A continuity plan people can follow on a bad day.
The plans we're usually shown are either non-existent or 60 pages long and out of date. A useful one is short enough to read under pressure, names who does what, and has been rehearsed at least once.
Nobody has walked through what would actually happen.
Who calls customers if email is down? Where do staff work if the building is shut? Who authorises paying for emergency kit? These questions get answered for the first time during the incident, which is the slowest possible way.
Business impact first, then a plan, then a rehearsal.
We run a short impact analysis with department heads, write a concise plan with contact trees and decision points, and run a tabletop exercise so the plan is tested before it's needed.
Everything in the engagement, set out up front.
Business impact analysis
Which processes matter most and how long they can stop.
Continuity and incident plans
Short, role-based, with contact details and decision authority.
Tabletop exercise
A realistic scenario walked through with your leadership team.
What you receive.
- Business impact analysis
- Continuity plan
- Cyber incident response plan
- Exercise report with actions
Built for organisations that need the work done properly.
Firms asked by customers or insurers
Continuity questions are increasingly part of supplier due diligence.
ISO 27001 candidates
Continuity controls are part of Annex A.
What changes once the work is done.
Faster decisions
Agreed in advance, not improvised.
Shorter outages
People know their part.
Evidence
A tested plan to show customers and auditors.
Questions we are asked most often.
How long does it take?
Typically three to five weeks including the exercise.
Is cyber covered?
Yes. A ransomware scenario is usually the most useful one to exercise.
How often should we review it?
Annually, and after any significant change to people, systems or premises.
Is this the same as disaster recovery?
Disaster recovery is the IT part. Continuity covers the whole business — people, premises, suppliers and customers.
Build a continuity plan that works.
A 30-minute call with a consultant, not a salesperson. We'll ask about your setup, tell you honestly whether we can help, and what it would roughly cost.
Book a conversation