G5 Business Continuity Planning

Background

A Business Continuity Plan (BCP) is a plan for the fast, efficient resumption of essential business operations by directing the recovery actions of specified recovery teams.

All DFID offices are required to maintain a BCP to ensure the prompt and efficient recovery of business operations following any incident at the premises which disrupts or prevents normal business activity - e.g. fire, flood, or any other event requiring evacuation or preventing occupation of the premises.

Heads of Overseas Offices must ensure that BCPs are consistent with, and take account of, local emergency evacuation plans, and corresponding local FCO plans.
Heads of Departments in UK buildings covered by an overarching BCP must maintain an appropriate lower level plan specific to the operation of their own department, including all essential services. It should include, as relevant:

• Departmental contact lists, specifying those which have remote working facilities
• Details of manual backup systems
• Responsibilities for co-ordination and liaison throughout the department
• External contacts to be notified.
• BCPs must be updated by the Incident Control Officer as soon as any details change. Copies of revised plans should be sent to OEST.

Compliance Tasks

Heads of Overseas Offices must appoint an Incident Control Officer (ICO) who should be responsible for producing a BCP using the templates on the OSSD/ISD Web Site

Task assigned to: Head of Overseas Office

Heads of Overseas Office must approve BCPs and ensure they are registered electronically with OEST

Task assigned to: Head of Overseas Office, Incident Control Officer

BCPs must be reviewed at least annually.

Task assigned to: Head of Overseas Office, Incident Control Officer

Risks of non-compliance

• Delay in recovery of key operations
• Loss of information including financial and HR details
• Damage to reputation
• Failure to meet financial obligations/payment deadlines
• Potential Health and Safety implications for staff.

Associated learning and skills

The Incident Control Officer and Recovery Team Leaders should arrange appropriate training by testing the BCPs with their team members.