In addition to a crisis communication protocol, your BCP should include an incident response plan to ensure your organisation is prepared to respond appropriately and efficiently to a disaster. This plan should be practised and reviewed regularly for effectiveness. Specifically, the plan should include the following elements:

• IT and data recovery: Implement a data backup programme to protect and recover important information. Enforce workplace policies that assist in both preventing and mitigating the impact of a data breach. Further, consider developing a separate cyber-continuity and incident response plan with your staff to address your organisation’s unique cyber-security risks.

• Contracts: Pre-arrange written contracts with other organisations and external suppliers to continue fulfilling commitments to customers

.• Resources: Prepare an inventory of resources that are essential to regaining the ability to operate.

• Testing and training: Run a test of the plan to ensure the plan is successful. Offer routine staff training to make sure employees understand their responsibilities in helping execute the plan.