Business Continuity and the Ministry of Defence
Question and Answer Brief

Q1. What does "Business Continuity" mean in the MOD?

A1. Systematic identification of risks to the normal continuation of an organisation’s activity, and the effective management of those risks, to ensure a basic level of output/service following a disruptive event. It is part of a range of good Corporate Governance and Risk Management measures and a necessary and important management process that helps keep an organisation going, even in the most trying of times.

Q2. What is the MOD’s approach to Business Continuity?

A2. It is vital for the maintenance of effective national defence forces and structures that critical business functions are identified and measures put in place to recover them within an acceptable timeframe should a disruptive event occur. We therefore take business continuity seriously – it is a core management function and a key strand of Corporate Governance. Our policy document on business continuity (JSP 503) provides more detailed information about our approach.

Q3. Who is in charge of Business Continuity at the MOD?

A3. Business Continuity Management is part of the Department’s wider policy on risk management, therefore ultimate responsibility for the effective application of Business Continuity principles lies with the Defence Management Board (DMB). MOD’s Personnel Director is the Business Continuity Champion within the Department and therefore has responsibility for ensuring Business Continuity Management processes are in place throughout the MOD. On a day-to day basis, he is supported by the MOD’s Business Continuity Team based in London.

Q4. How many people are involved with Business Continuity in the MOD?

A4. Because of the size of the MOD, it is not possible to say how many people are involved in some way with Business Continuity but everyone should have at least read the Business Continuity Plan covering their business unit.

Q5. What is a Business Continuity Plan?

A5. A Business Continuity Plan sets out such things as the resources, structures, actions, tasks and data required to manage the business recovery process in the event of an interruption as well as recovery priorities and timescales. It will contain information such as who is responsible for invoking the arrangements in the plan and contact details for those who may need to be informed or involved. It is important to note that plans will be generic as it is not possible to cover every eventuality.

Q6. Who is responsible for writing/producing a Business Continuity Plan?

A6. Each Business Unit is required to construct a Business Continuity Plan. Business Units must work together at site level to formulate a coherent Site Recovery Plan too.

Q7. What happens after a Business Continuity Plan is invoked?

A7. The arrangements set out in the Plan would be used to guide the response. Once business has returned to normal, any lessons would be identified and if necessary, corrective action taken necessary to improve policy and preparedness.

Q8. How often are Business Continuity Plans updated in the MOD?

A8. Our policy is that Business Continuity plans should be reviewed and if necessary updated at least once a year.

Q9. Do Business Continuity Plans get tested?

A9. Yes. Testing can take a number of forms such as Desktop/Tabletop exercises where key members of the recovery teams talk through certain scenarios, right through to live exercises - actually moving staff to work in a new location for example.

Q10. How much does the MOD spend on Business Continuity?

A10. The Ministry of Defence’s budgetary system is divided among a number of cost centres (Top Level Budget Holders) and subordinate levels (Higher Level Budget Holders) and it is not possible to say how much is set aside for Business Continuity purposes.

This information was produced by:

Head Office Business Continuity Team
5^th Floor,
Zone B
St Georges’ Court
2-12 Bloomsbury Way
London
SW1A 2SH

Last Updated: 27 Jan 05