How proper document organization can support your organization before, during, and after an incident.

Over the last few months, organizations have come face-to-face with impacts and disruptions to their business as they battle the effects of COVID-19.

As organizations turn to their business continuity plans and procedures for guidance, some have found that they are using disparate plans, strategies, and communication methods across different business units and physical office locations. This has dramatically impacted the response of those organizations and added stressors to an already critical situation.

Why This Is Happening

You may be asking, “What caused this? Why are they relying on inadequately documented plans and procedures when they can’t afford inefficient responses?”

The answer is document organization, and while simple, it is a critical element to the success of business continuity planning and your overall Business Continuity Management System (BCMS).

Effective organization is a foundational element of a successful business. This becomes apparent as you begin crafting business processes into effective workflows or ensuring that reporting structures are organized to minimize downtime and distractions. These are highly visible examples of how document organization can impact your organization.

But a more obscure and impactful area that you should devote resources to is document management.

Management of both digital and physical documentation is crucial in the business continuity planning and management process. While each of the following areas may be implemented using different means for digital and physical assets, they must come together to support your overall BCMS effectiveness as prescribed in ISO 22301 – Societal Security – Business Continuity Management Systems. While these items are prescribed within the ISO 22301 standard, they can apply to organizations regardless of which framework you are currently aligning to for business continuity or overall governance management.

Revision Control (ISO 22301 Section 7.5.2 Creating and Updating)

When an organization adheres to the practice of continuously updating, improving, and revising its business continuity management system, there is a risk of outdated material being referenced.

To mitigate this risk, a formal and effective change management protocol should be in place to ensure that only the current version is actively published. The change management protocol should mandate an audit log of all changes made to the document to include who made the changes as well as a date and summary of changes made. Some documents that may demonstrate the importance of revision control in your environment are:

  • Evacuation Procedures
  • BCMS Contact Lists
  • Regulatory and Legal Requirements
  • Business Continuity Policies
  • Business Impact Analysis Documents
  • Communication Plans

Access Control (ISO 22301 Section 7.5.3 Control of Documented Information)

Proper access control measures must be in place to guarantee that only authorized changes, preferably from the Business Continuity Manager or leadership team, are published. By incorporating effective access control measures, the documentation supporting the BCMS maintains its confidentiality, availability, and integrity. This will assist in ensuring that all documentation aligns with the organization’s overall business continuity strategy and has been approved by management.

Distribution and Retrieval (ISO 22301 Section 7.5.3 Control of Documented Information)

In all organizations, particularly in those with global locations or a distributed workforce, it is crucial to ensure all response and management personnel are utilizing the same recovery and preparedness documentation. This is necessary to prevent situations like those above from occurring within your own organization.  Maintaining these documents digitally allows for easy retrieval and access both during preparedness and training situations as well as during times of emergencies.

There are many roles in which document management serves as a crucial element. Proper document management is required to support the foundation of an established and operating BCMS, something some are discovering they do not possess.

While the best time to build your BCMS environment and all the various supporting elements is during periods of relative calm (and well before the processes are needed to be utilized), the second-best time is today.

Contact Us

If your organization is at the beginning of their journey towards developing a mature BCMS, or if you are looking to further mature your existing program, please request to speak to one of our qualified team members here.

We’ll guide you in developing a robust BMCS that your team and customers can be confident in.