Tuesday 20 December 2011

Continuity planning not about planning for the event but planning for the impact

I recently read an article by the CEO of Onyx Group ( http://www.channelweb.co.uk/crn-uk/opinion/2133927/-step-business-continuity ), Neil Stephenson, about the necessity of planning for all types of scenarios and not just natural disasters – the article proved quite interesting. First of all, it is interesting to see the CEO of a company promoting business continuity planning in such an open and definitive way. Second, Neil Stephenson suggests that continuity planners plan for all potential impactful scenarios (and not just natural disasters). This is particularly interesting as it is a point raised by someone not practicing contingency planning for a living, yet it is something that contingency planners often forget. So often, planners get caught up in the excitement and fear associated with tornadoes, floods, and ice storms, and ignore other potentially more impactful situations (pandemics, IT malfunction, theft of client data, and so on).

As stated, I agree with Neil on all accounts, as noted above, however, we must also remember that it is dangerous to get ‘into the weeds’ when developing business continuity plans. Instead, we should be planning for impacts associated with all of these events (i.e. loss of IT capability, loss of critical / confidential information, loss of facility(ies), and / or loss of personnel). Proceeding in this way ensures that we have addressed all potential impactful events (natural events or otherwise) without complicating our business continuity programs, and confusing the purpose of those programs.

This is my final blog until early in the new year as I am heading out of the country, however, I am already looking forward to continuing on into 2012!

For continuity-related updates, follow me on Twitter @continuityblog

Thank you and have a Merry Christmas and Happy New Year,
The Continuity Blogger