Stage 5: Reviewing and testing your business continuity plan
You need to treat your BCP plan as a living document that changes with circumstances and the needs of the business.
Reviewing the plan
You should review your BCP plan:
- at least once a year
- when there are significant changes in your business, such as staffing or processes
Testing the plan
You need to check and test the plan to:
- make sure it's still valid
- allow those with emergency response roles to rehearse their activities
If those trained to use the plan do not rehearse their roles and responsibilities, they may not be prepared or effective in an emergency.
There are many ways to do this, including:
- read and review the plan, or ask someone else to do this
- assess your current arrangements using our 20-minute BCM checklist
- set staff the task of reviewing the plan against a set scenario, such as the breakdown of a key piece of equipment, or being unable to access their normal workplace
- deliver staff awareness training, incorporating an exercise to make sure they’re aware of roles and responsibilities
- conduct building evacuation test exercises
- check a part of the plan to ensure it works, such as testing the recovery of your IT systems or checking staff emergency phone numbers
- live testing, such as a full recovery exercise, setting up critical activities elsewhere