Secordit home
Contact

What is business continuity planning?

Business continuity planning means preparing a way to keep important activities going after a disruption. The plan covers how to keep those activities going, or to recover them, when something disrupts systems, premises or people, including a cyber incident. A plan does not prevent attacks. 123

By Secordit. Last checked: 10 November 2026.

Go to the steps · All glossary terms

How it works

  1. Identify which services matter most, and what they depend on. 1
  2. Decide workarounds and recovery priorities in advance, including who makes decisions if systems are down. 12
  3. Test the plan, so that people know what to do before a disruption happens. 12

How it can look

The NCSC's prepare: business continuity chapter sits in its disruptive-cyber-attacks collection. It covers knowing which services matter most and what they depend on, deciding workarounds and recovery priorities in advance, and testing the plan. Current ransomware advice sits alongside that planning, rather than replacing it. 13

Warning signs

  • Nobody can say which services matter most, or what they depend on, if systems become unavailable. 1
  • Backups exist, but nobody has tested whether important files can be restored. 32
  • The only copy of the plan is stored on the same system that would be unavailable in an incident. 12

What to do now

  1. Write down which activities matter most, and what people, premises and systems they need. 1
  2. Agree workarounds and recovery priorities, and who makes decisions, before an incident happens. 12
  3. Test the plan, including how you would restore important information, and keep a copy you can reach if systems are down. 13

UK reporting and support

  • For a live cyber attack in England, Wales or Northern Ireland, use Report Fraud. Telephone support is also available on 0300 123 2040. 45
  • In Scotland, call Police Scotland on 101. 78
  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 6
  • If someone is in danger, call 999. 78

How to protect yourself

  • Keep the plan short enough that people will use it, and test it. 1
  • Include ransomware and other cyber incidents, alongside premises and people problems. 13
  • Store a copy of the plan, and of key contacts, where you can still reach them if your usual systems are down. 12

Frequently asked questions

What should a very small business put in a cyber business continuity plan?

Start with the services that matter most and what they depend on. Decide workarounds and recovery priorities in advance, agree who makes decisions, and test the plan. Include how you would restore important information. 123

Does having a plan prevent a cyber attack?

No. A plan is a prepared way to keep important activities going, or to recover them, when something disrupts systems, premises or people. 1

Is this the same as business continuity management?

This page covers business continuity planning: how to keep important activities going, or recover them, after a disruption. Business continuity management is a wider programme around that plan. The practical first step is still a plan you can use and test. 1

Matching kit

First Hour After a Breach · £29 · Digital download.

An incident-response planning kit for UK small businesses. It is not a live incident-response or legal service.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. NCSC, Prepare: business continuity | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  2. NCSC, 10 Steps: Incident management | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  3. NCSC, What you need to know about ransomware | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  4. Report Fraud, Report Fraud. Accessed 10 November 2026 (Europe/London).
  5. Report Fraud, Guide to reporting cyber crime and fraud - Report Fraud. Accessed 10 November 2026 (Europe/London).
  6. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 10 November 2026 (Europe/London).
  7. Police Scotland, How to report a crime - Police Scotland. Accessed 10 November 2026 (Europe/London).
  8. Report Fraud, Reporting cyber crime and fraud or phishing attempts - Report Fraud. Accessed 10 November 2026 (Europe/London).