Business Continuity Plan for Regional Gardens Ltd: A Proposal

This report presents a Business Continuity Plan (BCP) designed for Regional Gardens Ltd, addressing the company's need for a robust strategy to mitigate risks and ensure business continuity. The plan begins with an executive overview and introduction, outlining the objectives and the importance of BCP in safeguarding business operations, especially given the identified issues in managing services. The report includes a business impact analysis that identifies critical activities, their priorities, and potential financial and reputational losses. An incident response plan is detailed, including roles, responsibilities, and contact information for key personnel. The plan also covers data backup procedures, risk management planning, insurance considerations, and a disaster recovery strategy, including recovery time objectives (RTOs). The report emphasizes the importance of continuous review and training for the BCP's effectiveness. The conclusion underscores the value of a well-defined BCP in ensuring the company's resilience and operational stability. The plan incorporates elements of the case study, addressing specific requirements such as RTO, RPO, MTD, and WRT.

Running head: BUSINESS CONTINUITY PLAN
BUSINESS CONTINUITY PLAN- Regional Gardens Ltd.
Name of the Student
Name of the University
Author Note

1BUSINESS CONTINUITY PLAN
Table of Contents
Executive Overview...................................................................................................2
Introduction................................................................................................................2
Business continuity plan.............................................................................................2
Business Impact..........................................................................................................3
Incident Response.......................................................................................................5
Key Contact Sheet..............................................................................................7
Event Log...........................................................................................................9
Backup........................................................................................................................9
Risk Management Planning......................................................................................10
Insurance..........................................................................................................12
Disaster Recovery.....................................................................................................12
Rehearse, Maintain and Review...............................................................................15
Training schedule.....................................................................................................15
Conclusion................................................................................................................16
Reference..................................................................................................................17

2BUSINESS CONTINUITY PLAN
Executive Overview
The aim of the assessment is to design a business continuity plan that will help in
overcoming the risks that are faced within the Regional Gardens ltd. The
organization runs a wide range of gardening enterprises. However, it has been
observed that the organization is facing serious with managing the services. Hence,
it is important to organize the business performance so that the issues can be
mitigated. The report aims at describing the key risks that are identified while
managing the risks within the Regional gardens ltd.
Introduction
The main aim behind designing a business continuity plan is to ensure that proper
support is offered towards the business performance. The key objective of the
assessment is to understand the risks and to design a proper mitigation strategy that
will help in ensuring that the business processes are continued properly.
The key objectives that are associated with the assessment are:
To determine the critical risks that arises within the organization
Prioritising the business functionalities
Reviewing the plan
With the help of this business continuity plan it will become easy to mitigate the
risks and the business performance will also improve.
Business continuity plan
Business continuity plan is referred to the process that focuses on creating a proper
system that will help in preventing and recovering the organization data after
getting hampered by a potential threat. The main component of BCP is to identify

3BUSINESS CONTINUITY PLAN
the key risks that have the potential to hamper the organization. The plan mainly
includes the following steps:
 Determining the risks that has the potential to hamper the business
operations
 Implementing proper safeguard measures for protecting and mitigating the
risks
 Preparing proper procedures for ensuring that the work has been completed
efficiently
 Reviewing each processes so that it becomes important to ensure that the
data are maintained up to date
Business continuity plan is considered as one of the most important for every
organization as this helps in protecting the data from loss. Business continuity plan
typically involves analyzing the business impact, recovery, organizational details,
and providing proper training. Regional gardens ltd is a company that focuses on
running a number related to gardening enterprise. There are several issues faced by
the organization at the current stage with managing the data and the way services
offered towards the customers. There are major issues currently faced by the
organization and thus it becomes essential to understand the impacts that will be
created on the people associated with the organization. With the help of business
continuity plan it becomes easy to manage the business performance.
Business Impact
Business continuity plan helps in analysing the critical activities that has the
potential to provide proper business. The business activities those are essential for
the Regional gardens ltd includes the nursery products and design for managing the
system performance. The company projects at offering different services that

4BUSINESS CONTINUITY PLAN
includes planners, and garden advice, design and consultancy services. The
activities that are associated with managing the regional gardens ltd are listed
below:
The company aims at providing the garden advices
The design services
Consultancy services
Critical
Business
Activity
Description Priorit
y
Impact of loss
(describe losses
in terms of
financial, staffing,
loss of reputation
etc)
RTO
(critical
period
before
busines
s losses
occur)
Project
planners
The nursery needs to
be planned as per the
customers need
High Loss of revenue:
$4,000 per week
2 weeks
Consultancy
services
Consultation is provided
based on the needs
medium Loss of Revenue:
$2,000 per week
2 weeks
design services
Proper design is
offered for managing
the functionality
High Loss of Revenue:
$3,000 per week
2 weeks

