Business Continuity Plan

This project provides a comprehensive Business Continuity Plan template, guiding businesses through the process of developing a plan to ensure continuity of operations during and after critical incidents. It covers risk management, business impact analysis, incident response, recovery planning, and ongoing maintenance.

CPPDSM

Table of Contents
SUMMATIVE ASSESSMENT 1....................................................................................................4
Question 1:..............................................................................................................................4
Question 2:..............................................................................................................................4
Question 3:..............................................................................................................................4
SUMMATIVE ASSESSMENT 2....................................................................................................5
Project 1.................................................................................................................................5
Project 2.................................................................................................................................5
Introduction......................................................................................................................................3
Developing a Business Continuity Plan.................................................................................3
Business Continuity Plan.................................................................................................................6
Distribution List.................................................................................................................7
Name.....................................................................................................7
References and related documents.....................................................................................7
Section 1...........................................................................................................................................8
Executive Summary (optional)..........................................................................................8
Objectives..........................................................................................................................8
Glossary.............................................................................................................................8
Section 2.........................................................................................................................................11
Risk Management Planning..................................................................................................11
Risk Management Plan...........................................................................................12
Insurance..........................................................................................................................14
Data security and backup strategy...................................................................................14
Section 3.........................................................................................................................................15
Business Impact Analysis.....................................................................................................15
Business Impact Analysis................................................................................................19
Section 4.........................................................................................................................................20
Incident Response Plan.........................................................................................................20
Immediate Response Checklist........................................................................................20
Evacuation Procedures.....................................................................................................21

Emergency kit..................................................................................................................21
Roles and Responsibilities...............................................................................................23
Key Contact Sheet...........................................................................................................24
Event Log........................................................................................................................25
Section 5.........................................................................................................................................26
Recovery...............................................................................................................................26
Recovery Plan..................................................................................................................27
Incident Recovery Checklist............................................................................................28
Recovery contacts............................................................................................................29
Market assessment...........................................................................................................29
Section 6.........................................................................................................................................31
Rehearse, Maintain and Review...........................................................................................31
Training schedule.............................................................................................................31
Review schedule..............................................................................................................31

SUMMATIVE ASSESSMENT 1
Question 1:
Risk factor can defined as a condition which possess chances of losing a value. It is
directly affects the profitability of a business and can provide positive as well as negative
outcomes. The risk factors in respect to real estate agency are as follows:
 Operational risk: This risk is high as there is no proper system of managing the
activities. Clients who have complained Kurt, never received any response which
increased their difficulties this caused arise of legal case situations. Along with
this, money from company's official account was withdrawn to save the Porche
from being seized.
 Financial risk: An overstated operating statement was presented to a client which
on finding, shown that no management fees, repair and other costs were being
made. In addition to this, Lily is asking for workers compensation against the
agency and there are many other occasions which have contributed to high
financial risks.
 Social and political risks: The continuation of recession period is a huge risk
which will force this agency to earn low profits. In the context of social risk, it has
already damaged its public image which is valuable for every organization.
 Client risk: The number of incidents of legal consequences, and non-response of
complaints, it has lost majority of customers including the important ones.
Question 2:
Operational risk: Identification of factors responsible and accountability of each
individual involved with the events together with quantifiable data.
Financial risk: Cross examination of all accounts, journals and financial statement.
Social and political risk: Evaluation of impact of conditions prevailing in the society.
Client risk: Resolving client's queries with prompt action.
Question 3:
The risks must be informed to all the employees working in the organization so that their
negative impact on business can be reduced. It can be communicated directly or through a
meeting in which a presentation will be given describing the real situation of the company.

SUMMATIVE ASSESSMENT 2
Project 1
Covered in Pamphlet.
Project 2

© State of Queensland, 2013.
The Queensland Government supports and encourages the dissemination and exchange of its information. The copyright in this
publication is licensed under a Creative Commons Attribution 3.0 Australia (CC BY) licence.
Under this licence you are free, without having to seek our permission, to use this publication in accordance with the licence terms.
You must keep intact the copyright notice and attribute the State of Queensland as the source of the publication.
Note: Some content in this publication may have different licence terms as indicated.
Business Continuity Plan Template

