
As an HR professional, most of your work revolves around the people in your organization. You’ll be involved in hiring, administering benefits, and providing many different kinds of advice and counsel. You depend on access to lots of information, usually in the form of employee records and other statistical data required by the government. You also need access to the people in your organization, your staff, senior management, and your constituent employees.
Now all this is fine, assuming business as usual, but what would you do if suddenly you were unable to provide HR services to your colleagues? How would you deal with the many questions that might arise? How would you deal with senior management questions? How would you handle government regulations and the reporting they typically require?
Let’s suppose that, because of an external event, such as a nearby fire or flood, the local authorities have cordoned off your building. You are unable to gain access to the building, your office, and the resources you need to manage the HR function. What steps would you take to 1) recover your ability to provide HR services, 2) gain access to the critical data you need, and 3) communicate with people in your organization?
We’ve asked a lot of questions, and perhaps the answers are obvious. Clearly there will be occasions when an incident – whether internally or externally generated – will interrupt your work. It may be only for a few minutes, say a mini power outage that shuts down your systems but doesn’t cause serious damage. Or it could be days or weeks, such as in the aftermath of a hurricane or severe winter storm. As an HR professional you provide critical services to your fellow employees, and it’s in your best interests – and the company’s – that you have the ability to recover and restore HR functions as soon as possible following a business disruption.
That’s what business continuity is all about. It’s about understanding how you operate: the activities you perform, the steps you take when performing them, and the resources – people and technology – you need to achieve your objectives. Once you know these activities, you need to identify potential risks to their continued operation. Having identified these risks, you can determine which ones present the greatest potential disruption to your operations, and your department. If possible, it’s also a good idea to correlate the operational, financial and human impact of these risks if they actually occurred. This means that a half-day disruption, for example, could result in a one- to two-day loss of productivity.
Once you have begun to analyze how you operate, the threats to your continued operations, and the potential impact to your department and the company of a disruption, you can begin to identify ways you can respond to these events. Let’s examine a few strategies:
At a corporate level, be sure to get involved in business continuity initiatives. Your value as an HR profession to the business continuity process is critical. As a member of the program team, you’ll be getting involved with employee communications (before, during and after an emergency), protection of employee data and company records, providing assistance to employees in areas such as grief counseling, ensuring that government regulations are followed, and ensuring that company policies are followed. In its early years, business continuity traditionally focused on protecting and recovering technology, but today it covers the entire spectrum of business operations and governance. And the HR function is one of the most important of all.
As the HR profession progresses through the 21st century, it faces perhaps its greatest challenges. In the five years since 9/11, severe hurricanes in 2004 and 2005, the threat of global warming, and terrorist activities around the world, the profession is continually challenged to reinforce its value to business and government. The prospect of still more natural disasters looms over this country and globally, as does the threat of terrorism in the form of chemical, biological, radiological and nuclear events. The prospect of an avian influenza pandemic presents yet another threat of unimaginable proportions. Both the HR and business continuity professions are at a major crossroads. Both must be able to work effectively with other related disciplines, such as physical security, information security, facilities management, emergency management and homeland security. As an HR professional, it is an ideal time to get acquainted – or reacquainted – with business continuity.
About the Author
Paul F. Kirvan, FBCI, CBCP, CISSP, has over 19 years experience in business continuity management as a consultant, author and educator. He has been directly involved with dozens of business continuity projects, authored dozens of articles, conducted seminars worldwide, and spoken to hundreds of people on the subject. Mr. Kirvan is a Fellow of the Business Continuity Institute (FBCI), a Certified Information Systems Security Professional (CISSP), a Certified Business Continuity Professional (CBCP), and is on the Board of Directors of the Business Continuity Institute. In 2001 he was awarded the Industry Achievement Award by the International Disaster Recovery As