5BUSINESS CONTINUITY PLAN
Incident Response
With the help of incident response plan, it becomes easy to manage the information
in an effective manner. This helps in ensuring that the performance has been
improved efficiently. Incident response plan is a critical part for executing a
security program successfully within an organization. This helps in managing the
business performance. With the use of successful incident response program,
damage can be mitigated or avoided altogether. The major capabilities that are
offered with the use of an incident response program are that it helps in determining
the business performance based on their level of maturity. Companies that are able
to map policies to the level of risk appropriate to the business are better prepared in
the event of a security incident.
ROLE DESIGNATED EMPLOYEES ALTERNATE
Nursery staff Name: Rich Millan
Contact Information:
379299299919
Name: Silia Mathew
Contact Information:
28920010010
Emergency Responsibilities:
 Business Continuity Plan is activated within the system
 Managing the projects
 System enhancing
 Performance improving
 Designing the nursery
ROLE DESIGNATED EMPLOYEES ALTERNATE
Planner Name: Ansie
Contact Information:
16732899302
Name: Bruce Marrie
Contact Information:
36789098769
Emergency responsibilities:
 Understanding the requirements
 Requirements update

6BUSINESS CONTINUITY PLAN
 System updating
 Design update
ROLE DESIGNATED EMPLOYEES ALTERNATE
Administrator Name: David Sephard
Contact
Information: 52782398239
Name: Smith Hawkins
Contact
Information:
38278290102
Emergency responsibilities:
 Requirement analysis
 Contacting the members
 Engaging users
 Resource managing

7BUSINESS CONTINUITY PLAN
Key Contact Sheet
Contact List – Internal
Person Contact
number/s
Email Responsibiliti
es
Rich Millan 37929929991
9
[e-mail] Nursery staff
manager
Silia Mathew 28920010010 [e-mail] Vice manager
Ansie 16732899302 [e-mail] Planning
manager
Bruce Marrie 36789098769 [e-mail] Vice planner
David Sephard 52782398239 [e-mail] Administrator
Smith Hawkins 38278290102 [e-mail] Administrator
Contact List – External
Key contacts Contact number/s
Police 2673839040
Emergency Services 3738940002
Ambulance 2039848910
Medical 3739040040
Security 3933004002
Insurance company 3739020112

8BUSINESS CONTINUITY PLAN
Suppliers 3738910100
Water and Sewerage 2732891001
Gas 3738919102
Electricity 2345790093
Telephone [phone]

9BUSINESS CONTINUITY PLAN
Event Log
Date Time Information / Decisions / Actions Initials
21/01/2020 0900
hrs
Activating the business continuity plan Manager
23/01/2020 0200
hrs
Managing the nursery Planner
19/01/2020 0300
hrs
Designing the services Administrator
10/01/2020
0400
hrs
Providing consultancy Manager
Backup
Data for
backup
Frequency
of backup
Backup
media/
service
Person
responsible
Backup procedure steps
Organization
database
Daily Internal hard
drive
A person Removing the internal hard
drive
History
records
weekly Cloud storage Group Managing the external drive
for managing system
Employees
database
Daily Cloud database A person Cloud database must be
maintained for managing the
data effectively
Equipment
database
Weekly External hard
drive
A person The use equipment of database
must be maintained for

10BUSINESS CONTINUITY PLAN
Data for
backup
Frequency
of backup
Backup
media/
service
Person
responsible
Backup procedure steps
proceeding safely
Finance
database
Weekly Cloud database A person The expenses data are backed
up for having a better control
Services
database
Monthly External hard
drive
A person Data must be entered for
having a better knowledge
Risk Management Planning
The risks that are identified within the Regional Gardens Ltd are listed below:
Lack of organized administration system
Insufficient storage at disks
Lack of proper firewall or security system can hamper the organizational performance
No proper anti-virus
Disaster recovery system lacks
There is a huge need to manage the risks within the organization otherwise the
performance will be hampered. Thus, the key steps that are essential for managing the
risks are listed below:
Need to include proper administration system that will support the business
functionalities
Proper installation of anti-virus software are needed
Strong firewall system for protecting the system is needed
Enforcement of strong rules for restricting the access
Cloud storage needs to be integrated for managing the backup and recovery system

11BUSINESS CONTINUITY PLAN
Risk Management Plan
Prepared by.:…………admin……………………………………………Date: ……………………………
Reviewed by: …………………………………………………….. Date: ……………………………
Key:
VH = Very High
H = High
M = Medium
L = Low
Risk Description:
Likelihood
Impact
Priority
Preventative Action Contingency Plans
Administration system
lack
H M H
 by integrating proper administration system for managing the
performance
 The administration should be
maintained up to date
Lack of proper storage H H H
 The system needs to include proper monitoring devices for
managing the system performance.
 Data storage should be incorporated
properly for the purpose of
monitoring
Lack of firewall H H H
 Firewall integration needs to be done properly for protecting
the system
 Data will be protected with proper
firewall usage
No backup or recovery H H H
 The system database needs to be linked with the cloud
storage is that it becomes easy to maintain the data. This will
ensure that the data are backup
 The cloud storage use will ensure
that the data are maintained
effectively within the system