    [Email Address]

    Add Additional Names

    [Name]
    [Title]
        [Telephone Number]
        [Email Address]

        Add Additional Names

        [Name]
        [Title]
        [Telephone Number]
        [Email Address]


UNDERLYING STRUCTURE AND OPERATIONAL DETAILS


OFFICE LOCATIONS

        [Office Location 1]

        [Address]
        [Telephone Numbers]
        [Contact Names]
        [Directions]

        [Office Location 2]

        [Address]
        [Telephone Numbers]
        [Contact Names]
        [Directions]

        [Office Location 3]

        [Address]
        [Telephone Numbers]
        [Contact Names]
        [Directions]


ALTERNATIVE PHYSICAL LOCATIONS OF EMPLOYEES

In the event of a Significant Business Disruption, we will attempt to move staff members from the
affected office to the unaffected office location, relocate employees to a temporary location and
/or require employees to work from home or temporary residence.


DATA BACK-UP AND RECOVERY

Our company maintains its primary hard copy accounting books and records and its electronic
records and data at [Company Address]. [First Name, Last Name], [Title], [Telephone Number], is
responsible for maintenance of these books and records.

Our company maintains its back-up hard copy accounting books and records in an electronic
archive at [Service Provider Name], [Service Provider Address] and [Bank], [Bank Address],
[Bank Officer]. [First Name, Last Name], [Title], [Telephone Number], is responsible for
maintenance of these back-up books and records.

Our company backs up its electronic records and data off site daily to [Service Provider]

In the event of an internal or external Significant Business Disruption that causes the loss of our
paper records, we can recover copies from our electronic archive.

For the loss of electronic records or data, we will physically recover data from our back-up site or
fail over to mirrored systems.


FINANCIAL AND OPERATIONAL ASSESSMENTS

Operational Risk

In the event of a Significant Business Disruption, we will immediately identify what means will
permit us to communicate with our customers, employees, critical business constituents, critical
counter-parties, and regulators. Although the effects of a Significant Business Disruption will
determine the means of alternative communication, the communications options we will employ
will include our Web site, telephone voice mail, and secure e-mail. In addition, we will retrieve our
key activity records as described in the section above, Data Back-Up and Recovery.


Financial And Credit Risk

In the event of a Significant Business Disruption, we will determine the value and liquidity of our
investments and other assets to evaluate our ability to continue to fund our operations and remain
in capital compliance. If we cannot remedy a capital deficiency, we will file appropriate notices
with our regulators and take corrective action.


MISSION CRITICAL SYSTEMS
(Enumerate mission-critical business processes crucial to operating successfully so you can
protect the people who perform them and the IT systems and applications needed to run them. A
brief general description followed by specific details about each application and/or system
necessary for doing business goes below replacing the example text.)

Our company’s “mission critical systems” are those that ensure prompt and accurate processing
of day to day business activities, including order taking, entry, execution, comparison, allocation,
reporting, maintenance of customer accounts, access to customer accounts, and funding. More
specifically these systems include phone systems, secure e-mail systems, and computer order
entry, fulfillment and accounting systems.

Our Mission Critical Systems break into two types, systems provided by in house resources and
systems provided by outside managed services providers.

Systems Provided By In House Resources Will Failover To Virtual Systems

Sales Orders

In the event of an internal Significant Business Disruption, we will complete sales orders by
utilizing our failed over virtual Peachtree server accessed from the Internet. Sales order
confirmations will be completed as usual by directing them to our Print-to-Mail service provider.
Accounting

In the event of an internal Significant Business Disruption, we will complete accounting tasks
utilizing our failed over virtual Peachtree server accessed from the Internet. Report printing will be
done as usual by directing print jobs into our electronic imaging system. Invoicing will be done as
usual by directing invoices and statements to our Print-to-Mail service provider.

Inventory Management

In the event of an internal Significant Business Disruption, we will complete inventory tasks
utilizing our failed over virtual Amics inventory system server accessed from the Internet. Report
printing will be done as usual by directing print jobs into our electronic imaging system. All
inventories in disaster-affected locations will be placed on hold until an evaluation can be
completed and inventory released for sale.


Systems Provided By Service Providers Will Function As Normal

Sales Management – salesforce.com

Email and Unified Messaging – Hosted Exchange Server or Google Apps

Telephone Virtual PBX Systems – Hosted PBX

Print-to-Mail Service – Hosted Print-To-Mail


WORK FROM HOME

Our company provides portable computers to all of our managers and sales people. We also
provide secure remote access to all of our business process applications. In the event of a
Significant Business Disruption, we will access the ability of additional employees to continue
their work processes from home or from temporary housing in other locations. Only after a remote
worker assessment is completed will an employee be required to complete their work from a
remote location. Up until that assessment is completed, employees will be required to report to
the company’s temporary location.


ALTERNATIVE COMMUNICATIONS

Customers

We now communicate with our customers using the telephone, e-mail, our Web site, fax, U.S.
mail, and in person visits. In the event of a Significant Business Disruption, we will assess which
means of communication are still available to us, and use the means closest in speed and form
(written or oral) to the means that we have used in the past to communicate with the other party.
For example, if we have communicated with a party by e-mail but the Internet is unavailable, we
will call them on the telephone and follow up where a record is needed with paper copy in the
U.S. mail.

Employees

We now communicate with our employees using the telephone, e-mail, and in person. In the
event of a Significant Business Disruption, we will assess which means of communication are still
available to us, and use the means closest in speed and form (written or oral) to the means that
we have used in the past to communicate with the other party. We will also employ a system that
will enable management to reach all employees quickly during a Significant Business Disruption.

