Business Disruption Scenario Catalogue In The United Kingdom
Scenario Name | Operational Impact | Indicative Severity | Continuity Measures | Involved Functions |
|---|---|---|---|---|
Premises | ||||
Office Fire | Unsafe premises, evacuation and loss of access to equipment or records. | High | Fire risk assessment, evacuation drills, offsite backups and alternate workplace. | Facilities, health and safety, IT, HR, senior management. |
Flooding At Premises | Building access, stock, plant, paper files and utilities may be lost. | High | Flood alerts, asset relocation, insurance, remote work and recovery supplier. | Facilities, operations, finance, insurers, IT. |
Severe Weather Closure | Staff and customers cannot safely reach or use the site. | Medium | Weather monitoring, remote work, staff alerts and flexible scheduling. | Operations, HR, facilities, customer service. |
Building Access System Failure | Staff, visitors or contractors may be unable to enter secure areas. | Medium | Manual sign-in, spare keys, security escalation and vendor support. | Facilities, security, IT, reception. |
Landlord Or Shared Building Failure | Shared lifts, reception, heating, security or access may stop. | Medium | Lease contacts, remote work plan, incident notification and service credits. | Facilities, legal, operations, finance. |
Premises Contamination | Site may need closure for cleaning, testing or specialist decontamination. | High | Cleaning contracts, exclusion zones, PPE, remote work and authority liaison. | Facilities, health and safety, HR, operations. |
Loss Of Heating Or Cooling | Unsafe or unsuitable working temperatures reduce productivity or force closure. | Medium | HVAC maintenance, temporary units, remote work and staff welfare checks. | Facilities, health and safety, HR, operations. |
Physical Security Incident | Site lockdown, evacuation, police attendance or restricted access. | High | Security procedures, lockdown plan, staff alerts and police liaison. | Security, facilities, HR, communications, leadership. |
People | ||||
Loss Of Key Personnel | Critical decisions, approvals or specialist tasks cannot be completed. | High | Deputies, succession plans, shared documentation and cross-training. | HR, senior management, department heads, legal. |
High Staff Absence | Reduced capacity, delayed service, missed deadlines and rota gaps. | High | Minimum staffing levels, prioritisation, agency cover and remote work. | HR, operations, payroll, line managers. |
Pandemic Or Epidemic | Long-term absence, workplace restrictions and supply chain disruption. | High | Infection controls, remote operations, absence tracking and priority services. | HR, health and safety, operations, communications, leadership. |
Industrial Action By Staff | Planned or sudden work stoppage reduces output and service availability. | Medium | Contingency rotas, stakeholder communications and lawful workforce planning. | HR, legal, operations, communications, leadership. |
Workplace Accident Or Fatality | Work may stop for emergency response, investigation and staff support. | High | First aid, incident reporting, investigation process and welfare support. | Health and safety, HR, legal, operations, communications. |
Regulatory | ||||
RIDDOR Reportable Incident | Reporting, investigation and enforcement action may disrupt operations. | High | RIDDOR process, evidence preservation, HSE liaison and management briefing. | Health and safety, legal, HR, operations, leadership. |
People | ||||
Safeguarding Incident | Urgent referrals, suspension decisions and service restrictions may be needed. | High | Safeguarding lead, referral route, DBS checks and incident records. | Safeguarding, HR, legal, operations, leadership. |
Regulatory | ||||
Employee Data Breach | HR operations disrupted by investigation, notifications and staff concerns. | High | Data breach procedure, access controls, ICO assessment and staff messaging. | HR, data protection, legal, IT, communications. |
Technology | ||||
Ransomware Attack | Systems and data may be encrypted, unavailable or exposed. | High | Offline backups, EDR, patching, incident playbook and restore tests. | IT, security, legal, data protection, communications, leadership. |
Phishing Compromise | Email accounts, payments or confidential data may be compromised. | High | MFA, user training, mail filtering and rapid account lockout. | IT, security, finance, legal, data protection. |
