Business Continuity
(Business continuity is) the capability of the organisation to continue delivery of products or services at acceptable pre defined levels following a disruptive incident.
ISO 22301:2012
Definitions
Business Continuity Management (BCM) is concerned with improving the resilience of the University of Sheffield.
This means developing its ability to detect, prevent, minimise and, where necessary, deal with the impact of disruptive events or incidents.
BCM provides the capability for the University to ensure continuity of its 'priority activities', including teaching and research, supporting their recovery following any disruptive event. Priority activities are the activities that, if disrupted, would have the greatest impact in the shortest amount of time.
In other words, Business Continuity (BC) enables the urgent or priority activities of the University to continue, though they may be delivered differently and likely at a lower level than usual.
The process
Each department/school at the University is expected to go through the Business Continuity (BC) process, and the UoS BC Team can support if/when necessary.
The BC software has replaced the use of the Google Docs. BCP template and creating/reviewing and updating the plan(s) now happen on one digital platform. The system includes all BC related documents in the ‘Documents’ module, but you can also still access these on our Google Drive if needed (Google Drive link).
There are two key stages to the process
- Business Impact Analysis (BIA) - An impact analysis, to identify what you need to keep running based on the impacts if these stopped, i.e. the priority activities (and what can be suspended for a short time)
- Business Continuity plan (BCP) - Using the information collated in 1. to develop a plan and assess this, usually by a short exercise or by learning from any recent incidents.
The BC software follows this BC process with first inputting your activities, then completing the rest of your BCP. For further information on the software, please visit the Safety, Resilience & Security Platform (SRSP) (staff login required).
The Business Continuity Plan
Departments/schools should use their plans when a disruptive incident or event occurs.
The plan should contain the information needed to help the department respond to and manage any incident, including the priority activities that the department needs to keep running.
Just as you prioritise your work based on the deadlines you have and the impact if you don't complete it, BC focuses on the activities that are most "time-critical" and would have the greatest impact if they were not performed.
So the plan can be used for any incident, but it does not cover specific scenarios. Instead, it includes arrangements to deal with the impacts of the incident, i.e., alternative options or the “plan B’ for a loss of staff, buildings and facilities, ICT and data, equipment and suppliers, and communications.
The disruption could be something minor, which you would be expected to manage locally, or major - a University Team would be set up to lead on the response, but you would still need to implement the arrangements in your plan and link into the University’s Major Incident Team as appropriate.
Find out more on the Incident management page.
Incident contacts system
It is recommended that a copy of your business continuity plan be stored in the incident contacts system, because it is secure and there is an off-site version that can still be accessed if University IT systems are unavailable, though you will need to bookmark this link. The usage of the Incident Contacts System is still encouraged despite having the new BC software that stores and manages your departmental/school plan.
The file will need to be uploaded as a PDF (that is, the same format as you get on the software after exporting your plan), and although the software has a reminder for reviewing your plan, you can also set a time to review to remind you to update it to the latest version on the Incident Contacts System.
The incident contacts system can still be used to store contacts for business continuity purposes, using the departmental lists functionality. The BC software has a contact section, but it does not function the same as the departmental list on the Incident Contacts System.
Incident contacts information for staff (staff login required)
Additional information
Business Continuity Policy and Framework (PDF, 166 KB)