ClearAuthority template

Business Continuity Plan Template for Small Business

A business continuity plan (BCP) says who is in charge, what comes back first and what to do in the first 30 minutes when something breaks. This template gives startups and small businesses that rely on online tools a plan to fill in.

$69 one-time

Version 1.1. Instant download through secure checkout. Applicable sales tax or VAT (value added tax) may be added at checkout, based on your location.

Startup Business Continuity Plan set: the continuity plan (23 pages, Word and PDF), the tabletop test kit (6 pages) and the worksheet (Excel, 10 tabs)

What is a business continuity plan?

A business continuity plan is a short written plan for keeping the business running during a disruption, then getting back to normal. For a small team it answers five questions:

Business continuity plan for small business: what to include

Plan sectionWhat it answers
Roles and decision tiersWho leads, who backs them up, and who may approve what during an incident.
Critical functions and recovery targetsWhat must keep working, and how fast it must come back. This is your business impact analysis (BIA) in short.
Vendors and dependenciesWhich providers each function relies on, and which would come back slower than you need.
Contacts and call treeWho calls whom, in what order, when normal channels fail.
Scenario playbooksHow you'll know, the first 30 minutes, the first 24 hours and recovery.
Crisis communicationsWho approves messages, plus templates for customers, the team, investors and vendors.
Testing and sign-offA tabletop test, a test log and a dated sign-off, so the plan is tested, not just written.

The five playbooks

Each playbook covers how you'll know, the first 30 minutes, the first 24 hours and recovery.

  1. Key software or cloud provider outage. Your product, website, email or files are down because a provider is down.
  2. Key person loss. A founder or the only person who can do something is suddenly unavailable.
  3. Admin or payment account loss. You are locked out of an admin account, or payouts are frozen.
  4. Data breach. Customer or company data may have been seen, taken, changed or encrypted.
  5. Remote team disruption. Power or internet loss, severe weather, a chat tool outage or lost devices.

Recovery targets: a worked example

The plan includes a full worked example for a fictional company, Tessaly Analytics, Inc. Two numbers matter for each function:

Example only: fictional company

Critical functionPriorityRTO (hours)RPO (hours)Realistic today (hours)Gap?
Customer appP1418Gap: fix
Customer loginP12241OK
Billing and payment collectionP2482472Gap: fix
Email, docs and team chatP28244OK

The worksheet scores each function, sets the priority and flags a gap when realistic recovery today is slower than the target.

Sample page from the worked example: critical functions, business impact scores, recovery targets and gaps for a fictional company, marked example only

What's inside

FileFormatWhat it gives you
Startup Business Continuity PlanWord (DOCX) and PDF (portable document format), 23 pagesThe fill-in plan, the five playbooks, a board summary, a reference crosswalk (your auditor decides), example questionnaire answers to adapt, and the worked example.
Tabletop Test KitWord and PDF, 6 pagesThree 30-minute scenarios, a facilitator script and an evidence record.
WorksheetExcel (XLSX), 10 tabsScore functions, flag vendor gaps, log tests, track fixes and log incidents.
Quick-start read-mePDF, 1 pageHow to finish the plan in one afternoon.
GlossaryPDF, 1 page38 terms and acronyms in plain English.
What's inside: the continuity plan, the tabletop test kit, the worksheet, and the glossary and quick start

Set it up in one afternoon

  1. Skim the worked example so you can see what "done" looks like. (15 minutes)
  2. Fill in roles, backups, decision tiers and contacts. (45 minutes)
  3. Score your critical functions and list key vendors on the worksheet. (60 minutes)
  4. Edit the five playbooks and message templates. Delete steps that don't fit you. (60 minutes)
  5. Store copies outside your main systems, book your first tabletop test within 30 days, and sign off. (30 minutes)

When a customer asks for your plan

Customers, insurers and investors often ask: "Do you have a business continuity plan?" This pack helps you answer with something written and tested.

Get the Startup Business Continuity Plan — $69

Frequently asked questions

What is a business continuity plan template?

A business continuity plan template is a ready-made plan with blanks to fill in. You add your own people, tools and targets instead of starting from an empty page.

Does a small business need a business continuity plan?

If your business runs on online tools, yes. A short written plan means nobody has to guess who is in charge or what to fix first when a key tool or person is gone. Customers, insurers and investors also ask for one more and more often.

What is the difference between RTO and RPO?

The recovery time objective (RTO) is how long a function can be down before real harm. The recovery point objective (RPO) is how much recent data or work you could afford to lose. Both are set in hours.

How long does it take to fill in?

About one afternoon (around 3½ hours) for a first version. Then run a 30-minute tabletop test within 30 days.

Does it cover SOC 2 or ISO 27001?

It includes a reference crosswalk (your auditor decides). It shows where parts of the plan relate to System and Organization Controls 2 (SOC 2), ISO 27001 and ISO 22301 topics. It is a reference only. It is not an audit or an assessment.

Can I use the questionnaire answers as they are?

No. They are example answers to adapt. Only state what your company actually does.

Is this legal advice?

No. It is a template and general guidance only. It is not legal, audit, security or compliance advice.

How do I get the files?

Pay once at secure checkout. You get one ZIP file from the download button and in your order email. No subscription. All sales are final once the file is delivered. If your download doesn't work or the wrong file arrives, email hello@oxidegrid.com and we'll send the correct one. This does not limit any statutory rights that apply to you.

Related

Template and general guidance only. Not legal, audit, security or compliance advice. Using it does not make you compliant with or certified to any standard. Oxidegrid LLC is not affiliated with the American Institute of Certified Public Accountants (AICPA) or the International Organization for Standardization (ISO). ClearAuthority is a brand of Oxidegrid LLC.

All sales are final once the file is delivered. If your download doesn't work or the wrong file arrives, email hello@oxidegrid.com and we'll send the correct one.

This does not limit any statutory rights that apply to you.