Business continuity and crisis management

A business continuity plan should be a working document. Keep it up to date and test it regularly against different scenarios to make sure it works in an emergency.

Prepare for testing

Before testing your plan, make sure you:

• agree clear testing criteria and procedures
• decide how you will document the findings
• plan how to fix any problems identified during the test

Use realistic but challenging scenarios to make testing effective. Although by their nature crises are hard to simulate, there are many ways you can assess your business continuity plan against different crisis scenarios.

How to test business continuity plans

You can test your plan in different ways, including:

• checklist tests - review key steps and processes
• table-top exercises - discuss responses to a scenario
• structured walk-throughs - go through the plan step by step
• scheduled simulations - test how your business would respond
• full interruption tests - test recovery in real conditions

You should also check key details, such as contact lists, to avoid delays during a real crisis.

How often to test your business continuity plan

Many businesses test their plans two to four times a year. The frequency depends on your business type, staff changes and updates to systems or processes.

Why is business continuity plan testing important?

Rigorous testing should show that your plan works and does what it is meant to do. It will also help you to 

• train staff involved in recovery 
• identify gaps or weaknesses in your plan
• demonstrate the ability of your company to recover

See also the advantages of business continuity planning.

If you outsource key services, check that your suppliers’ plans align with your own.

Maintain your business continuity plan

Business continuity planning is an ongoing process. Review and update your plan regularly to reflect changes in your business, such as new premises, staff or systems. An annual review, combined with regular testing, helps keep your plan effective.

Follow business continuity standards

You can assess your plan against recognised international standards, such as ISO 22301. This standard sets out requirements for a management system that helps protect your business from disruption, reduces the risk of incidents and supports recovery.