Contents
Introduction......................................................................................................................................1
Developing a Business Continuity Plan.................................................................................1
Business Continuity Plan.................................................................................................................1
Distribution List.................................................................................................................1
References and related documents.....................................................................................1
Section 1...........................................................................................................................................1
Executive Summary (optional)..........................................................................................1
Objectives..........................................................................................................................1
Glossary.............................................................................................................................1
Section 2...........................................................................................................................................1
Risk Management Planning....................................................................................................1
Insurance............................................................................................................................1
Data security and backup strategy.....................................................................................1
Section 3...........................................................................................................................................1
Business Impact Analysis.......................................................................................................1
Business Impact Analysis..................................................................................................1
Section 4...........................................................................................................................................1
Incident Response Plan...........................................................................................................1
Immediate Response Checklist..........................................................................................1
Evacuation Procedures.......................................................................................................1
Emergency kit....................................................................................................................1
Roles and Responsibilities.................................................................................................1
Key Contact Sheet.............................................................................................................1
Event Log..........................................................................................................................1
Section 5...........................................................................................................................................1
Recovery.................................................................................................................................1
Recovery Plan....................................................................................................................1

Incident Recovery Checklist..............................................................................................1
Recovery contacts..............................................................................................................1
Insurance claims................................................................................................................1
Market assessment.............................................................................................................1
Section 6...........................................................................................................................................1
Rehearse, Maintain and Review.............................................................................................1
Training schedule...............................................................................................................1
Review schedule................................................................................................................1
2

Introduction
The purpose of developing a Business Continuity Plan is to ensure the
continuation of your business during and following any critical incident that
results in disruption to your normal operational capability.
This guide will assist you to undertake a Risk Management Plan and Business
Impact Analysis, and create Incident Response and Recovery Plans for your
business.
Developing a Business Continuity Plan
This template incorporates the Prevention, Preparedness, Response and
Recovery (PPRR) framework. Each of the four key elements is represented by
a part in the Business Continuity Planning Process.
 Prevention - Risk Management planning
- Incorporates the Prevention element that identifies and manages
the likelihood and/or effects of risk associated with an incident.
 Preparedness - Business Impact Analysis
- Incorporates the Preparedness element that identifies and
prioritises the key activities of a business that may be adversely
affected by any disruptions.
 Response – Incident Response planning
- Incorporates the Response element and outlines immediate
actions taken to respond to an incident in terms of containment,
control and minimising impacts.
 Recovery - Recovery planning
Page 3

- Incorporates the Recovery element that outlines actions taken to
recover from an incident in order to minimise disruption and
recovery times.
We have also included a section titled Rehearse, Maintain and Review, which
encourages you to test, regularly review and update your Business Continuity
Plan to ensure that your staff are familiar with it, and that it reflects your
changing business needs.
Business operators should use the following template as a guide to developing
a Business Continuity Plan. Customise it to suit your business needs. The blue
sample text is there to guide you and can be deleted after you have completed
the template. Remember to save your document.
Page 4

Page 5

Insert Your
Business Name
Business Continuity Plan
Page 6

Date: _____________________________________________
Distribution List
Copy Number Name Location
001 Ruby Williams Queensland
002 Brooke Cowell Sydney
003 Max Jones Sydney
004 Benjamin Taylor Melbourne
References and related documents
Document Title
Financial statements
Risk analysis
Budget
Product design plan
Page 7

Section 1
Executive Summary (optional)
The report has been drawn upon business continuity plan which has defined risk
management planning. Before making a plan, various factors having adverse effects on
the business have been identified together with selection of appropriate method for
reducing such risks. Along with this, business impact analysis has been done in which
an evaluation of identified risks and relation with each elements of business operations.
Furthermore, incident response plan followed by recovery options from the contingency
situations.
Objectives
An objective refers to a specific plan which is intend to achieve goals of an
organization. It is prepared to get desired results.
The objectives of this plan are to:
 conduct risk management assessment
 define and categorised critical business functions
 explanation of immediate response to a critical incident
 detail strategies and actions to be taken to sustain in the business
environment
 review and update this plan on a regular basis.
Glossary
This table provides a consistent and commonly agreed set of definitions for
terms used in the plan. You should customise this list to suit your business.
Business Continuity
Planning
a process that helps develop a plan document to manage the
risks to a business, ensuring that it can operate to the extent
required in the event of a crisis/disaster.
Business Continuity
Plan
a document containing all of the information required to
ensure that your business is able to resume critical business
activities should a crisis/disaster occur.
Business Impact
Analysis
the process of gathering information to determine basic
recovery requirements for your key business activities in the
event of a crisis/disaster.
Key business
activities
those activities essential to deliver outputs and achievement
of business objectives.
Recovery Time the time from which you declare a crisis/disaster to the time
Page 8

Objective (RTO) that the critical business functions must be fully operational in
order to avoid serious financial loss.
Stakeholders These are the parties affecting the business of the entity and
includes employees, government, customers, suppliers,
communities, suppliers etc.
Page 9

