Congratulations on taking the first steps. Your company may recognize the need to have a business continuity plan and may have begun to identify business-critical processes and procedures. They may not yet be documented, but identification is a crucial first step. In addition to documenting your processes, which will be needed for training as people start to transition into contingency mode, you will also want to ensure you are identifying the primary resources and their alternates that will be necessary to perform those processes and make crucial business decisions. When thinking about resources, be sure to remember the business-critical applications and systems that those resources will need are identified and back-ups established, including any needed geographical redundancy. If you require goods or services from external vendors to make or deliver your company’s products and services, you will also want to identify and capture possible supply chain interruptions. This would include understanding and preparing for all customer experience impacts of a disrupted supply chain.
With regards to Change Management, your company is most likely operating in an ad hoc manner. Your process for managing change to people, processes, and systems should be formalized, automated, and monitored. Additionally, operational risks might be identified but they still need to be related to business-critical processes. These should include regulatory requirements as well as associated controls.
Lastly, your business has done well to identify some key performance indicators (KPIs) for your business-critical processes, however you may still need to establish actual measures to ensure they are being met and are strategically aligned. Doing so will allow your company to identify and prioritize when and how to enact emergency mode procedures.
As you move forward, it will also be important to ensure you are doing so using a process-centric business modeling methodology. Doing so will align the work to many other operational use-cases including compliance, digital transformation, and customer experience.
Download the Resiliency & Business Continuity Handbook