Business Email Compromise | Fraudulent payment instructions or supplier changes may cause financial loss. | High | Payment call-backs, MFA, finance controls and email monitoring. | Finance, IT, security, legal, procurement. |
Cloud Service Outage | Hosted applications, storage or collaboration tools become unavailable. | High | Supplier SLAs, offline access, backups and alternative communications. | IT, procurement, operations, customer service, leadership. |
Internet Connectivity Outage | Online systems, calls, payments and remote work may stop. | High | Dual ISPs, mobile failover, offline procedures and provider escalation. | IT, operations, customer service, facilities. |
Telephony Or VoIP Failure | Customers, suppliers and staff cannot contact key teams by phone. | Medium | Mobile diversion, web chat, status page and provider escalation. | IT, customer service, communications, operations. |
Core Application Failure | Critical workflow, orders, billing or case management cannot proceed. | High | RTOs, support contracts, rollback plan, backups and manual workarounds. | IT, operations, finance, customer service, supplier support. |
Data Centre Outage | Hosted systems, storage and network services may become unavailable. | High | Geographic resilience, backups, failover tests and supplier SLAs. | IT, security, procurement, operations, leadership. |
Payment System Failure | Card, bank or online payments cannot be processed or reconciled. | High | Alternative payment channels, cash procedures and reconciliation controls. | Finance, IT, customer service, operations, banking provider. |
Website Or E-Commerce Outage | Sales, bookings, customer self-service or lead generation stop. | High | Monitoring, CDN, rollback, hosting support and customer updates. | IT, marketing, sales, customer service, finance. |
Loss Of Backups | Systems cannot be restored after deletion, corruption or cyber attack. | High | 3-2-1 backups, immutable copies, restore tests and access separation. | IT, security, operations, leadership. |
Data Corruption | Records become unreliable, incomplete or unusable for decisions. | High | Validation checks, versioning, backups, audit logs and restore testing. | IT, data owners, finance, operations, compliance. |
Regulatory | ||||
Personal Data Breach | Investigation, containment, regulatory assessment and notifications disrupt work. | High | Breach log, ICO notification process, DPO escalation and templates. | Data protection, legal, IT, security, communications, leadership. |
Technology | ||||
IT Change Failure | Update or release causes outage, data issue or degraded performance. | Medium | Change control, testing, rollback plan and release communications. | IT, change board, operations, customer service. |
Laptop Or Device Theft | User loses access and confidential data may be exposed. | Medium | Encryption, MDM, remote wipe, spare devices and reporting process. | IT, security, data protection, HR, line manager. |
Supplier | ||||
Critical Supplier Insolvency | Essential goods, services, support or warranties may cease abruptly. | High | Supplier monitoring, step-in rights, alternatives and contract exit plan. | Procurement, legal, finance, operations, leadership. |
Outsourced Payroll Failure | Staff may not be paid correctly or on time. | High | Backup payroll data, secondary contact, manual pay process and approvals. | Payroll, HR, finance, supplier manager, communications. |
Logistics Provider Failure | Deliveries, returns, stock movements or customer fulfilment are delayed. | High | Alternative carriers, buffer stock, routing options and customer messaging. | Operations, procurement, customer service, sales, finance. |
Single Source Supplier Failure | Unique materials, services or licences become unavailable. | High | Dual sourcing, safety stock, specifications and contractual continuity duties. | Procurement, operations, legal, finance, quality. |
Supplier Cyber Incident | Supplier systems, data feeds or support services become unsafe or unavailable. | High | Security due diligence, incident clauses, alternatives and access isolation. | Procurement, IT, security, legal, data protection. |
Professional Adviser Unavailability | Legal, accounting, audit or compliance deadlines may be missed. | Medium | Deputy contacts, document access, engagement terms and backup advisers. | Legal, finance, company secretarial, procurement, leadership. |
