In short: The pandemic showed that many continuity plans focused on short, local disruptions. Resilient organizations planned for long, widespread events, protected their people and supply chains, and adapted quickly using clear decision-making.
What did the pandemic reveal about continuity plans?
Many plans assumed loss of a site or system for days, not a global disruption lasting months and affecting people, suppliers and customers at the same time.
What are the key lessons?
- Plan for scenarios of long duration and wide scope.
- Put people and wellbeing at the centre of plans.
- Map supply chain dependencies beyond first-tier suppliers.
- Enable remote working securely.
- Establish clear crisis governance and communication.
- Exercise plans regularly and learn from real events.
How does ISO 22301 help?
ISO 22301 provides a management system framework for business impact analysis, strategies, plans, exercises and continual improvement.
Key takeaways
- Plan for long, widespread disruptions.
- Protect people and critical dependencies.
- Treat continuity as a living management system.
Frequently asked questions
What is a business impact analysis?
An analysis of the impact of disruption over time, used to set recovery priorities and timeframes.
How often should continuity plans be exercised?
At planned intervals and after significant changes; many organizations exercise at least annually.
What is the difference between continuity and resilience?
Continuity focuses on maintaining critical activities; resilience is the broader ability to absorb and adapt to change.