The BCP Episode

Introduction to the Guest and Topic:

Host Allie Krings introduces Kurt Warren, an experienced IT professional at Kirkpatrick Price. The conversation focuses on business continuity planning—what it is, why it matters, and how organizations can prepare for unexpected disruptions. Kurt shares his background, explaining that his experience living in Miami, where hurricanes and natural disasters are common, helped shape his understanding of the importance of planning for disruptions and applying that mindset to business environments.

What Is a Business Continuity Plan?:

A business continuity plan (BCP) is a strategy that helps organizations continue operating when disruptions occur. Because businesses depend on consistent operations to generate revenue, they must have plans in place to maintain critical processes when systems fail, employees are unavailable, or unexpected events happen.

At its core, a BCP ensures that a business can continue functioning—and recover quickly—even when something goes wrong.

What Does Business Continuity Look Like Up Close?:

For Individuals: It involves being prepared to continue work from alternate locations or using different tools if normal operations are disrupted. For example, employees may need access to laptops, remote systems, or backup communication methods to keep work moving.

For Companies: Organizations must plan for a wide range of disruptions—environmental events, system outages, financial issues, or personnel gaps. This includes ensuring employees can work remotely, systems remain available, and key business functions can continue without interruption.

What Are the Biggest Gaps in Compliance?:

One of the biggest gaps is overconfidence. Many companies believe their current processes are sufficient without fully evaluating potential risks.

Another gap is failing to consider less obvious scenarios, such as losing access to funds, key personnel leaving, or communication systems going down. Without considering these possibilities, organizations leave themselves vulnerable to serious disruptions.

Why Do Businesses Need a Continuity Plan?:

Every organization will face some form of disruption at some point—whether it’s natural disasters, financial instability, system failures, or staffing challenges.

Events like hurricanes, floods, power outages, or even the collapse of a financial institution can prevent normal operations and impact a company’s ability to function. A BCP ensures that businesses are prepared for these realities and can continue operating despite them.

How Should Organizations Start Building a BCP?:

The first step is conducting a Business Impact Analysis (BIA). This involves reviewing every department to understand what processes are critical, what resources they require, and how disruptions would affect them.

Organizations then rank these processes based on importance and develop strategies to maintain or restore them. From there, they build detailed plans that outline how to continue operations during different scenarios.

What Are Real-World Examples of BCP Success and Failure?:

Failure Example: A company in Miami experienced severe flooding during a hurricane, which destroyed its data center because it was located below ground level. Without proper planning or redundancy, the company faced a long recovery process and significant operational disruption.

Success Example: Another organization affected by a bank collapse had already diversified its funds and prepared for financial disruptions. Because of this planning, they were able to continue payroll operations without major issues.

How Should Companies Prepare for Common Disruptions?:

Environmental Events: Plan for hurricanes, floods, fires, or other regional risks by enabling remote work and maintaining backup systems.

System Outages: Use backup power sources like generators or battery systems, and consider cloud or hybrid environments to maintain system availability.

Personnel Loss: Document critical processes so others can step in if key employees leave or become unavailable.

How Should Companies Test Their BCP?:

Organizations should regularly test their plans through exercises, similar to how teams practice for major events.

These tests should include verifying access to the plan during outages, ensuring employees understand their roles, and confirming that communication channels work when systems are down. Without regular testing, even a well-written plan may fail during a real event.

Why Is Documentation So Important?:

Documentation ensures that critical processes are not dependent on a single individual. If key employees leave or are unavailable, documented procedures allow others to continue operations.

Organizations should clearly document step-by-step processes for essential functions to avoid disruption and confusion during emergencies.

What Is the Role of Third-Party Auditors?:

Third-party auditors provide an outside perspective and can identify risks that internal teams may overlook.

Because they specialize in risk and security, they can evaluate the organization’s plan more objectively and recommend improvements based on broader experience across industries.

What Is Often Overlooked in Business Continuity?:

Communication is one of the most overlooked elements. Without reliable communication, teams cannot coordinate, respond effectively, or recover efficiently.

A strong BCP must include clear communication strategies to ensure that employees, leadership, and external stakeholders can stay connected during a disruption.

How Can Companies Ensure Compliance?:

Compliance begins by identifying risks, documenting processes, and creating a structured continuity plan based on business priorities.

Organizations must then regularly test and update their plans, train employees, and incorporate feedback from audits. By doing so, they ensure they are prepared not just for expected disruptions, but also for unexpected events that could impact operations.