Cleaning Or Waste Contractor Failure | Hygiene, waste accumulation or compliance issues affect site operation. | Medium | Alternative contractors, waste segregation and temporary cleaning arrangements. | Facilities, procurement, health and safety, operations. |
Utilities | ||||
Power Cut | Lighting, equipment, IT, refrigeration or production may stop. | High | UPS, generators, priority services registration and shutdown procedure. | Facilities, IT, operations, health and safety, customer service. |
Gas Supply Interruption | Heating, catering or process equipment may be unavailable. | Medium | Emergency contacts, alternative heating, shutdown plan and safety checks. | Facilities, health and safety, operations, catering. |
Water Supply Interruption | Welfare facilities, cleaning, production or catering may stop. | Medium | Bottled water, hygiene plan, supplier alerts and temporary toilets. | Facilities, health and safety, operations, HR. |
Telecoms Network Outage | Calls, broadband, alarms or card terminals may be unavailable. | High | Diverse networks, mobile failover, analogue lines and escalation contacts. | IT, facilities, security, customer service, operations. |
Fuel Shortage | Fleet, generators, deliveries and staff travel may be constrained. | Medium | Fuel monitoring, route prioritisation, supplier contracts and remote work. | Fleet, operations, procurement, facilities, finance. |
Lift Failure | Disabled access, goods movement or upper-floor operations are affected. | Low | Maintenance contract, evacuation aids, access adjustments and signage. | Facilities, health and safety, HR, operations. |
Transport | ||||
Rail Strike Or Major Rail Disruption | Staff, customers or visitors cannot travel reliably. | Medium | Remote work, flexible hours, travel alerts and meeting alternatives. | HR, operations, customer service, communications. |
Road Closure Or Congestion | Deliveries, field staff and commuting are delayed. | Medium | Route planning, driver alerts, buffer time and alternative depots. | Logistics, fleet, operations, customer service. |
Port Or Border Disruption | Imports, exports, customs clearance or stock availability are delayed. | High | Customs readiness, buffer stock, alternative routes and broker contacts. | Logistics, procurement, customs, finance, customer service. |
Airport Or Air Freight Disruption | Travel, urgent freight or international meetings are delayed. | Medium | Alternative carriers, virtual meetings, buffer stock and travel approvals. | Travel, logistics, procurement, operations, sales. |
Fleet Vehicle Breakdown | Deliveries, site visits or mobile services are delayed. | Low | Maintenance, breakdown cover, spare vehicles and route reassignment. | Fleet, operations, customer service, finance. |
Regulatory | ||||
Regulatory Inspection Or Enforcement Visit | Operations pause for inspection, evidence gathering and remedial actions. | Medium | Inspection protocol, records access, legal escalation and action tracking. | Compliance, legal, operations, health and safety, leadership. |
ICO Investigation | Information requests, remedial actions and stakeholder communications consume resources. | High | Records of processing, breach files, DPO lead and response timetable. | Data protection, legal, IT, communications, leadership. |
Companies House Filing Failure | Missed filings may cause penalties, strike-off risk or governance issues. | Medium | Filing calendar, deputy filer, authentication backup and adviser access. | Company secretarial, finance, legal, directors. |
HMRC Filing Or Payment Failure | Tax returns or payments are delayed, risking penalties and interest. | Medium | Tax calendar, agent access, payment backups and approval deputies. | Finance, tax, payroll, directors, advisers. |
FCA Operational Resilience Incident | Important business services may breach impact tolerances. | High | Map services, set tolerances, scenario test and regulator communications. | Compliance, risk, IT, operations, leadership, legal. |
Health And Safety Prohibition Notice | Specified work or equipment must stop until risks are addressed. | High | Risk assessments, remedial plan, HSE liaison and alternate capacity. | Health and safety, legal, operations, facilities, leadership. |
