What is a Contingency Plan?
A contingency plan, commonly referred to as a “Plan B”, is a proactive business strategy designed to help an organisation respond effectively to a significant future risk, unexpected event, or natural disaster. Its primary goal is to minimise downtime and protect critical business functions when primary plans fail.
Contingency planning is part of all risk management business strategies, including continuity and disaster recovery.
A business contingency plan is essential to help a business respond effectively to a future potential risk event.
It is usually developed for a possible high consequence (impact) or high-risk profile (impact and likelihood). If the expected result, possibly an opportunity, fails to materialise, it can also serve as an alternative action, i.e., a Plan B.
A well-thought-out business contingency plan can better prepare businesses to manage unexpected challenges or natural disasters, including emergency response.
What Are the Seven Steps of the Contingency Planning Process?
| Contingency Planning Step | Core Purpose |
| 1. Planning Statement | Establishes policy, authority, and official guidance. |
| 2. Business Impact Analysis | Identifies and prioritises critical business systems. |
| 3. Preventive Controls | Implements measures to reduce system disruptions and costs. |
| 4. Recovery Strategies | Ensures quick system restoration following a crisis. |
| 5. Plan Development | Documents specific, detailed procedures for response teams. |
| 6. Testing & Training | Validates capabilities and trains personnel through exercises. |
| 7. Plan Maintenance | Regularly updates the strategy to match business changes. |
Step 1: What Is a Contingency Planning Statement?
A formal policy is necessary to develop an effective contingency plan. The policy provides the authority and guidance required to create a contingency plan and ensure it meets the business’s needs. It should be reviewed and updated regularly to remain relevant and responsive to the company’s changing needs.
Step 2: How Do You Conduct a Business Impact Analysis?
A Business Impact Analysis (BIA) is a systematic process for identifying and assessing the potential effects of disruptions to essential business operations. It helps organisations prioritise systems and processes critical to supporting business functions.
Organisations typically conduct BIAs as part of business risk management or business continuity planning. They involve identifying the business’ key products, services, and processes and assessing the potential impacts of disruptions or unexpected events.
The results of a BIA can help a business make informed decisions about where to allocate resources for risk control, mitigation and business continuity planning.
Step 3: How Do You Identify Preventive Controls?
Business disruptions can significantly affect a business’s profitability and cash flow.
To reduce these effects, businesses can take various measures to improve system performance and reduce contingency life cycle costs. By taking such steps, organisations can keep their systems running smoothly and efficiently while saving costs in the long run.
Step 4: How Do You Create Contingency Plan Recovery Strategies?
Thorough recovery strategies ensure the system can recover quickly and effectively after a disruption. This helps avoid further damage or downtime. Having a plan in place can minimise the impact of a disturbance and get the business system up and running again as soon as possible.
Step 5: How Do You Develop the Contingency Plan?
The contingency plan should include detailed guidance and procedures for restoring the business or system, tailored to the consequence (impact) level and recovery requirements. This will ensure that the system can be restored correctly in the event of an issue and that critical business functions are not lost or minimised.
Step 6: How Do You Execute Testing, Training, and Exercises?
Testing validates disaster recovery capabilities and ensures the plan works as intended.
Training prepares recovery personnel for plan activation, familiarising them with the steps they need to take and the procedures they need to follow.
Exercising the plan identifies planning gaps and allows for improvements before implementing the contingency plan.
Together, these activities improve plan effectiveness and organisational preparedness.
Step 7: How Is Contingency Plan Maintenance Performed?
The contingency plan should be updated regularly to reflect business enhancements and organisational changes. This helps ensure it remains relevant and up to date, and can be used effectively to manage the business or system.
Frequently Asked Questions
What Is a Contingency Plan?
A contingency plan is a proactive business strategy designed to help an organisation respond effectively to a significant future risk, unexpected event, or crisis. Often referred to as a “Plan B,” its primary goal is to minimise downtime, protect resources, and maintain critical operations when primary plans fail.
What Are the Seven Steps of the Contingency Planning Process?
The seven steps include establishing a contingency planning statement, conducting a business impact analysis (BIA), identifying preventive controls, creating recovery strategies, developing the plan, implementing testing, training, and exercises, and maintaining the plan.
What Is the Difference Between a Contingency Plan and a Business Continuity Plan?
While closely related, a contingency plan focuses on specific recovery procedures for a particular system, disruption, or high-risk event. A business continuity plan is a broader framework that ensures the entire organisation can continue operating at a minimal level during and immediately after a major disaster.
Why Do Businesses Need a Contingency Plan?
Businesses need a contingency plan to build resilience against unpredictable disruptions such as natural disasters, cyberattacks, supply chain failures, or economic shifts. A validated plan reduces panic, speeds recovery, protects profitability, and minimises financial or reputational damage.
How Often Should a Contingency Plan Be Updated?
Review and update a contingency plan at least annually. It should also be revised immediately following major organisational changes, technology upgrades, infrastructure shifts, or after insights are gained from testing and live crisis exercises.
