It’s a risky business, not having a continuity plan

Such a register normally includes a description of a risk occurring, a description of the impact a realised risk could have on the company, and what existing controls and mitigation factors are in place to prevent the risks from occurring.

However, despite the many high profile cases of unforeseen circumstances affecting the ability of businesses to recover from disruptions (the latest being the problems at Carillion and the knock-on effect to many businesses of the loss of such a key supplier), it is surprising how many businesses still do not have a business continuity plan in place which is linked to their risk register, and which outlines the recovery measures needed should the risk become reality.