Loss Of Licence Or Permit | Regulated activities, premises use or trading may have to stop. | High | Renewal calendar, compliance checks, deputy owner and regulator contact. | Compliance, legal, operations, finance, leadership. |
Product Recall | Sales stop, stock is quarantined and customers require notification. | High | Traceability, recall plan, customer notices and regulator liaison. | Quality, legal, operations, customer service, communications. |
Food Safety Incident | Food sale or service may stop pending withdrawal, recall or cleaning. | High | HACCP, traceability, recall process and local authority liaison. | Food safety, operations, quality, legal, communications. |
Other | ||||
Customer Service Surge | Contact volumes exceed staffing, causing delays and complaints. | Medium | Overflow scripts, triage, temporary staff and self-service updates. | Customer service, operations, communications, IT, HR. |
Reputational Crisis | Customer confidence, staff morale and sales may fall rapidly. | High | Crisis communications plan, spokespersons, monitoring and approval routes. | Communications, legal, customer service, HR, leadership. |
Media Or Social Media Backlash | High enquiry volumes and negative coverage distract staff and management. | Medium | Monitoring, holding statements, escalation rules and moderation support. | Communications, marketing, legal, customer service, leadership. |
Major Customer Insolvency | Revenue, cash flow and planned workload may fall suddenly. | High | Credit monitoring, diversified revenue, payment controls and debt recovery. | Finance, sales, legal, operations, leadership. |
Cash Flow Shock | Payroll, supplier payments or investment plans may be constrained. | High | Cash forecasts, credit lines, payment prioritisation and board oversight. | Finance, procurement, payroll, directors, legal. |
Insurance Claim Dispute | Recovery funding may be delayed after loss or damage. | Medium | Policy review, evidence records, broker contacts and loss adjuster process. | Finance, legal, facilities, broker, leadership. |
Major Litigation Or Injunction | Management time, trading activity or product use may be restricted. | High | Legal response team, document hold, authority limits and communications. | Legal, leadership, finance, operations, communications. |
Civil Unrest Near Premises | Access, staff safety, deliveries or customer visits may be affected. | Medium | Security monitoring, remote work, site closure triggers and police liaison. | Security, facilities, HR, communications, operations. |
Terrorism Or Marauding Attack Threat | Lockdown, evacuation, casualty response and prolonged closure may occur. | High | Run Hide Tell awareness, lockdown plan and emergency communications. | Security, facilities, HR, leadership, emergency services. |
People | ||||
Death Of Director Or Partner | Authority, banking, contracts and leadership decisions may be delayed. | High | Succession plan, board authorities, key person cover and document access. | Directors, legal, finance, HR, company secretarial. |
Supplier | ||||
Loss Of Banking Access | Payments, receipts, payroll or treasury operations may stop. | High | Multiple approvers, backup bank contact, emergency limits and second account. | Finance, treasury, payroll, directors, legal. |
Loss Of Card Acquirer | Card settlement or authorisation may stop, reducing trading ability. | High | Secondary payment provider, cash procedures and customer notices. | Finance, IT, sales, customer service, procurement. |
Mail Or Courier Disruption | Contracts, stock, legal notices or customer deliveries are delayed. | Medium | Alternative couriers, electronic signatures, tracking and deadline buffers. | Operations, legal, procurement, customer service, sales. |
Premises | ||||
Records Archive Loss | Contracts, evidence, HR files or accounts records may be unavailable. | Medium | Digitisation, retention schedule, offsite archive controls and inventories. | Legal, finance, HR, operations, records management. |
Loss Of Specialist Equipment | Production, testing, clinical or technical services may stop. | High | Maintenance, spares, hire options, insurance and alternative capacity. | Operations, engineering, procurement, finance, quality. |
Stock Contamination Or Spoilage | Inventory becomes unusable, unsafe or unsellable. | High | Stock rotation, temperature monitoring, quarantine and supplier replenishment. | Operations, quality, procurement, finance, customer service. |
Technology | ||||