Vendors

We now communicate with our vendors using the telephone, e-mail, and in person. In the event
of a Significant Business Disruption, we will assess which means of communication are still
available to us, and use the means closest in speed and form (written or oral) to the means that
we have used in the past to communicate with the other party. We will also access the ability of
the vendor to continue to supply our needs and remedy the situation if necessary.

Banks and Financial Partners

We now communicate with our Banks and Financial Partners using the telephone, e-mail, and in
person. In the event of a Significant Business Disruption, we will assess which means of
communication are still available to us, and use the means closest in speed and form (written or
oral) to the means that we have used in the past to communicate with the other party. We will
apprise our Banks and Financial Partners with information about the state of our business and
our expectations and predictions regarding the effects of the disaster.


REGULATORY REPORTING

Our company is subject to regulation by the SEC, TXDOT, State of Texas, and State of New
York. We now file reports with our regulators using paper copies in the U.S. mail, and
electronically using fax, e-mail, and the Internet. In the event of an Significant Business
Disruption, we will check with our regulators to determine which means of filing are still available
to us, and use the means closest in speed and form (written or oral) to our previous filing method.
In the event that we cannot contact our regulators, we will continue to file required reports using
the communication means available to us.


DISCLOSURE OF BUSINESS CONTINUITY PLAN
We disclose in writing a summary of our Business Continuity Plan to our Banks and Financial
Partners annually. We also post the summary on our Web site and distribute it to our employees
after annual business continuity reviews. Our summary addresses the possibility of a future
Significant Business Disruptions and how we plan to respond to events of varying scope.


UPDATES AND ANNUAL REVIEW

Our company will update this plan whenever we have a material change to our operations,
structure, business, locations or service providers. In addition, our company will review this
business continuity plan annually, to modify it for any changes in our operations, structure,
business, locations or service providers and monthly for changes in contact information.
INVOKING THE BUSINESS CONTINUITY PLAN


DISASTER EVALUATION

     Crisis Management Team

     The Crisis Management Team will determine the nature and scope of any Significant
     Business Disruption and determine that the Business Continuity Plan Action Task List
     should be executed under the leadership of [Name – Title] who has the authority to
     invoke the Business Continuity Plan and Action Task List.

     Employees and Managers

     In the event of a Data and/or Systems Loss During The Normal Course Of Business
     situation, the employee and employee’s immediate up line manager notifies Information
     Technology Contact or Primary Service Provider Contact



ACTION TASK LIST FOR A SIGNIFICANT BUSINESS DISRUPTION

     This task list, the guts of your plan, requires detailed attention and assignments relative
     to your unique business. The amount of effort applied to this section by your Crisis
     Management Team will determine the success of your Business Continuity situation. This
     list needs to be step 1, 2, 3 etc and who does which step when. Redundant actions by
     multiple people need to be detailed here to mitigate the very real possibility of your
     company loosing individual players in a disaster. This task list can easily be many pages
     long but keep it focused on restoring predetermined mission critical business processes.

     The over riding principle must be that everything will be done to this plan and that every
     manager plays an important role in a successful Business Continuity situation.


     Communications

     Crisis Management Team contacts all managers and managers contact their subordinate
     employees to alert invocation of Business Continuity Plan

     Rapid Failover of Mission-Critical Business Processes

     Crisis Management Team contacts Information Technology systems disaster recovery
     resources to confirm activity and assess time to recovery, typically within minutes.

     Relocation

     Crisis Management Team evaluates relocation and if necessary, contacts relocation
     resource to prepare for arrival.

     Work at home scenarios and remote worker assessment

     Crisis Management Team assesses workforce to determine numbers of returning
     workers, status of remote workers and additional remote worker assignments.
     Notifications

            Contact all staff to advise of move to temporary facilities
            Display Public notice near current facilities to give directions to new facilities
            Advise Insurance Providers of relocation
            Advise local Police of relocation
            Advise business associates of change of circumstances and new contact details
            Once alternative PC systems are set up, include relocation and communications
             details on website.
            Market your availability to your customers. Call them and access their needs.

     Resource Evaluation and Job Assignments

     Up line managers re-invigorate workflow as soon as possible to maintain business
     momentum and avoid sales losses.

     Work Flow Continuity

     Crisis Management Team assesses and confirms continuation of each mission critical
     business process.

     Evaluation and Plan To Restore Business To Normal Operations

     Crisis Management Team and managers meet post disaster to plan restoration of
     business and return to normal operations.



ACTION TASK LIST FOR DATA AND/OR SYSTEMS LOSS DURING THE
NORMAL COURSE OF BUSINESS

     Communications

     In the event of a data and/or systems loss during the normal course of business situation,
     the employee notifies employee's immediate up line manager and notifies Information
     Technology Contact or Primary Service Provider Contact

     Systems Recovery and Failover

     The Information Technology Contact or Primary Service Provider Contact opens a
     service ticket documenting the data loss and works with the employee to recover the lost
     data using Continuous Data Protection tools.

     Work Flow Continuity

     The Information Technology Contact or Primary Service Provider Contact confirms that
     Work Flow Continuity is restored, and then documents the service ticket.

     Evaluation and Plan Return To Normal Operations

     The Information Technology Contact or Primary Service Provider Contact notifies
     employee's immediate up line manager of resolution, additional training needed and then
     documents and closes the service ticket.
SENIOR MANAGEMENT APPROVAL


The undersigned have approved this Business Continuity Plan as
reasonably designed to enable our company to meet its obligations to
customers, creditors and investors in the event of any Significant Business
Disruption as defined by this plan.



Signed:

Title:

Date:

								
To top