Skip to content
Atlas
GET IN TOUCH

B://ASSESS23Business Continuity

A plan for the day
it stops working.

Business continuity planning establishes what your organisation must keep doing during a disruption, how quickly each function has to be back, and what it takes to get there. It is for organisations that have a backup but have never tested whether they could actually resume trading.

A backup is not a continuity plan, and nobody discovers the difference at a convenient moment.

The cost of leaving this alone is rarely one visible failure. It is the slow accumulation: the workaround that became the process, the thing only one person knows, the renewal nobody questioned.

Our starting point is always the same: establish what is actually true today, then decide what to change. Work scoped against an assumption tends to solve a problem you do not have.

  • 01Nobody owns itIt sits with whoever touched it last, which is not the same as being managed.
  • 02No current pictureWhat you have, what it costs, and who has access are all slightly out of date.
  • 03Only handled when it breaksAttention arrives after the disruption rather than before it.

What the engagement covers

Scoped before it starts, so you know what is included and what is not.

  • 01

    Impact analysis

    Which functions matter most, and how long each can be down before the damage starts compounding.

  • 02

    Recovery objectives

    Agreed targets for how fast systems return and how much data loss is tolerable. Both are business decisions.

  • 03

    Documented plan

    Who does what, in what order, written so it still works when the person who wrote it is on a plane.

  • 04

    Testing

    A rehearsal against the plan, because an untested plan is a hypothesis with a nice cover page.

Scope, assess, report, support

Four stages with a written output at each one. You always know which stage you are in and what comes next.

  1. 01Week 1

    Scope

    We agree what is being examined and what a useful answer looks like, so the work is not open-ended.

  2. 02Weeks 2 – 3

    Assess

    Evidence gathered from your systems and your people, because the documented process and the real one rarely match.

  3. 03Week 4

    Report

    Findings written for a decision maker: what is true, what it means, and what we would do about it, ranked.

  4. 04As needed

    Support

    We can hand the report over and step back, or stay and deliver the remediation. Both are normal.

What you should expect

  • Someone other than you owns it, with that written down.
  • The current state is documented and stays documented.
  • Cost is planned ahead rather than discovered at renewal.
  • Decisions are made against evidence rather than assumption.

Questions we get asked

01What is business continuity?

Business continuity planning establishes what your organisation must keep doing during a disruption, how quickly each function has to be back, and what it takes to get there. It is for organisations that have a backup but have never tested whether they could actually resume trading.

02What are RTO and RPO?

Recovery time objective is how quickly a system must be back. Recovery point objective is how much data you can afford to lose, measured in time, so an RPO of four hours means accepting the loss of up to four hours of work. Both are business decisions rather than technical ones, and they drive what the recovery solution has to cost. Wanting fifteen minutes on both is possible and considerably more expensive than wanting a day.

03What is the difference between business continuity and disaster recovery?

Disaster recovery is about getting the technology back. Business continuity is about keeping the business trading while that happens, which includes people, premises, suppliers, and communication. A firm with perfect disaster recovery and no continuity plan restores its servers efficiently while nobody knows who is telling the customers.

04How often should a continuity plan be tested?

At least annually, and after any significant change. Testing does not have to mean a full failover. A tabletop exercise, where the leadership team walks through a scenario against the written plan, costs a couple of hours and reliably finds the gaps: the out-of-date phone list, the process that depends on a system that is also down, the decision nobody is authorised to make.

05What should a continuity plan cover besides IT?

How staff are contacted when email is unavailable, who speaks to customers and what they say, who is authorised to declare an incident and to spend money during one, where people work if the building is inaccessible, and which suppliers need to be told. In a genuine event the technical recovery is usually the part that runs most smoothly, because it is the part someone has thought about.

06We are a small business. Is this overkill for us?

The plan should be proportionate, not absent. For a team of fifteen this is a short document and an afternoon of thinking, not a binder. Smaller organisations are often more exposed, not less, because functions rest on single individuals and there is less slack to absorb a disruption.

07How much does business continuity cost in New Zealand?

We quote after scoping rather than before. Anyone pricing this work without looking at your environment is guessing, and the guess is rarely in your favour. Scoping itself is quick, and we tell you what it costs before we start it.

08How long does it take to get started with business continuity?

A first conversation takes about half an hour and costs nothing. Scoping is usually a week or two of our time depending on the size of the environment, and we agree the delivery dates with you before anything is booked in.

09Can you deliver business continuity alongside our existing IT team or provider?

Yes, and it is common. We are happy to work as an extra pair of hands under your internal team, or alongside an incumbent provider on a defined piece of work. We will set out in writing where the responsibilities split, so nothing falls between us.

10Do we have to use Atlas for the work the report recommends?

No. This can be delivered as a standalone piece of work for an organisation we have never worked with before, or folded into a managed agreement if you already have one with us. Plenty of clients use us for one thing and keep everything else where it is.

11Do you work with organisations outside Auckland?

Our team is based in Auckland and we attend sites across the wider region. Most of this work is delivered remotely, so we support organisations throughout New Zealand, and we will say up front where being on site genuinely matters.

12Who does the assessment, and who presents the findings?

Named people, not a queue. You get a lead who knows your environment and stays with it, which is the difference between explaining your business once and explaining it every time you make contact.

13What do we actually receive at the end?

You keep the documentation regardless, and anything registered in your name stays in your name. Whether we stay involved is your call. Some clients take it in house from there, others move it onto an ongoing agreement with us. We would rather you left cleanly than stayed because leaving was difficult.

Start with a conversation.

Tell us what you are dealing with and we will tell you whether this is the right service for it, and what it would take.

← All services