Warehouse Management System Failure | Picking, packing, dispatch and stock accuracy are disrupted. | High | Paper pick lists, stock snapshots, support SLA and restore plan. | Warehouse, IT, operations, customer service, finance. |
CRM Failure | Sales, customer support and account history become unavailable. | Medium | Exports, offline contact lists, vendor escalation and manual logging. | Sales, customer service, IT, marketing, operations. |
Accounting System Failure | Invoices, payments, credit control and reporting are delayed. | Medium | Data exports, manual invoice process, backups and supplier support. | Finance, IT, sales, procurement, leadership. |
HR System Failure | Absence, onboarding, payroll inputs and employee records are delayed. | Medium | HR reports, manual forms, payroll cut-off controls and vendor support. | HR, payroll, IT, line managers, finance. |
Email Service Outage | Internal and external communications are delayed or lost. | High | Alternative messaging, phone trees, status page and distribution lists. | IT, communications, operations, customer service, leadership. |
Collaboration Platform Outage | Meetings, chat, file sharing and remote teamwork are impaired. | Medium | Secondary platform, phone bridge, local files and meeting protocol. | IT, operations, HR, communications, leadership. |
Domain Name Or DNS Failure | Website, email or applications become unreachable. | High | Registrar security, DNS monitoring, MFA and secondary DNS. | IT, security, marketing, customer service, legal. |
DDoS Attack | Online services are degraded or unavailable to legitimate users. | High | DDoS protection, CDN, traffic monitoring and ISP escalation. | IT, security, hosting provider, customer service, communications. |
API Or Integration Failure | Orders, payments, data feeds or reporting do not synchronise. | Medium | Monitoring, retry queues, manual upload and supplier escalation. | IT, operations, finance, supplier support, customer service. |
Remote Access VPN Failure | Remote staff cannot access internal systems or files. | Medium | Scalable VPN, zero trust alternative, capacity tests and support rota. | IT, security, HR, operations, service desk. |
Active Directory Or Identity Outage | Users cannot authenticate to critical systems. | High | Resilient identity services, break-glass accounts and recovery runbooks. | IT, security, service desk, operations, leadership. |
Privilege Account Compromise | Attackers may control systems, data or security settings. | High | PAM, MFA, logging, least privilege and emergency credential rotation. | IT, security, legal, data protection, leadership. |
Malware Infection | Devices or servers become unreliable, unsafe or unusable. | High | Endpoint protection, patching, isolation process and rebuild images. | IT, security, service desk, operations, communications. |
Software Licence Expiry | Critical software may stop working or become unsupported. | Medium | Licence register, renewal alerts, procurement owner and alternatives. | IT, procurement, finance, legal, operations. |
Supplier | ||||
Key SaaS Vendor Account Suspension | Access to hosted tools is removed due to billing or compliance dispute. | High | Billing controls, admin redundancy, data exports and contract escalation. | IT, procurement, finance, legal, operations. |
Supplier Contract Termination | Services end before replacement arrangements are ready. | Medium | Notice tracking, exit plan, transition assistance and alternate supplier. | Procurement, legal, operations, finance, supplier manager. |
Raw Material Shortage | Manufacturing, repairs or customer orders are delayed. | High | Safety stock, forecast sharing, approved alternatives and dual sourcing. | Procurement, production, sales, quality, finance. |
Quality Failure By Supplier | Inputs fail inspection, causing rework, delays or unsafe output. | Medium | Incoming inspection, supplier audits, quarantine and alternative sources. | Quality, procurement, operations, legal, customer service. |
Utilities | ||||
Contaminated Water Or Legionella Risk | Facilities may close pending testing, treatment and risk controls. | High | Water risk assessment, monitoring, flushing and specialist contractor. | Facilities, health and safety, HR, operations, contractor. |
Drainage Or Sewage Failure | Hygiene risks and welfare issues may force partial closure. | Medium | Emergency plumber, temporary toilets, cleaning plan and exclusion zones. | Facilities, health and safety, operations, HR. |
