Business Continuity Plan Template for Regional Gardens Ltd Project

This project develops a Business Continuity Plan (BCP) for Regional Gardens Ltd, a company with multiple gardening enterprises. The plan addresses the company's need for contingency planning, including a Recovery Time Objective (RTO) of 2 hours and a Recovery Point Objective (RPO) of 4 hours. The assignment includes a detailed risk management plan, data security and backup strategy, and a business impact analysis to identify critical business activities and potential losses. An incident response plan is provided, along with recovery strategies, checklists, and contact information. The BCP also outlines resource requirements for hardware, software, and locations. The project emphasizes the importance of business continuity in the face of potential disruptions, ensuring the company's ability to resume critical operations promptly.

Business Continuity Plan Template

Course 2
© State of Queensland, 2013.
The Queensland Government supports and encourages the dissemination and exchange of its information. The
copyright in this publication is licensed under a Creative Commons Attribution 3.0 Australia (CC BY) licence.
Under this licence you are free, without having to seek our permission, to use this publication in accordance with the
licence terms.
You must keep intact the copyright notice and attribute the State of Queensland as the source of the publication.
Note: Some content in this publication may have different licence terms as indicated.
For more information on this licence, visit http://creativecommons.org/licenses/by/3.0/au/deed.en
© The State of Queensland (Open Learning Institute of TAFE) 2024 Page 3
Version: 8789227341129566677.docx

Contents
INTRODUCTION..................................................................................................3
Developing a Business Continuity Plan................................................................3
BUSINESS CONTINUITY PLAN..........................................................................5
SECTION 1...........................................................................................................6
Executive Summary:...........................................................................................6
Objectives:.........................................................................................................6
Glossary:............................................................................................................6
SECTION 2...........................................................................................................8
Risk Management Planning..................................................................................8
Insurance........................................................................................................11
Data security and backup strategy.................................................................12
SECTION 3.........................................................................................................14
Business Impact Analysis.......................................................................................14
Business Impact Analysis..................................................................................19
SECTION 4.........................................................................................................20
Incident Response Plan..........................................................................................20
Immediate Response Checklist...........................................................................20
Evacuation Procedures.......................................................................................21
Key Contact Sheet.............................................................................................24
EVENT LOG.......................................................................................................25
SECTION 5.........................................................................................................26
Recovery..............................................................................................................26
Recovery Plan...................................................................................................27
Incident Recovery Checklist...............................................................................29
Recovery contacts.............................................................................................30
Insurance claims...............................................................................................31
Market assessment............................................................................................32
Page 1

SECTION 6.........................................................................................................33
Rehearse, Maintain and Review..............................................................................33
Training schedule:.............................................................................................33
Review schedule:..............................................................................................34
Reference:.............................................................................................................35
Page 2

Introduction
The primary aim of this report is to discuss about the adoption of business
continuity plan on the business infrastructure of Regional Gardens Ltd Company, which
serves the gardening facilities. Followed by the identification, it is determined that into
the business infrastructure of this company there is a small data centre, which stores the
data related to the organization. Along with this, there is a lack of rule and regulations,
which influences the operations, and the service effectiveness of the organization.
Making allowance to this concern it is determined that in this business infrastructure
there is a huge necessity to implement effective business continuity plan with the
purpose to enhance the operations as well as the services of Regional Gardens Ltd.
The primary objective behind the incorporation of business continuity plan into
the business infrastructure is to involve system recovery and prevention system, which
will help the business to get quick recovery from any disaster.
Developing a Business Continuity Plan
Followed by a thorough investigation on the business infrastructure of Regional
Garden Ltd., several significant limitations needs to be mitigate with the purpose to
enhance the services of the nominated organization. Making allowance to the concern it
is determined that in the business infrastructure the adoption of a capable data structure,
effective rule and regulation as well as to implement data security, backup strategy and
disaster recovery strategy [1]. As it is observed that into the nominated business
structure there are several limitation related to data security thus, it is essential to
implement effective data threat prevention system as well as recovery system which will
help to maintain the data security within the organization.
Page 3

