2.2 Selecting a Methodology

Overview of Common Approaches to Business Continuity Planning Methodology

Most of the methods used for business continuity planning start by building a model of the current business operation, including its procedures, vital data (both current and historical), external dependencies and human and physical assets.

The resources required for operating the business are then 'prioritised'. Almost all methodologies carry out some form of business impact analysis and, for some, this is the primary analysis tool.

Planning methodologies vary in the way that they produce continuity plans from the information in the business model. The older methodologies create an inventory of physical assets and dependencies and develop a plan which calls for the most vital equipment, data and staff on 'day one' of a 'disaster', together with sufficient recovery desks and equipment space for several weeks use. The remaining assets, listed on the inventory, are added, progressively, from day two onwards, until only the least essential items and staff remain un-utilised. Procedures are compiled for the handling of business processes at the recovery site and these are written into business continuity plans, which are held off site and referred to, if necessary, during the recovery operation.

So, the classic approach to BC plan implementation is to build a replica of the normal production environment at one or more recovery sites, over a period of time, following a 'disaster'. The environment required by the most vital and critical business processes is built immediately, or in advance. Resources for less critical processes are added after a disaster has occurred.

In addition to the MSTA methodology, Ark & General, Business Protection Systems, and Strohl Systems all offer BC planning methodologies and these should be checked out, together with others.