Free Business Continuity Plan Template

What a business continuity plan is

A business continuity plan is the set of emergency measures and recovery arrangements that prepare your organisation for risks that could disrupt its operations. Preparing one means being explicit about three things: what the plan covers, who carries it out, and how each vulnerable operation is restored. The plan starts from its purpose, including the priorities for restoring business functions during an emergency. It then defines its scope in terms of the business units, sites and processes it covers, and its objectives, including the recovery time objectives for critical business functions. Those four elements — purpose, priorities, scope and objectives — set the boundary for everything that follows.

Why it matters

Disruption is easier to absorb when the response has already been decided. A plan that names the risks and threats that could disrupt business operations, together with the emergency measures prepared for each, lets you respond rather than improvise. It also matters because recovery depends on people knowing what they are responsible for. Setting out the role each key staff member holds in the continuity organisation, their responsibilities during and after an emergency including decision-making authority, and the deputy or alternate who covers them, removes the ambiguity that slows a response down. Finally, not every operation can be restored at once. Recording which operations are vulnerable, what a disruption would do to the business, and what it would take to restore them lets you direct effort where it is needed.

What a good plan covers

**Purpose, scope and objectives.** The plan states its own purpose and the priorities for restoring business functions during an emergency, the business units, sites and processes it covers, and the objectives it is working to, including recovery time objectives for critical business functions. **Risks and threats.** It lists the risks and threats that could disrupt business operations, and the emergency measures prepared for each. **Roles and responsibilities.** For each key staff member it records the role or position held in the continuity organisation; the responsibilities of the role during and after an emergency, including decision-making authority; the contact details and escalation path for the role; and the deputy or alternate person who covers the role when the primary holder is absent. **Vulnerable operations and recovery.** For each business operation vulnerable to disruption, it captures the business area or function, a description of the operation including its key inputs, outputs and dependencies, an impact rating, a description of the impact on the business if the operation is disrupted, the recovery strategy for restoring the operation, and the resources required to execute that strategy. **Record details.** The plan is signed, the time it was finished is recorded, and the inspection's real start and end dates are noted.

How to carry it out

Work through the plan in order, and use the template to keep each part in its place. 1. **Set the frame.** Write the purpose of the plan and the priorities for restoring business functions during an emergency, then the scope of business units, sites and processes it covers, then the objectives and recovery time objectives for critical business functions. 2. **Name the risks.** List the risks and threats that could disrupt business operations and, for each one, the emergency measures you have prepared. 3. **Map the continuity organisation.** For every key staff member, record the role or position held, the responsibilities during and after an emergency including decision-making authority, the contact details and escalation path, and the deputy or alternate who covers the role. 4. **Rate and describe each vulnerable operation.** Complete one entry for each business operation vulnerable to disruption: its area or function, a description including key inputs, outputs and dependencies, the impact rating, the impact on the business if it is disrupted, the recovery strategy, and the resources required to execute it. 5. **Sign off and date.** Add the signature, the time the work was finished, and the inspection's real start and end dates. > If a field has no clear answer, that is worth knowing before an emergency rather than during one — leave a note rather than a blank.

Frequently Asked Questions

A business continuity plan is a documented set of emergency measures and recovery arrangements that prepare your organisation to keep operating, or to resume operating, if a risk or threat disrupts it. Preparing one means defining the scope of the plan, identifying risks and threats that could disrupt business operations, and setting out emergency measures for each. You also document the roles, responsibilities, contact details and escalation paths of the key staff who carry the plan out, and the recovery strategies and resources for the business functions that are most vulnerable to disruption.

The plan begins by stating its purpose and the priorities for restoring business functions during an emergency, the scope it covers in terms of business units, sites and processes, and its objectives, including the recovery time objectives for critical business functions. Risk and threats to business operations are listed with the emergency measures prepared for each. The continuity organisation is then described role by role: the position held, the responsibilities during and after an emergency including decision-making authority, contact details and escalation path, and the deputy or alternate who covers the role when the primary holder is absent. Each vulnerable business operation is captured with its area or function, a description of the operation including its key inputs, outputs and dependencies, an impact rating, an explanation of the impact on the business, a recovery strategy, and the resources needed to execute that strategy.

Scope the plan first. If you are not clear about which business units, sites and processes are covered, the rest of the plan has no defined boundary. Then work through the roles and the vulnerable operations in order, so that each recovery strategy has a named person responsible for executing it and a stated set of resources behind it. Do not leave the deputy or alternate fields empty: a continuity organisation that depends on a single named holder is fragile precisely when you need it. Finally, review the impact ratings across your entries together, so that the recovery time objectives, the recovery strategies and the resources you commit are consistent with what you have rated as most disruptive.

Written by

Arne Reis

Founder

Process optimizer with 25 years of expertise, focused on operational excellence in quality, maintenance, EHS, and commissioning. Emphasizes innovative solutions and top-quality standards.

View LinkedIn profile