Operations and Suppliers

Business Continuity and Contingency Planning

How a small business can prepare for illness, outages, supplier failure and other disruptions with a short, practical plan that is easy to keep updated.

On this page
  1. Why a small business needs a plan
  2. Start with what must keep working
  3. Common risks worth thinking about
  4. Judge each risk simply
  5. Write the plan in plain steps
  6. Preparations that cost little
  7. Insurance and legal points
  8. Test, then keep it current
  9. Keep proportion

Why a small business needs a plan

Large organizations have departments for this. A small business usually has an owner who carries the whole picture in their head, which means a single event can stop everything: an illness, a power cut, a failed laptop, a supplier who goes quiet, a lost key, a bad weather week. These events are not rare across the life of a business, even if any specific one is unlikely this month.

Business continuity is the idea of keeping essential work going through a disruption. A contingency plan is the written set of “if this happens, we do that” steps. The aim is not to predict the future. It is to avoid making important decisions in a panic.

Start with what must keep working

You cannot protect everything equally, so begin by listing the functions that, if they stopped, would hurt customers or cash the fastest. For a small business this is often a short list:

  • Taking orders or bookings
  • Delivering the product or service
  • Getting paid and paying others
  • Communicating with customers
  • Access to key records, passwords and files

For each, ask three questions. What does it depend on (a person, a supplier, a device, a connection, a place)? How long could it be down before real harm occurs? What is the simplest workaround?

Common risks worth thinking about

You do not need a long risk register. Walk through these categories and note which ones apply.

People. The owner or a key worker is ill, injured or unavailable for days or weeks. This is the most common single point of failure in tiny businesses.

Suppliers. A supplier is late, short of stock, raises prices sharply or stops trading. The article on choosing and working with suppliers covers how to reduce this exposure from the start, for example by knowing a second source.

Technology and utilities. Internet, power, payment systems, the website or a device stops working. Data is lost or accessed by someone who should not have it, which overlaps with the wider topic of cyber threats.

Place. A flood, fire, burst pipe, road closure or landlord problem makes the premises unusable. Your choice of business location influences how exposed you are.

Money. A large customer pays months late or a bill arrives unexpectedly. The cash side of resilience is a separate subject; cash flow planning and a modest reserve do much of the work here.

Demand and reputation. A sudden spike or collapse in orders, or a public complaint that spreads. Handling customer complaints calmly and quickly is part of this.

Judge each risk simply

For each risk you listed, give a rough rating for how likely it feels and how much it would hurt, such as low, medium or high. Do not pretend this is precise. The point is to decide where to spend limited effort. A risk that is unlikely but would be fatal (such as losing all your records with no copy) deserves attention, as does one that is likely and mildly disruptive (such as a regular late delivery).

Write the plan in plain steps

A usable plan fits on a few pages. For each high-priority risk, write:

  1. What triggers the plan, for example “supplier cannot deliver within X days”.
  2. Who decides and who does what. In a one-person business, this might simply be who you would ask for help.
  3. The first actions, in order.
  4. What you tell customers, and how.
  5. What you need to have ready, such as a second supplier’s contact details.

Here is a hypothetical example for a small online seller whose main supplier fails to ship. The plan might say: contact the supplier the same day; check stock on hand; tell affected customers about the delay within a day and offer a refund or wait; contact the backup supplier with a small test order; review what is needed to resume normal ordering. Nothing clever, but when the day arrives the steps are already decided.

Preparations that cost little

Many protective measures are cheap or free:

  • Keep copies of important records away from the main device, and know how to restore them. Test that restoring actually works.
  • Write down access information (accounts, suppliers, key contacts, how to run the business) and store it securely where a trusted person could find it in an emergency.
  • Have a second source for the most critical supply, even if you buy from it only occasionally.
  • Cross-train. If there is more than one person, make sure at least two can do each essential task. Documented standard procedures help here.
  • Keep a cash buffer if you can, sized to what feels sensible for your costs.
  • Agree a backup way to take payments or orders if your main method fails.
  • Keep customer contact details accessible so you can send updates.

Business insurance can transfer some financial risks, such as damage to property or liability claims, but what is available and what is covered varies widely by place and policy. Read the exclusions, and consider speaking with a licensed insurance professional or adviser before relying on a policy. Likewise, if you have contracts with customers or suppliers, check what they say about delays and force majeure situations. This article is general information and not professional advice.

Test, then keep it current

A plan that was written once and filed away tends to be out of date by the time it is needed. Set a reminder to review it once or twice a year, and after any major change such as a new supplier, new employee or new system. A short walkthrough helps: pick a scenario, such as “I am unwell for two weeks starting tomorrow”, and see what would actually happen. The gaps you find are the most valuable output.

Keep proportion

It is possible to over-plan. A very small business does not need elaborate procedures for every scenario. A one-page list of critical functions, a few backup arrangements and the contact details you would need is a reasonable start. No plan removes risk entirely, and some disruptions will be unfamiliar. The goal is to be a little less surprised, and to make recovery quicker and calmer.

The complete guide to operations and suppliers

Business Operations for Small Companies
Read the guide

Keep exploring

Guides from other topics

All topics →