Can your company go on without you? Creating a business continuity plan 

You’ve dedicated your blood, sweat and tears to building your business – but can it survive the unexpected?

As an experienced leader, you know how important it is to think ahead. Creating a solid business continuity plan, or BCP, can give you peace of mind that even if you’re not around, things will be well taken care of. (Yes, including the logins for your software, subscriptions and social media accounts!) Once complete, the BCP will lay out everything needed to keep your company running even if life takes an unpredictable turn.

What is business continuity?

Business continuity is a company’s level of readiness to keep functioning after a disruption or emergency. It’s important to have a recovery plan for various scenarios to ensure that key assets and people are protected.

Why business continuity planning matters:

  • Safeguard revenue and reputation: A well-executed BCP minimises downtime, protecting your bottom line and brand trust.
  • Meet stakeholder expectations: Lenders, partners and clients expect resilience—having a BCP demonstrates professionalism and foresight.
  • Stay compliant: Certain industries (e.g. financial services, healthcare) require continuity measures under POPIA, SARS regulations and industry standards like ISO 22301.
  • Reduce stress: Knowing exactly who does what, when and how brings peace of mind when crisis hits

Key components of a business continuity plan

It might seem intimidating to think about things going wrong, but if you follow the steps below you’ll soon have the basics in place to build on.

1. Business Impact Analysis (BIA)

  • Identify critical functions. List core processes—sales, invoicing, production, IT systems—and quantify the impact of downtime.
  • Set recovery objectives. Define Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) for each function (e.g. payroll restored within 4 hours; data loss no more than 12 hours).

2. Risk Assessment

First, you will need to do a risk assessment – a formal way of saying ‘make a list of dangers and what to do about them. The issues that could affect your business and brand might include natural disasters, another pandemic, disruptions to your water or power supply, PR problems, cyber attacks, data breaches, absence of key personnel, and other scenarios relevant to your position.

Once this list of risks is complete, you use your strategic brain to write down how each could affect your company, from your day-to-day operations to employees, finances, and any critical assets. But it’s not all doom and gloom: next on your agenda is to come up with strategies for what to do in each scenario, as well as a master list of contact information for key people.

Gather all of this into a document and you have the basis of your BCP. It’s unique to you, and can be as simple or as complicated as your situation demands. Finally, it’s a good idea to test your BCP, and set regular reminders in your calendar to keep it up to date.

What are the kinds of risks you should consider? You know your business better than anyone, but here are some questions to get you started.

Steps of what to include in the risk assessment:

  • Catalogue threats
  • Analyse likelihood & severity

3. Recovery Stratergies & Resources

When it comes to bouncing back, it pays to have plan B already banked. That starts with lining up alternate suppliers—pre‑negotiating backup vendors for your most critical inputs, whether that’s raw materials for your manufacturing line or specialist IT support for your systems. 

At the same time, automate your data backups so that every server, website and document repository is mirrored off‑site or in the cloud on a regular schedule. 

And don’t forget your people: Equip your team with secure VPN access and collaboration tools so they can log in and keep working from anywhere the moment your primary office or systems go offline.

4. Roles, Responsibilities & Communication

A tight‑knit continuity team is your command centre when disruption hits. Appoint a small group of decision‑makers with clear authority to activate the BCP and steer the recovery effort. Arm them with an up‑to‑date contact directory covering every key stakeholder—from internal leaders and frontline staff to suppliers, lenders and emergency services—so nobody scrambles for numbers at crunch time.

To speed up crisis communications, pre‑draft concise message templates for staff bulletins, client updates and media statements; having these at the ready means you can reassure everyone in hours, not days.

5. Testing, Training & Maintenance

Your BCP only works if everyone knows how to use it. That’s why quarterly tabletop exercises are essential: they let you simulate an incident, walk through each step of the plan and pinpoint any blind spots before they become real‑world headaches.

Treat your BCP as a living document—schedule a full review at least once a year, or whenever you launch a new product, move premises or change a key executive.

And build continuity awareness into your culture by weaving BCP training into new‑hire induction and holding regular refresher sessions, so every team member stays sharp on what to do when the unexpected strikes.

Additional components to your BCP

Digital access

Where do you store the login details and passwords for important business software or social media platforms? Do you have online accounts or subscriptions to keep track of? What about the back end of your website? Whose phone number is given for OTPs or recovering passwords? Where have you saved photos, logos, artwork and other digital assets relating to your brand? Do you make regular backups of what’s on your server? Is your data protected?

Paperwork

Where is the lease for your business premises kept? Do you have a will drawn up, with an outline of how assets should be distributed, as well as details of who has power of attorney? Other essential paperwork could include buy-sell agreements (for partnerships) and life insurance policies to protect other co-owners and families from any negative financial impact.

Key suppliers and contacts

The guy who handles your IT – does everyone else in the business know his full name, and how to get hold of him? What about your supplier up north who deals with you only over the phone? Are your pivotal stakeholder and supplier contacts listed somewhere safe?

Equipment and vehicles

All equipment belonging to the business should be documented, with relevant serial numbers and service history. Do you have insurance policies and ownership certificates for all your company vehicles, or details on repayments if they have been financed and are still being paid off? 

Business valuation

It’s not essential to a BCP, but a business valuation could provide some security, or even act as a springboard to further planning. If you have a statement of accounts from SARS on hand, as well as the latest management accounts, and the latest annual financial statements, you could consider applying for funding, should you need it. You don’t need a business plan or financial projections.

Learn more about how to prepare your business for funding here.

Practical steps to build your BCP

  1. Set objectives & scope. Define what “continuity” means for your business and which functions are in scope.
  2. Conduct BIA & risk assessment. Use simple spreadsheets or cloud-based tools to map impacts and threats.
  3. Develop recovery procedures. Document step-by-step actions, decision trees and fallback options.
  4. Compile your BCP document. Include an executive summary, contact lists, process flows and resource inventories.
  5. Test, train & update. Schedule reminders to run drills, gather feedback and adjust the plan.

Frequently asked questions

What is the primary goal of a business continuity plan?

The primary goal of a business continuity plan is to set out how a company will keep functioning after a disruption or emergency in a way that protects key assets and people. Genfin helps businesses maintain financial continuity during disruptions.

 

How often should a business continuity plan be updated?

Review your business continuity plan at least once a year, and whenever something in the business changes—such as a process, product or service—or when a new external factor impacts the business. Learn how Genfin supports business planning and resilience.

 

What role does technology play in business continuity planning?

Technology strengthens business continuity by improving data security and backups, enabling staff to work remotely, and supporting communication and collaboration so operations can continue during disruptions. Discover how Genfin’s digital solutions support business continuity.

Got Any Other Questions?

A dedicated business funding analyst is available for you. Contact us to discuss your funding goals. Let us help you get it done. You can download some free business continuity plan templates here, and this more detailed template works as a useful guide, even if you’re not in that sector.

Want to learn more about cash flow, scaling, and resources for medium-sized businesses?

Download the 2025 Messy Middle report, available now for free!

“My experience with GenFin has truly been unmatched” ~ Victoria Abi Babalola

Here’s what a South African SME has to say about working with Genfin. Read the review

With Genfin, you are always in safe hands.