Site Resilience and Continuity Plan

This plan is the broad, all-hazards instrument. Where the disruption has its own dedicated template, complete that one in full, and reference it here rather than repeating it.

Continuity planning is addressed indirectly through ISO 14001's emergency preparedness clause where the consequence is environmental, and directly through the business continuity standard where a site aligns with it, though the two are not the same obligation.

No jurisdiction mandates a site continuity plan by name for most commercial premises; the obligation is either indirect, through environmental or food safety consequence, or voluntary, through alignment with a recognised continuity standard.

The form asks whether each scenario is covered and whether standby exists. Whether the plan holds up during a disruption comes down to judgement calls the fields don't force.

Findings rarely concern whether the plan exists. They concern whether its recovery time objectives and standby arrangements would actually hold during the disruption they describe.

A chilled distribution site held a continuity plan naming a 24-hour recovery time objective across every scenario, including refrigeration, and recorded standby generation as available. The generator had been installed three years earlier, serviced annually, and started briefly each month. It had never run under the site's actual refrigeration load.

A regional power outage lasting six hours triggered the plan. The generator started but tripped within twenty minutes once the full load came on, a fault the monthly no-load test had never revealed. By the time a mobile generator arrived, product temperature had exceeded its threshold well inside the 24-hour window the plan assumed, because refrigeration's real tolerance was a fraction of that figure.

The plan itself is a description. What decides whether the site actually keeps running is whether the standby arrangements it names have been proven under real conditions, and whether a dependency change reached the plan before the disruption did.

KnowEnviro

Holds the continuity plan against the site's dependency register, flags a changed critical supplier, haulier or key person, and keeps the emergency plan and generator test links current.

KnowMaintain

Tracks whether standby generation and other physical arrangements have been tested under load, not just serviced, so availability and verified capability stop being conflated.

Ella

Watches exercise results and dependency changes for findings that should trigger an early review, and rolls critical gaps into corrective actions rather than letting them sit unaddressed.

Recovery time objective

The maximum tolerable duration a dependency can be lost before the consequence becomes serious, set separately per scenario, not as one figure for the plan.

Business impact analysis

The structured assessment of what the site depends on and what happens if each dependency is lost, underpinning the recovery objectives set.

Standby arrangement

A pre-identified fallback, standby generation, alternative cold storage, an alternative production site, whose value depends on whether it has been tested.

Single point of failure

A dependency, whether equipment, a supplier or a person, whose loss stops the site with no fallback, the condition this plan exists to remove.

Exercise

A deliberate test of the plan's arrangements, distinct from a routine no-load check, intended to reveal whether the recovery objective would actually be met.