Page 4

Regional Gardens Ltd
Business Continuity Plan
Page 5

Section 1
Executive Summary:
This report will consist a detail elaboration of the Regional Gardens Case scenario
and identify the risk that has major impact on the services of the nominated
organization. Followed by this in this report a detail elaboration of the objectives is
present which will help to understand why in this organization business continuity plan
has been introduced. With the purpose to discuss this paper has included a brief
elaboration on the risk management and the approached recovery plan. Along with it
will also provide a brief idea about the business impact as well.
Objectives:
After analysing the case scenario of Regional Garden Ltd. it is observed that, the
adoption of Business Continuity Plan will be very effective to address the issues present
in this case scenario.
The primary objective behind the incorporation of Business Continuity Plan is listed
below-
 Assess the risk, which is bothering the business services, by using the effective
risk management plan [2].
 Critical analysis of the data present within the organization with the purpose to
sort them according to their priorities.
 Provide a systematic process that will help to recover the identified issues.
 Provide a disaster recovery plan that will help to get a quick recovery from the
influence of the disasters.
Glossary:
Business Continuity
Planning.
This systematic process helps the organization to develop a
disaster prevention and recovery control plan.
Business Continuity
Plan
A document that will contain a detail information required to
ensure that Regional Gardens Ltd. business is now able to
resume critical business activities in case in disaster occurs.
Business Impact
Analysis
The process of gathering information to determine basic
recovery requirements for Regional Gardens Ltd. business
activities in the event of a disaster.
Key business
activities
These activities are essential to deliver outputs and
achievement of Regional Gardens Ltd. business objectives.
Page 6

Recovery Time
Objective (RTO)
The time from which a disaster to the time that the critical
business functions must be operational in order to avoid
serious financial loss.
Resources The means that support delivery of an identifiable output and/or
result. Resources may be money, physical assets, or most
importantly, people.
Risk Management The process of defining and analysing risks, and then deciding
on the appropriate course of action in order to minimise these
risks, whilst still achieving business goals.
Insurance identification This is the process of identifying effective insurance for the
Regional Gardens Ltd. Which will help to get an idea about the
financial recovery terms and conditions [3].
Data security and backup
strategy development
This is the process of developing data security and backup
strategy that will help to keep the data protected within the
network server of the organization.
Business Impact analysis This process will help to get a detail idea about the impact of the
developed strategy on the business infrastructure [4].
Incident Response Plan This plan will help to get an idea about the security measures
which will help in case of any disaster.
Immediate Response Plan These strategies will help to mitigate any threat with immediate
response.
Recovery Plan Will help to recover from the disaster which has impacted the
business services of the Regional Garden Ltd.
Rehearse, Maintain and
review
Will help to provide awareness within the staff that will help to
ensure the effective application of security policies within the
business structure of Regional Gardens Ltd.
Page 7

Section 2
Risk Management Planning
Page 8

Risk Management Plan
Prepared by.:………………………………………………………Date: ……………………………
Reviewed by: …………………………………………………….. Date: ……………………………
Key:
VH = Very High
H = High
M = Medium
L = Low
Risk Description:
Likelihood
Impact
Priority
Preventative Action Contingency Plans
Risk in production
process:
- malfunction of the
key equipments and
plants
- poor trained staffs
- Knowledge loss and
slow on boarding
- lack in control of
processes
L VH M  The equipment and the plant of the concerned business
should be maintained and reviewed on a regular basis
such that Regional Gardens Ltd. can resist itself from
various malfunctioning issues
 An agreement should be in place such the organization
can demand for 24 hours repair service from any repair
corporations.
 A well-organized training program should also be
introduced such that the new comers are well trained as
well as they can freely operate the plants [5].
 In case of any malfunction of the
plants, the operations should not
be put to hold. The business
should continue its operation
with the help of back up data
Risk in Data Security VH VH H  Proper Encryption of the sensitive data should be done  The other data sources should be
Page 9

Risk Description:
Likelihood
Impact
Priority
Preventative Action Contingency Plans
such that a third cannot misuse the data in any means.
 Implementation of an effective firewall [6]
 Installation of an effective anti-virus software in every
machine
 Use of proper network monitoring tool.
immediately locked or secured
such that the attackers cannot
view or utilize data.
Supply Department
- Delay in supply
- Miscommunication
of the products or
services
M H H  Continuous development of the supply chain
management
 Usage of effective and efficient communication channel
Include more number of inventories in
the stock [7]
Finance Department
- Incorrect
financial
records
- Useless data
- Bugs
L H L  The input should be cross checked before inserting it in
the information system
 The financial records should be analysed using proper
tool such that probability of error occurrence becomes
zero [8].
Manual processing of the financial
records.
Page 10