Business Continuity and Disaster Recovery Policy

What's inside

This policy is fully drafted and structured, ready to brand and complete for your service. It covers:

• 1. Purpose
• 2. Scope
• 3. Policy statement and principles
• 4. Definitions
• 5. Governance and the Business Continuity Management System
• 6. Business Impact Analysis and prioritisation of activities
• 7. Disruption scenarios and response strategies
• 8. The Business Continuity Plan and activation
• 9. IT disaster recovery, data backup and cyber resilience
• 10. Communication and stakeholder engagement
• 11. Recovery, stand-down and post-incident review
• 12. Roles and responsibilities
• 13. Training and awareness
• 14. Monitoring, audit and review
• 15. Related documents
• 16. Glossary
• 17. References

Legislation & standards it maps to

• Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, Regulation 12 (Safe care and treatment), Regulation 15 (Premises and equipment), Regulation 17 (Good governance) and Regulation 18 (Staffing)
• Care Quality Commission (Registration) Regulations 2009, Regulation 18 (Notification of other incidents)
• UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
• Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999
• Regulatory Reform (Fire Safety) Order 2005
• ISO 22301:2019 Security and Resilience - Business Continuity Management Systems - Requirements
• Computer Misuse Act 1990
• Civil Contingencies Act 2004

Who it applies to

All directors, registered managers, clinical and non-clinical staff, locums, bank and agency workers, contractors, volunteers and key suppliers of [Organisation Name]

How it works

1. Buy securely with Stripe - instant, no VAT, no account needed.
2. Download your editable Word file from the link we email you straight away.
3. Complete the placeholders for your service, then have it approved before use.
4. Add the optional updates subscription and we keep it current as guidance changes.