Resources the means that support delivery of an identifiable output and/or
result. Resources may be money, physical assets, or most
importantly, people.
Risk Management is the process of defining and analysing risks, and then deciding on
the appropriate course of action in order to minimise these risks,
whilst still achieving business goals.
Page 10

Section 2
Risk Management Planning
Risk management planning is the process which defines way in which planning
can be done along with how to approach and execute them in a risk
management project.
The questions to ask yourself are:
 What could cause an impact?
In this the risks that have been identified are assessed to know which
one could affect significantly.
 How serious would that impact be?
A detail evaluation of all the identified risks are done to measure
the impact or loss that could happen to the business.
 What is the likelihood of this occurring?
In this, frequency of occurrence is examined. This makes clear the
probability of repetition.
 Can it be reduced or eliminated?
Risk management planning can help in mitigating number of risks
or reduce their severity so that loss could be avoided.
Page 11

Risk Management Plan
Prepared by.:………………………………………………………Date: ……………………………
Reviewed by: …………………………………………………….. Date: ……………………………
Key:
VH = Very High
H = High
M = Medium
L = Low
Risk Description:
Likelihood
Impact
Priority
Preventative Action Contingency Plans
Damage to assets
(particularly office
building)
H VH H
 Ensure to make enough provisions for contingencies to survive
in recession and other events.
 Ensure adequate insurance cover for building and other
properties.
 Accessibility to funds set out for such
phase.
Financial risks H H H
 Ensure solvency is maintained by paying off the loans and
having an amount for such incidents.
 Borrowings from relative and friends at the time of recession.
 Prompt availability of funds and
borrowings while repaying all the
amounts.
Legal risks due to law
suits by various parties.
VH VH H
 Ensure to comply with each law and maintain transparency in
the operations.
 The complaints of clients should be
resolved immediately in order to
Page 12

Risk Description:
Likelihood
Impact
Priority
Preventative Action Contingency Plans
make them calm.
Page 13

Insurance
Insurance type Policy coverage Policy exclusions Insurance company and
contact
Last review date Payments due
Legal protection
insurance (LPI)
Insurance coverage will
include:
 providence of
access to law
 Cost of dispute
It does not include a
legal case that has
already been
started.
QBE Insurance (Australia) Ltd.
Ph. no. [phone]
12/03/19 $1200
Office properties Harm due to:
 fire
 flood
 theft
Other natural
calamities and
terrorist attack.
MLC Insurance, Glenegle SA,
Australia, [phone]
10/05/19 $1500
Data security and backup strategy
Data for backup Frequency of backup Backup media/ service Person responsible Backup procedure steps
Client details Weekly Company's computer system Kurt Grohl
 Installation of firewalls for protection of database
Page 14

Data for backup Frequency of backup Backup media/ service Person responsible Backup procedure steps
 Copy data from Customer database
 Transmission through secured networks
Financial transactions Daily Computer system of
company
Nathon Symonds
 Installation of antivirus software
 Transmitted through secured lines.
 Review.
Page 15

Section 3
Business Impact Analysis
Business Impact Analysis (BIA) is a process through which impact of risks so
identified in risk management plan is evaluated which may have significant
effect on business operations.
Page 16

1. In the following table, list the business activities that must be performed to
ensure your business continues to operate effectively. If you have a
number of business units/departments, complete one table for each.
1 Financial activities
2 Legal activities
2. For each business activity listed above, complete the following:
Business Activity Name: Financial activities
Business Activity Description: Availability of finance to buy properties from vendor
in order to sell to clients.
)a What are the losses if this business activity could not be provided?
Loss of Revenue: $5000,000 annually
Increased Costs: $45,000
Staffing: Property sales representative will be reduced in total number till the time
recession subsists.
Product/service: More properties will be sold at higher price in order to have
adequate funds to revive the loss.
Fines or penalties due to missed deadlines: N/A
Legal liability, personal damage, public harm: $ 25,000
Loss of good will, public image: Company will lose its important clients which will
directly impact the image and reputation in the eyes of public and its customers.
Comments:
Deficiency in funds will be fulfilled in 2 months from today.
Business Activity Name: Legal activities
Business Activity Description: Compliance with applicable law together with
rules and amendments.
(b) What are the losses if this business activity could not be provided?
Loss of Revenue: $ 10,00,000 annually
Increased Costs: N/A
Staffing: A legal expert will be appointed to look after the matters.
Product/service: Increased in legal compliance
Fines or penalties due to missed deadlines: $450,000
Legal liability, personal damage, public harm: N/A
Loss of good will, public image will be damaged which can make it wound up.
Page 17