Fire Alarm System Failure | Premises may be unsafe to occupy without temporary controls. | High | Fire watch, maintenance callout, evacuation briefing and occupancy limits. | Facilities, fire safety, security, operations, HR. |
Burglar Alarm Or CCTV Failure | Site security, evidence capture and insurance conditions may be affected. | Low | Guarding, repair SLA, manual patrols and insurer notification. | Security, facilities, IT, insurance, operations. |
Premises | ||||
Snow And Ice Access Hazard | Slip risks and unsafe access may reduce site availability. | Medium | Gritting, access inspections, remote work and visitor warnings. | Facilities, health and safety, HR, operations. |
People | ||||
Heatwave Workplace Risk | Heat stress, reduced productivity and welfare issues affect staff. | Medium | Ventilation, water, breaks, adjusted hours and vulnerable worker checks. | HR, health and safety, facilities, line managers. |
Remote Workforce Unavailability | Staff cannot work remotely due to home, device or connectivity issues. | Medium | Device pool, remote access tests, expenses policy and alternate tasks. | HR, IT, operations, line managers, finance. |
Skills Gap During Incident | Only few staff can perform essential recovery or operational tasks. | Medium | Cross-training, procedure notes, rota depth and contractor support. | HR, operations, training, department heads, procurement. |
Staff Welfare Or Mental Health Crisis | Absence, performance issues and management capacity pressures increase. | Medium | Stress risk assessment, EAP, workload triage and manager guidance. | HR, health and safety, line managers, occupational health. |
Regulatory | ||||
Whistleblowing Allegation | Investigation, confidentiality controls and management action consume resources. | Medium | Whistleblowing policy, independent investigator and anti-retaliation controls. | HR, legal, compliance, leadership, audit. |
Modern Slavery Supply Chain Issue | Supplier suspension, investigation and reputational risk disrupt sourcing. | High | Supplier due diligence, audit rights, alternative sourcing and board reporting. | Procurement, legal, compliance, communications, leadership. |
Sanctions Compliance Issue | Payments, contracts or customer relationships may need to be frozen. | High | Screening, escalation process, payment holds and legal review. | Compliance, legal, finance, sales, procurement. |
Anti-Money Laundering Control Failure | Onboarding, transactions or regulated services may be suspended. | High | CDD records, MLRO escalation, transaction monitoring and remediation plan. | Compliance, legal, finance, sales, leadership. |
Accessibility Failure In Digital Service | Users may be unable to access services, increasing complaints and fixes. | Medium | Accessibility testing, alternative channels and reasonable adjustment process. | Digital, legal, customer service, compliance, product. |
Environmental Incident | Spill, pollution or waste issue may require shutdown and reporting. | High | Spill kits, permits, contractor callout and Environment Agency liaison. | Environmental, health and safety, operations, legal, facilities. |
Other | ||||
Critical Document Signing Delay | Contracts, funding, filings or transactions cannot complete on time. | Medium | Signing authorities, e-signature platform, powers of attorney and deputies. | Legal, directors, finance, sales, company secretarial. |
Intellectual Property Dispute | Products, branding, software or content may need to change quickly. | Medium | IP register, legal review, takedown process and alternative assets. | Legal, marketing, product, IT, leadership. |
People | ||||
Fraud By Employee Or Contractor | Financial loss, investigation and control remediation disrupt normal work. | High | Segregation of duties, audit trails, whistleblowing route and access reviews. | Finance, HR, legal, IT, audit, leadership. |
Supplier | ||||
Supplier Fraud Or Impersonation | Payments may be diverted and supplier relationships disrupted. | High | Supplier change verification, dual approval and payment hold process. | Finance, procurement, legal, IT, supplier managers. |
Regulatory | ||||
Loss Of Audit Evidence | Accounts, compliance reviews or certifications may be delayed. | Medium | Document retention, audit trail backups and evidence owner register. | Finance, compliance, legal, IT, external auditors. |
