Spring World 2012

#1 BC/DR Conference

Early Discounts Available!

Latest Journal

Volume 25, Issue 1

Contents Now Available

Home Community DRJ Blogs Is Your Business Continuity Plan For Your Eyes Only?

DRJ Blogs

DRJ Community Blogs

Aug 03
2010

Is Your Business Continuity Plan For Your Eyes Only?

Posted by: Skip Williams in DRJ Blogs

Tagged in: Untagged 

Skip Williams

Thankfully, more and more businesses are recognizing the need for business continuity plans (BCP) and disaster recovery plans (DR). This means that more companies, such as yourself actually have BCP and DR plans.

 

But it also means that your clients and potential clients are aware of the need for such plans… So what do you do when a potential or existing client asks to see your BCP or DR plan? Is this information private internal material or should it be made “public”?

 

Private or Public?

 

This is a tough situation to be in. On one hand, you’re lucky that you’re prepared and have considered how your company will react, survive, and maintain continuity of operations in the face of disaster or disruption. Being prepared such as you are has actually become a marketing and sales tool. When you need to differentiate your company from your competitors, you can speak about your BCP and DR plans – highlighting how you can guarantee continued service, product, and business relations in the event of a disaster. But on the flipside, often these plans involve private internal data that really is not for external knowledge.

 

This decision really is up to you but there are a few measures you can take to ensure that all parties are happy and protected:

·       Non-Disclosure Agreement – the client should sign such a document before seeing your plans

·       Excerpt the plan – you don’t need to show your client the full plan. Rather excerpt it and highlight the key points that emphasize how you are prepared

·       Table of Contents only – showing your client the table of contents is an excellent overview of your plan and gives you some easy talking points

·       FAQ – prepare an list of questions and answers for the client that address how you handle specific situations

·       Contact Information – give the client a reliable set of contact information. This way if something does happy, the client has peace of mind of knowing that he can contact you when he needs to

 

The Client

 

Of course this brings up an interesting question – what about the client? Is your client prepared with a BCP and DR plan? It is worth asking this question as well… Remember, business is a two-way street – you need to guarantee continued service but you also want assurances of a consistent revenue stream.

 

If you’re prepared, but your client isn’t, now you’re the one left without knowing if in the event of a disaster, your client will be able to maintain business, continue to generate revenue and in turn pay invoices and continue to be a revenue for you.

 

So when a client asks for your BCP or DR plan, be sure to do the same of your client. Both of you can rest easy at night knowing that you’re working with reliable and forward-thinking businesses. Being prepared goes a long way in protecting your business and confirming to outside eyes that you’re here to stay for the long-term.

About KingsBridge

KingsBridge offers private businesses and government organizations a unique combination of industry knowledge and cost-effective disaster recovery / business continuity solutions. KingsBridge products and seminars provide the tools to assess possible threats and create tailored plans which mitigate risks and minimize losses in the event of a disruption to business. Kingsbridge is headquartered in Ogdensburg, New York, with offices in Ottawa, Canada and Burlington, Vermont. For more information visit us at www.DisasterRecovery.com.

 

Comments (2)

Disclosure Do's and Don'ts
Gregg Jacobsen
If your company is part of another company's supply chain, they have every reason to ensure you have a reasonably sound plan for ongoing delivery of whatever they're buying. Likewise, you would expect the same of firms providing vita products and services to your firm. But information about your business continuity plans may reveal vulnerability to certain conditions, like flooding or earthquakes, and that is normal. What you must be careful about is information in plans that expose manufacturing, product development methods, and anything under the heading of competitive intelligence. If you have BC plans for those areas (and you certainly should), they must be maintained under separate cover with closely managed distribution.

For customers and their auditors who may wish to review BC plans in such areas, a high-level synopsis of planned arrangements, but no details that would compromise the nature of the vulnerability nor the mitigating measures taken.
Gregg Jacobsen , August 09, 2010
BC/DR Information for Due Dilligence
0
In public sector procurement, organizations frequently ask to see BC/DR plans or for details about specific situations. This seems to be focusing on the wrong issues. Good, mature BC/DR like Security is driven by an on-going process. Good insight into how mature a BC/DR process is and well an organization will partner with you can be gained by asking relatively non-sensitive questions.
--How many BC/DR tests/exercises does your organization conduct each year?
--How frequently is your "C-level" management regularly briefed about the status of your BC/DR program and the status of exercises?
--Do you have a list of criteria for test exceptions that must be reported to your "C-level" management or Audit Committee?
--How many BC/DR testing exceptions or events in the last 3 years have been been the subject of "C-level" management or Audit Committee review?
Sam , August 07, 2010

Write comment

smaller | bigger

busy
. } if (window.attachEvent) window.attachEvent("onload", sfHover);