A few thoughts on disaster planning and recovery for business...
FEMA checklist
Entrepreneurial Mind on disaster planning
Chubb insurance recovery checklist from Inc.com
There are other good resources around the web - find them. Now. Use them. Now.
A few other thoughts come to mind after reflecting on the recent hurricanes.
1. Planning is one thing, practice is another. Football teams don't just create a game plan in a conference room and then teach it to their players in a classroom - they go out and practice the plays. The military doesn't just engage in creating war plans - they train their people to execute the tactics used in the plans and then the practice at the individual level, the squad level, the platoon level, the ship level, the squadron level, up to theatre-scale maneuvers involving units from navy, marines, army, and air forces plus forces from allied services. And, after the game or the exercise, they review and debrief, looking for lessons learned and ways to improve their performance the next time they execute this play or this plan.
Plans created in a conference room to satisfy a requirement (e.g. for when the insurance inspector asks to see your company's evacuation plan for earthquake or fire preparedness) or to qualify for funding (when a city or state has to tick a box on a FEMA form to qualify for Federal matching funds or grants - hello New Orleans) which are then never practiced (or even communicated) are useless - maybe even worse than no plan at all.
If you are serious about having your facilities, your information, your staff, your customers protected and prepared for a disaster you MUST combine planning with instruction and practice.
When was the last time you ran an unannounced dry run of your facility disaster plan to simulate a fire or earthquake that destroys the building during the night? Would your people know where to report? How would they be informed of what happened? Who would be responsible for getting your systems back up and running? Who would communicate key information to customers - and how would they do it? If your staff can't answer those questions you are not prepared. What about if it were a broader problem than just your facility? What if it were an earthquake that leveled an entire section of your community? What if it were a suitcase nuke that required an open-ended evacuation of your entire city? If there is anything that Katrina and Rita should remind us it's that these low probability events do happen and that we are responsible for being prepared.
2. Do you have an information back-up plan that has been rigorously tested - on a regular basis? Where is your off-site storage? If it is in the same town where you are based - what happens to your ability to recover your data and get your business back up and running if the disaster that hits is one that impacts an entire community or region a la Katrina? Oh, and by the way, if you use systems that are hosted elsewhere, figuring that this gives you an additional level of protection, have you checked where and how your service provider backs-up all of your data and systems? You wouldn't want to find out after an earthquake or tornado that your backup data site was across town and leveled in the same disaster that destroyed your building. Or, even worse, imagine that you were sitting high and dry and safe in your offices in Omaha the morning after Katrina and then found out that your offsite data backup vendor's servers were sitting unusable in windblown, waterlogged facility in New Orleans. Is your information in multiple, widely separated physical locations? The critical backbone of so many companies today is their information - could you recover if your data were destroyed even if your physical facilities and staff were unaffected?
3. Have you done an insurance review recently? If not, why not? Waiting for more evidence that it might be a good idea? You are on the remedial program, aren't you.
4. Don't rely on government - not local, not state, not federal. You - and only you - need to have planned and prepared for how to protect your business. If it turns out that government executes on its responsibilities well - that's a great extra benefit. If it turns out that government resources can be substituted for yours (e.g. an SBA loan or a FEMA grant) after a disaster, great. But don't count on it. Cynical? Maybe. Realistic? Maybe you should ask business owners in New Orleans, Gulfport, Biloxi.
Recent Comments