The purpose of business continuity planning is to assist departments with protecting their services and activities from disruption. Although the College has response and recovery processes to mitigate incidents, the impact of an incident can be significantly reduced by putting in place simple resilience measures.
Completing an Impact Analysis will help Heads of Department, Principle Investigators, Project Directors and others responsible for department activities or projects identify appropriate resilience measures for activities.
Those responsible for department activities should complete an Impact Analysis template. This helps identify the critical activities undertaken by the department, the resources needed to deliver the activity and the impact if the activity was disrupted.
We can then use this information to determine how long the activity can be disrupted before it becomes intolerable. e.g. within 24hrs, 1 day, 1 week, 1 month. A time can then be agreed for when the activity should be recovered, before the disruption becomes intolerable.
Once the recovery time has been identified, we then consider simple mitigation for recovering the activity within the recovery time. These risk mitigations should be recorded and agreed owners assigned to ensure timely implementation. In some instances, recovery times may vary through the academic year and this may influence what mitigations are considered appropriate e.g. staff availability and/or call out at certain times of year. Finally, it may be worth considering the priority in which activities are restored.