Business Continuity New Years Resolutions

So Mr. or Ms. Business Continuity Planner what’s your New Year’s Resolution for 2010?  Here are some suggestions:

1. If you haven’t started a plan – develop one!  Make sure you familiarize yourself with the industries suggested best practices.  It will make your life easier and allow you to build a viable plan that would indeed work should your organization experience a major disruption to its business operations.
2. If you have a plan – review it to ensure it is indeed viable.
   1. Review your risk – Natural, Technological and Human caused events.  Knowledge of your local risk is critical – know what could affect your business operations and plan accordingly.  Make sure you have planned for the worst case scenario.
   2. Revisit your business impact analysis.  Make sure that nothing has changed in your organization that needs to be addressed from a business continuity perspective.  You don’t want to find out at time of event that a new product or service is critical to the  organizations survival that is unaccounted for from a resumption  or recovery point of view.
   3. Revisit your recovery solution.  Make sure the resources you’ve set aside match the output from your BIA review. Avoid any gap that could delay the resumption or recovery of a critical business function or process.  Make sure you have the appropriate “pieces” in place – technology and people resources.  Don’t forget to revisit your data backup strategies to ensure they too would support the continuity effort following an event.
   4. Review your planning documentation.  Ensure yourself that the documentation reflects the current organization.  Make sure you have addressed the three key elements of business continuity planning – Crisis Management (Response), Business Continuity (Resumption & Recovery) and last but not least Disaster Recovery – the recovery of the IT infrastructure required to support the critical and essential business processes / functions.
   5. Commit yourself to a defined schedule for maintaining, testing and exercising your plan.  Pick some dates and stick to them.  Regarding IT testing – remember almost 80% if 1^st time technology tests FAIL.  Something you need to discover during a test and NOT at time of event.
   6. Schedule a 3^rd party review of your planning process and efforts.  A third set of eyes is always better.  Have that 3^rd party audit and certify the condition of your business continuity plan.  Identify the good, the bad and the ugly!  Prepare a plan to address the bad and the ugly.  Present the findings to your executives and board if necessary.

Whatever your New Year’s Resolution, may 2010 be a productive year for you all.  Here’s to hoping you never have to implement your plan, but if you do, here’s to wishing your planning efforts prove to be successful in every way.  Happy New Year to you all!