Environmental Health & Safety
Business Continuity
Frequently Asked Questions
Why do we need a Business Continuity Plan (BCP)/What’s in it for me?
A Business Continuity Plan outlines how to maintain critical functions in the event of a disruption so that business can continue to the best possible ability. It is also used as a conduit to resume normal functions, even if in a reduced capacity, as quickly as possible. Having a well-thought-out plan in place before a disruption occurs makes continuing critical processes easier, more efficient, and less stressful so the person(s) responsible for restoration of services does not have to start from scratch during a disruption.
What is a Critical Function?
A critical function is an activity or service(s) that must continue at a certain level even if impacted by a disruption and is usually made up of more than one like process (ie: accounting functions or records management). Not all processes that make up the critical function will be deemed critical. If a critical function isn’t available at a sufficient level within the resumption timeframe, the there is a risk of direct and immediate adverse effect(s) in terms of: loss of life, personal injury, and/or loss of property, The level of criticality is determined during the Business Impact Analysis.
A function is critical if it: Preserves life, prevents injury, or protects property; Provides indispensable support for provision of other critical functions; Is required by law or regulatory authority; It must be continued under all circumstances/cannot suffer a significant interruption.
Which critical functions should be included in our plan?
A Business Continuity Plan should minimally include any critical function that must be accessible within five days of a disruption.
Business Continuity vs Disruption Recovery vs Emergency Preparedness
- Business Continuity focuses on keeping the business operational during a disruption.
- Disruption recovery focuses on restoring data access and IT infrastructure after a disruption
- Emergency Preparedness is preparation before an emergency, that outlines how the emergency will be responded to for the safety and security of people and property.
What is a Business Impact Analysis?
A business impact analysis (BIA) is the process of determining the criticality of business activities and associated resource requirements to ensure operational resilience and continuity of operations during and after a business disruption. The BIA quantifies the impacts of disruptions on service delivery, risks to service delivery, and recovery time objectives (RTOs) and recovery point objectives (RPOs). These recovery requirements are then used to develop strategies, solutions and plans. A Business Impact Analysis is used to assess the financial or other loss sustained when a business function is impaired or unavailable.
What is meant by "Testing or Exercising a Business Continuity Plan"?
Testing, training, and exercises introduce creative scenarios to familiarize staff members with their roles and responsibilities during a disruptive event and ensure that systems and equipment are maintained in a constant state of readiness. It is helpful to partner with other departments when scheduling a drill. Testing the BCP will validate that plans are actionable and identify opportunities to improve the plan. The Business Continuity Team is available to facilitate tabletop exercises or provide examples.
QUESTIONS or COMMENTS?
Contact EH&S at (585) 275-3241 or e-mail EH&S Questions.
This page last updated 4/28/2025. Disclaimer.
