It includes a checklist containing:
- Who are the admins?
- What's their contact information?
- Who are the emergency responders?
- Who are the key personnel and what are their responsibilities?
- What's the threat matrix?
- What else do you have to worry about?
- What are the critical process you have to protect?
- Who can declare a company emergency/disaster?
-Is there an evacuation facility?
-What's the communication plan?
All of these go in a continuity plan.
It's about preparation & planning for the worst-case scenario in advance.
Like a fire escape plan.
You don't make the plan when the building's on fire.
You want to have a plan in place before.
It means taking time and role-playing different possible scenarios.
The good news is:
You don't need to worry about 101 things.
Typically, there are only a handful of things. 1-10.
You can plan for them over time.
Then review it on a regular basis.
Getting the key people involved.
Then pick a scenario to role-play what might happen in the future.
The possible actions you should take.
[whenever anything unexpected happens.]
As you role-play and walking you'll identify more scenarios to expect.
Brainstorm as much as you can.
Talk to other people.
Get resources you need ready.
And finally, come up with your business continuity plan.
It's not important until it is.
By then, it might be too late.
It's a good idea to schedule time to think about it.
It's like a resource file where you keep a list of the important things.
Your intellectual property, any legal contracts, or agreements.
All that stuff.
If something unexpected happens,
What would you do?
If the main people in charge disappear?
Is there a sacred knowledge problem?
Are there critical things no one else has any idea how to do?
You have to find out what those are.
Get that documentation written down.
Make it easy to know:
Where is it?
Who is responsible for what?
How to contact the people involved?
If you can't do it/find it, what do you do then?