Comments: All the non compliances will be fulfilled by the end of 3 weeks by
paying penalties and fines.
)b For what maximum amount of time could this business activity be unavailable
(either 100% or partial) before the losses would occur?
__________20_____________ hrs
___________3_____days
Comments: Prompt actions will taken on designing every plan and their
respective activities for resuming the work in order to carry business with ease.
Non continuation of financial activities will affect dealings which will ultimately
lowers down the profits. On the other hand, if more legal consequences arise, it
will waste the funds which could be use in more productive areas and activities.
)c Does this activity depend on any outside services or products for its
successful completion?
 NO
 YES – If yes, check one of the following: Sole Supplier  Major Supplier  Many Alternate Suppliers
Comments:
Financial activities are important as it helps in carrying out each activity within
the time. The funds in the company has been raised through number of parties
who have invested with a view to get an expected return. Therefore, to earn
profit, all the areas should keep their operations on so that funds can generate
enough to be able to utilise appropriately.
)d On a scale of 1 to 5 (1 being the Most Important, 5 being the Least
Important), where would this business activity fall in terms of being
important to the operation of your department or business? - 1  - 2  - 3  - 4  - 5
Comments:
Timely deployment of funds are its top priority.
Completed By: 15th Jan 2019__________________________ Date:
______________
Page 18

Business Impact Analysis
Critical Business
Activity
Description Priority Impact of loss
(describe losses in terms of financial,
staffing, loss of reputation etc)
RTO
(critical period
before business
losses occur)
Financial activities
 Availability of finance to buy
properties from vendor in order to
sell to clients.
High
 Reduction of $500,000 annually
 Sales representative will be
reduced.
 More properties will be sold at
higher price.
 Clients may find other real estate
agents who provide good quality
services.
 Non payment of various
obligations.
2 months
Legal activities
 Compliance with applicable law
together with rules and
amendments.
Very
High
 Reduction of $10,00,000 annually
due to non-compliance.
 All the applicable laws will result in
financial losses
 reputation will be destroyed
 Increased expenses
3 weeks
Page 19

Section 4
Incident Response Plan
It is a structured method for taking steps for managing the number of
circumstances that have take place within the organization because of
risks. It is done to protect security and restore the working to make
everything normal. It is a way to tackle contingencies.
Incident Response Plan.
Immediate Response Checklist
INCIDENT RESPONSE  ACTIONS TAKEN
Have you:
 measured the degree of recession on the
business activities?

The impact on each
activity is evaluated
to determining the
risk associated.
 Identified the risks involved?

Risk management
plan was made to
address the
challenged and
decrease their
impact.
 Made provisions for contingencies?

There was no
enough provisions,
thus, money was
borrowed.
 Borrowed funds for managing the business
operations? 
An agreement was
formed defining
date of repayment
and interest to
borrow more funds.
 Asked for every detail about legal compliance from
the staff?
 All the documents
along with penalties
and fines were paid
to avoid further
Page 20

legal liabilities.
 Made any plans for mitigating the effect of loss?  None
 All the details about clients have been stored in safe
devices? 
A safe external
device was kept in
which all the data
was copied.
Evacuation Procedures
It is a procedure which comprises actions and plans which are to be
taken at the time of emergency. An organization should prepare and
notify employees about plans which are to be implemented at the time
of urgency. The main is to take control of everything to protect the
potential losses. The procedure if as follows:
 A base of the whole site is to be prepared.
 Identification of risks and its impact
 development of strategies for various situations
 notification of the plan to every employee
 review of plan on a regular basis
Emergency kit
This is a temporary shifting of the whole business from one place to
another so that it could be saved. This is an alternative way to carry the
work safely and easily until the situation gets okay.
Items that you may wish to include are:
Documents:
 Business Continuity Plan – your plan to recover your business or
organisation in the event of a critical incident.
 List of employees with contact details – include home and mobile
numbers, and even e-mail addresses. You may also wish to include
next-of-kin contact details.
 Lists of customer and supplier details.
 Contact details for emergency services.
 Contact details for utility companies.
Page 21

 Building site plan (this could help in a salvage effort), including
location of gas, electricity and water shut off points.
 Evacuation plan.
 Latest stock and equipment inventory.
 Insurance company details.
 Financial and banking information.
 Engineering plans and drawings.
 Product lists and specifications.
 Formulas and trade secrets.
 Local authority contact details.
 Headed stationery and company seals and documents.
Equipment:
 Computer back-up tapes/disks/USB memory sticks or flash drives.
 Spare keys/security codes.
 Torch and spare batteries.
 Hazard and cordon tape.
 Message pads and flip chart.
 Marker pens (for temporary signs).
 General stationery (pens, paper, etc).
 Mobile telephone with credit available, plus charger.
 Dust and toxic fume masks.
 Disposable camera (useful for recording evidence in an insurance
claim).
Page 22

