Business continuity plan: your best defence in a crisis 

Step 1. Take an inventory of risks 

If you’re going to protect yourself, you first need to know what you’re protecting against. Start by identifying all the events that could interrupt your operations. They go well beyond insurable losses like fire or water damage.
Review all areas of your operations to spot weaknesses, including finances, communications, technology, processes, supply chains, and more. 

Your building

A good starting point for your planning? Your physical infrastructure: building, premises, equipment. 

• Are your facilities exposed to severe weather or equipment failure?
• Do you have a plan if access becomes impossible, such as remote work or a secondary location? 
• Do you use preventive monitoring technologies, like water leak detectors or alerts for when to clear snow from the roof?

Your critical data 

Customer records, HR files, supplier contracts... these digital assets often represent the memory and value of your business. Losing them could be catastrophic. In the event of an interruption, you should be able to restore them quickly. 

• Keep them updated. 
• Use a regular backup system. 
• Store a copy in a secure location. 

Your IT systems

Cyber threats are occurring more frequently than ever: phishing, ransomware, hosting breaches or human error can paralyze operations and damage your reputation. 

Bring in cybersecurity experts. An external perspective can reveal vulnerabilities you hadn’t considered.

 

Step 2. Assess the impacts of an interruption

Once the risks are identified, evaluate their real consequences. The goal is to set priorities and focus efforts where they’ll have the most impact.

List all your activities and rank them by how critical each one might be. Which processes are essential? Which can wait? Rely on concrete data: sales generated, contractual obligations, operational interdependencies.

Make sure you consider the likelihood of each scenario. A rare but plausible risk is worth preparing for when the consequences are likely to be severe.

 

Step 3. Know your insurance coverage

Your commercial insurance isn’t just a legal requirement, it’s a strategic part of your continuity plan. Understanding what’s covered helps you adjust your recovery strategy.

Commonly included coverage

Most business insurance policies cover:  

• Fires
• Water damage
• Theft and vandalism
• Power failure
• Storm and hail
• Denial of access imposed by authorities

This protection could provide compensation to give you breathing room while you get back on track. 

Optional coverages to consider

Depending on the risks identified, you might need coverages not automatically included:

• Sewer backup
• Flood
• Earthquake
• Incident affecting a critical supplier
• Breach of customer data confidentiality

Uninsurable risks

Some events aren’t covered even with endorsements:

• Pandemics
• War
• Acts of terrorism

Watch for recurring risks

Insurers cover reasonable chance events, not recurring problems. If a loss happens too often, your insurer might refuse coverage. You’ll need to change your practices or accept the risk yourself.

 

Step 4. Write a clear continuity plan

Your plan should cover two distinct phases: immediate crisis management and gradual business recovery.

Who does what in an emergency?

When a crisis hits, you need to know:

• Who makes decisions 
• Which actions take priority 
• How to coordinate internal and external communications

Train your teams on emergency procedures for your specific risks: evacuation, first aid, use of safety equipment. Always have backup solutions.

Most importantly, share this information widely. A plan known only to management is not very effective.

For recovery: restart without starting from scratch

Once the emergency is under control, your plan should outline the steps for recovery:

• Restoring data from backups
• Arranging temporary facilities
• Gradually redeploying teams or services

By structuring these steps in advance, you avoid improvisation and maximize your chances of bouncing back quickly.

 

Step 5. Test, train, adjust

Even the best plan is useless if it sits in a drawer. For it to work, it must be active and embedded in your business culture.

Share and train

• Ensure all key people know the plan and where to find it.
• Hold regular training sessions tailored to each role.
• Build a culture of preparedness within your teams.

Test and improve

 

• Run drills to find where improvements can be made.
• It’s better to find flaws during a trial run than during a real crisis.
• Adjust your plan based on feedback.

Review regularly

Your business evolves, and so should your plan:

 

• New teams and processes
• Updated technologies and tools
• New services or organizational changes

An outdated plan can create a dangerous false sense of security.

 

Stay the course, even in rough waters

Investing in a business continuity plan is investing in the long-term health of your company. Preparing for a crisis is the best way to confidently navigate it, rather than just suffering the consequences. 

Want to learn more about protecting your business? Your advisor can help you develop your continuity strategy and optimize your insurance coverage.