Questions for your situation
Is lost revenue the only impact that business impact analysis needs to measure?
Depending on the activity, consider customers, legal obligations, safety, reputation and other significant effects. Show how impacts change as disruption continues. Choose criteria suited to the organisation. Include activities that generate little direct revenue but whose interruption could stop other critical processes.
What should be challenged when two sites are each other's backup?
Examine shared power, telecommunications, staff, suppliers and regional hazards. Verify that the alternative site has capacity for the combined load. A single event affecting both sites weakens the backup assumption. Build the training scenario around common dependencies and a realistic capacity calculation.
What records should support a claim that an exercise succeeded?
Retain objectives, scenario boundaries, participant responsibilities, actual timings and observations. Assess whether the intended steps were completed. An attendance list does not demonstrate successful recovery. Assign owners, deadlines and follow-up checks for deficiencies so that exercise results lead to improvement.
Should a crisis plan only be updated after a real incident?
Organisational, technology, supplier and facility changes can affect its assumptions. Reviews and exercises also provide reasons for revision. The absence of a real incident does not prove that a plan is current. Explain how changes reach the continuity owner and who needs renewed briefing.
How can training be planned when management cannot attend the main exercise?
Identify decision authorities and critical management duties, then arrange an appropriate short decision session or separate scenario exercise. Operational team training does not assume management's responsibilities. Record dependencies on senior approval explicitly. Allocate programme time according to the practical decisions each role must rehearse.
Does a training certificate meet a customer's contractual continuity requirement?
Read whether the contract requires training, plans, testing, service levels or organisational certification. These outputs are not interchangeable. If the customer requires a particular recovery capability, provide relevant test and implementation evidence. Assess acceptance against the exact requirement and the type of document presented.