Business continuity planning is about being prepared to manage any disruption to the normal operation of a business. A Business Continuity Plan (BCP) ensures continuity of services to customers and provides condence to customers and suppliers that a business is able to continue to function, even under extreme and adverse conditions. A BCP is an investment in the long-term sustainability of any business, large or small, early stage or well established. The checklist below, which is based on the AQTF course Develop and maintains business continuity plans (BSBCON601B), can be used for developing and implementing your BCP. ESTABLISHING YOUR BUSINESS CONTINUITY PLAN Department for Manufacturing, Innovation, Trade, Resources and Energy T +61 8 8303 2400 | E dmitresbs@sa.gov.au | www.dmitre.sa.gov.au/sbs The Government of South Australia gives no warranty and makes no representation, whether express or implied, as to the accuracy of information contained within this document or the suitability of the information for any purpose. Any use of the information contained in this document (whether authorised or not) is at the users sole risk and the Government of South Australia disclaims responsibility for any loss or damage incurred as a result of such use. The information is provided solely on the basis that users of the information will make their own assessment of the accuracy of the information and users are advised to verify all information contained within this document. ELEMENT Have risk and vulnerability assessments been conducted? Have internal and external risks been analysed and determined? Have potential internal and external sources of disruption to the organisations priorities, operations and environment been analysed and identied? Has a report on the business impact assessment/s been developed? Have the organisations critical business functions and their dependencies and interdependencies been analysed and evaluated? Have all known risks been analysed and evaluated? Have risk and disruption scenarios been developed? Have the outcomes of the business impact assessment/s to management been reported on? Has a Risk Treatment Implementation report been developed? Have ways of implementing risk treatments been developed? Have all relevant staff participated in the review of risk treatments? Has a Risk Treatment Report been reviewed and approved by management and relevant appropriate personnel? Has the Risk Treatment Report been updated to incorporate feedback provided by relevant personnel? Have all interdependencies and responses strategies been developed? Has the organisation developed its emergency response, continuity and recovery strategies? Has the organisation consulted and sought endorsement from management and other appropriate personnel on the organisations emergency response, continuity and recovery strategies? Has the organisation identied and managed synergies and conicts in resource availability and accessibility? Who will coordinate the organisations emergency response, continuity and recovery strategies? Who will do so if they are absent? Is the Business Continuity Plan established? Has the organisation consulted with relevant personnel and sought nal support for the development of the organisations Business Continuity Plan/s? Has the organisation ensured the content of Business Continuity Plan is comprehensive and meets, where applicable, the requirements of regulations, standards, industry practice and geographical dispersion? CHECKLIST ITEM