BUSINESS CONTINUITY PLAN TEMPLATE

BUSINESS CONTINUITY PLAN MEDICAL PRACTICE NAME Street Address City, State and Zip webaddress.com Version 0.0.0 00/00/0000 FOR MEDICAL PRACTICES

VERSION HISTORY
VERSION	APPROVED BY	REVISION DATE	DESCRIPTION OF CHANGE	AUTHOR

PREPARED BY	TITLE	DATE
APPROVED BY	TITLE	DATE

TABLE OF CONTENTS

1.	RISK STRATEGIES	3

A.	CLINICAL RISK	3

i.	RISK PREVENTION AREAS	3

ii.	RISK PREVENTION STRATEGIES	3

B.	OPERATIONS AND FINANCE RISK	3

i.	RISK PREVENTION AREAS	3

ii.	RISK PREVENTION STRATEGIES	3

C.	IT RISK	3

i.	RISK PREVENTION AREAS	3

ii.	RISK PREVENTION STRATEGIES	3

2.	BUSINESS FUNCTION RECOVERY PRIORITIES	3

3.	RELOCATION STRATEGY	3

4.	ALTERNATE BUSINESS SITE	3

5.	RECOVERY PLAN	3

6.	RECOVERY PHASES	3

A.	DISASTER OCCURRENCE	3

B.	PLAN ACTIVATION	3

C.	ALTERNATE SITE OPERATION	3

D.	TRANSITION TO PRIMARY SITE	3

7.	RECORDS BACKUP	3

8.	RESTORATION PLAN	3

9.	RECOVERY TEAMS	3

A.	TEAM ROLES	3

B.	TEAM CONTACTS	3

C.	TEAM RESPONSIBILITIES	3

D.	DEPARTMENTAL RECOVERY TEAMS	3

10.	RECOVERY PROCEDURES	3

A.	POTENTIAL RECOVERY PROCEDURE	3

i.	Disaster Occurrence	3

ii.	Notification of Management	3

iii.	Preliminary Damage Assessment	3

iv.	Declaration of Disaster	3

v.	Plan Activation	3

vi.	Relocation to Alternate Site	3

vii.	Implementation of Temporary Procedure	3

viii.	Establishment of Communication	3

ix.	Restore Data Process and Communication with Backup Location	3

x.	Begin Alternate Site Operations	3

xi.	Manage Work	3

xii.	Transition Back to Primary Operations	3

xiii.	End Alternate Site Procedures	3

xiv.	Relocate Resources Back to Primary Site	3

11.	APPENDICES	3

A.	Employee Contact List	3

B.	Recovery Priorities	3

C.	Alternate Site Resources	3

D.	Emergency Operations Center (EOC) Locations	3

E.	Vital Records	3

F.	Vendor Lists	3

G.	IT System Reports and Resources	3

H.	Alternate Site Transportation Information	3

I.	Impact and Risk Assessments	3

J.	Business Impact Analysis	3

K.	Recovery Task Lists	3

L.	Office Recovery Plan	3

RISK STRATEGIES

CLINICAL RISK

RISK PREVENTION AREAS

RISK PREVENTION STRATEGIES

OPERATIONS AND FINANCE RISK

RISK PREVENTION AREAS

RISK PREVENTION STRATEGIES

IT RISK

RISK PREVENTION AREAS

RISK PREVENTION STRATEGIES

BUSINESS FUNCTION RECOVERY PRIORITIES

Use this strategy to recover essential business operations at an alternate location site. This is an off-site strategy that the disaster recovery teams put into effect. The information system and IT teams will restore IT functions based on critical business functions.

RELOCATION STRATEGY

ALTERNATE BUSINESS SITE

Use the alternate business site and relocation strategy in the event of a disaster or disruption that inhibits the continuation of the business processes at the original business site. If both types of disruptions occur, this strategy should include both short-term and long-term relocation sites.

RECOVERY PLAN

RECOVERY PHASES

These are the activities that you need most in order to continue business, and the recovery plan should target these essential business functions. The recovery plan should proceed as follows:

DISASTER OCCURRENCE

Once you declare a disaster, you make decisions to activate the rest of the recovery plan.

PLAN ACTIVATION

You put the business continuity plan (BCP) into effect during this phase. This phase will continue until you secure the alternate business site and relocate the business operations.

ALTERNATE SITE OPERATION

This phase continues until you can restore the primary facility.

TRANSITION TO PRIMARY SITE

This phase continues until you can appropriately move the business operations back to the original business site.

RECORDS BACKUP

RESTORATION PLAN

Disaster recovery / IT teams should maintain, control, and periodically check on all records that are vital to the continuation of business operations, particularly those records that facilities disruptions or disasters would affect. IT teams periodically back up the most critical files and store them at an off-site location.

RECOVERY teams

Establish recovery teams and divide the participants into the appropriate sub-teams, based on job role and title. Designate a team leader for each team and assign all other team members to a specific role or duty among the team.

TEAM ROLES

Team Leader, Backup Team Leader, Team Member

TEAM CONTACTS

Stored in the Contact List Appendix

TEAM RESPONSIBILITIES

Incident Commander, HR/PR Officer, Information Technology, Finance/Admin, Legal/Contacts

DEPARTMENTAL RECOVERY TEAMS

Business Continuity Coordinator, EOC Communication Team, EOC Human Resources Team, EOC Administration Team, Emergency Response Team, Information Technology Recovery Team

RECOVERY PROCEDURES

Enumerate specific activities or tasks that you should carry out in order to recover normal and critical business operations. Explain each strategy by listing a specific set of activities and tasks to recover business operations.

POTENTIAL RECOVERY PROCEDURE

Disaster Occurrence

Notification of Management

Preliminary Damage Assessment

Declaration of Disaster

Plan Activation

Relocation to Alternate Site

Implementation of Temporary Procedure

Establishment of Communication

Restore Data Process and Communication with Backup Location

Begin Alternate Site Operations

Manage Work

Transition Back to Primary Operations

End Alternate Site Procedures

Relocate Resources Back to Primary Site

APPENDICES

This section lists all the appendices you need to carry out a BCP:

Employee Contact List

Recovery Priorities

Alternate Site Resources

Emergency Operations Center (EOC) Locations

Vital Records

Vendor Lists

IT System Reports and Resources

Alternate Site Transportation Information

Impact and Risk Assessments

Business Impact Analysis

Recovery Task Lists

Office Recovery Plan

DISCLAIMER Any articles, templates, or information provided by Smartsheet on the website are for reference only. While we strive to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability, or availability with respect to the website or the information, articles, templates, or related graphics contained on the website. Any reliance you place on such information is therefore strictly at your own risk.