Business continuity
Keep critical activities functioning through disruption.
The idea
Business continuity plans how the organization maintains essential activities during disruption. It includes people, facilities, suppliers, communication, workarounds, and technology dependencies. Disaster recovery focuses more specifically on restoring affected technical capabilities. Plans should be based on business impact and tested with realistic scenarios. Record owners, activation criteria, resources, and how to return to normal operations. A document alone does not demonstrate readiness.
In practice
A service uses a controlled manual intake process while its application is unavailable, with clear data handling and reconciliation when the service returns.
A common misunderstanding
Business continuity is broader than backing up servers. Staff, suppliers, and decision authority can be equally important.
Check your understanding
What makes a workaround viable?
Think it through: People can carry it out with available resources while meeting the critical service’s safety and handling requirements.
Keep the essential activity functioning
Business continuity considers how an organization maintains or resumes important activities during disruption. It includes people, communication, facilities, suppliers, information, and technology. Disaster recovery addresses restoration of technical services, while continuity may use temporary alternatives before those services return. The two approaches should support each other without being treated as identical.
Define the minimum useful operating level. A teaching organization might continue a class through an alternative meeting service while attendance records are collected separately. That arrangement needs agreed ownership, communication, and later reconciliation. An improvised workaround can create privacy or integrity problems if people use uncontrolled personal accounts and scattered files.
A fictional platform outage
An academy's main learning platform becomes unavailable shortly before a live session. The continuity plan identifies an alternative communication channel, a staff contact tree, and a method for recording essential participation information. It also states which activities should pause rather than continue unsafely through an unsuitable substitute.
After recovery, the team reconciles temporary records and retires the workaround. Continuity does not end when a backup service becomes accessible; people need to know when normal procedures resume and what information must be transferred. Exercises reveal gaps in these handoffs before an actual disruption makes coordination harder.
Design a bounded workaround
For a fictional one-day email outage, identify three essential activities and a temporary way to support each. Include who activates the arrangement, how staff learn about it, what information must remain protected, and how work returns to normal. Then state one activity that should stop because the workaround cannot meet its requirements. This makes continuity a reasoned operating choice rather than a promise that everything continues unchanged.
Keep exploring
References & further reading
Original explanations, with primary references for deeper study.
NIST: Contingency Planning Guide