Roles and Responsibilities
Former is associated with the position that one has in a particular
operation or process. On the other hand, latter is concerned with
specific functions or tasks of a person holding the position.
ROLE DESIGNATED EMPLOYEES ALTERNATE
Team Leader Name: John Wick
Contact Information:
+2856845
Name: Gift Thompson
Contact Information:
2678551
Emergency Responsibilities:
 ensure the Business Continuity Plan has been activated
 review effective implementation of the response and recovery section of
the plan
 assessment of the need for and activate the use of an alternate operation
site and other continuity tasks
 communicate with key stakeholders as needed
 provide important information to the Communication Officer for distribution
 keep key staff apprised of any changes to situation.
Page 23

Key Contact Sheet
Contact List – Internal
Person Contact
number/s
Email Responsibiliti
es
- John Wick 2856845 [e-mail] Team Leader
- Gift
Thompson
2678551 [e-mail] Alternate Team
Leader
Contact List – External
Key contacts Contact number/s
Police [phone]
Emergency Services [phone]
Ambulance [phone]
Medical [phone]
Security [phone]
Insurance company [phone]
Suppliers [phone]
Water and Sewerage [phone]
Gas [phone]
Electricity [phone]
Telephone [phone]
Page 24

Event Log
Date Time Information / Decisions / Actions Initials
21/05/1
9
0900 hrs Activate Business Continuity Plan. TL
Page 25

Section 5
Recovery
Page 26

Recovery Plan
Critical
Business
Activities
Preventative/Recovery Actions Resource
Requirements/
Outcomes
Recovery Time
Objective
Responsibility Completed
Financial
services resumed
 Evaluation of financial position of
business along with cash flow because
of non-fulfilment of expenses.
 Adjustments in terms and condition in
the agreement made with suppliers for
continuing the production.
 source alternative production site
 diversify product range and services
offered e.g. repairs and restoration.
 Provision for
meeting the
difficult situations
 sufficient flow of
finance to other
departments from
retain earnings
2 weeks Business owner/
operator
04/08/19
Page 27

Incident Recovery Checklist
INCIDENT RESPONSE  ACTIONS
Checklist:
 refocused efforts towards recovery?
 The plan and guidelines
were provided to the
employees.
 deactivated staff members and resources
as necessary? 
The existing plans were
redesigned to allot the
resources and tasks
efficiently.
 continued to gather information about the
situation as if effects you?
 Historical data were also
included along with current
information.
 assessed your current financial position?

It was strong but some
areas required more funds
for which it borrowed
finance.
 reviewed cash requirements to restore
operations?
 There were deficiency of
cash which were met with
short term loans.
 developed financial goals and time-frames
for recovery?
 Medium to long term goals
were prepared with the
suggestions of employees.
 kept staff informed?  Yes, they were notified
about the changes.
 kept key stakeholders informed?

A meeting was held
between the company and
the shareholders. Others
were notified when the
documents were uploaded
online.
 identified information requirements and
sourced the information?
 Different sources are
accessed for gathering the
information.
 updated the Recovery Plan?  No such changes have
been made.
 captured lessons learnt from your  Team involvement is
necessary and every
Page 28

individual, team and business recovery? individual should be ethical.
Page 29

Recovery contacts
Include all of the organisations/people that will be essential to the recovery of your business.
Contact Type Organisation Name Contact Title
Accountant Henry Gomez & Co. [phone] Finance manager
Lawyer LawWizard & associates [phone] Legal service
Insurance claims
Page 30

Insurance company Date Details of claim Follow-up actions
QBE Insurance (Australia)
Ltd. Ph. no. [phone]
10/07/19 The expenditure that have incurred due to legal
obligations- William Thomas. Ph. No. +61 7
4957 5822
The process followed by the insurer:
 Policy document will be checked to see what is
covered in that document.
 Applicable time frames .
 Proof of documents of lawsuit and legal
actions.
Market assessment
Market changes Impact to business Business options
The change in interest rate to
borrow funds
This will make it worse to raise funds to tackle with risk issues. Adequate provisions can save the company to meet
contingent requirements.
Page 31

Market changes Impact to business Business options
Introduction of due diligence
while obtaining loans
This is a step taken by the banks or financial institutions to review any risks
before granting loans.
The company should focus on legal compliance and
financial reporting requirements in order to avail funds
at the right.
Page 32