Certification Loss | Tender eligibility, customer contracts or regulated processes may be affected. | Medium | Audit calendar, corrective actions, evidence library and certification owner. | Quality, compliance, operations, sales, leadership. |
Other | ||||
Major Project Failure | Budget, resources, customer commitments or strategic deadlines are affected. | Medium | Stage gates, escalation, contingency budget and project recovery plan. | PMO, finance, operations, legal, leadership. |
Major Event Cancellation | Revenue, bookings, staffing and supplier commitments are disrupted. | Medium | Cancellation terms, insurance, attendee messaging and alternative dates. | Events, finance, legal, suppliers, communications. |
People | ||||
Critical Meeting Or Board Quorum Failure | Approvals, filings, funding or emergency decisions are delayed. | Medium | Deputy attendees, written resolutions, calendar holds and authority matrix. | Directors, company secretarial, legal, finance, leadership. |
Premises | ||||
Evacuation Of Neighbouring Site | Cordons, road closures or utility shutoffs prevent site access. | Medium | Local alerts, remote work, site closure triggers and contact lists. | Facilities, security, operations, HR, communications. |
Nearby Fire Or Chemical Incident | Shelter, evacuation or road closures may interrupt operations. | High | Shelter-in-place plan, local alerts and emergency service liaison. | Facilities, health and safety, security, HR, leadership. |
Emergency Services Cordon | Premises become inaccessible despite no direct damage. | Medium | Remote work, alternate site, staff alerts and customer communications. | Facilities, security, operations, communications, leadership. |
Loss Of Laboratory Or Clinical Area | Testing, treatment, diagnostics or research work must stop. | High | Alternate lab, equipment validation, sample storage and safety procedures. | Operations, quality, health and safety, procurement, compliance. |
Loss Of Manufacturing Line | Production output falls or stops, affecting customer orders. | High | Maintenance, spare parts, alternate line, outsourcing and backlog plan. | Production, engineering, procurement, sales, finance. |
Utilities | ||||
Cold Chain Failure | Temperature-sensitive goods may become unsafe or unusable. | High | Temperature alarms, backup power, quarantine and disposal procedure. | Operations, quality, facilities, logistics, customer service. |
Supplier | ||||
Courier Temperature Control Failure | Temperature-sensitive deliveries may be rejected, spoiled or recalled. | High | Validated packaging, courier audits, trackers and alternative carriers. | Logistics, quality, procurement, customer service, compliance. |
Regulatory | ||||
Public Health Closure Direction | Premises or activities may be restricted by health authorities. | High | Authority liaison, remote work, infection controls and customer updates. | Health and safety, HR, legal, operations, communications. |
People | ||||
School Closure Affecting Staff | Parents and carers may be unavailable or need flexible working. | Medium | Flexible hours, remote work, cover rota and priority task allocation. | HR, line managers, operations, payroll. |
Regulatory | ||||
Immigration Or Right To Work Issue | Staff deployment, recruitment or sponsorship may be restricted. | Medium | Right to work checks, sponsor records, visa tracking and legal escalation. | HR, legal, recruitment, line managers, compliance. |
People | ||||
DBS Check Delay | New starters or regulated roles cannot begin work as planned. | Low | Early applications, conditional duties, rota cover and tracking. | HR, recruitment, safeguarding, operations, line managers. |
Training Or Certification Expiry | Staff may be unable to perform safety-critical or regulated tasks. | Medium | Training matrix, expiry alerts, refresher courses and deputy skills. | HR, training, operations, compliance, line managers. |
Transport | ||||
Local Authority Roadworks Disruption | Access for staff, customers or deliveries is delayed or restricted. | Low | Roadworks monitoring, delivery windows, access maps and visitor notices. | Facilities, logistics, customer service, operations. |
Public Transport Cancellation | Shift coverage, meetings and customer appointments may be affected. | Low | Flexible start times, remote attendance and staff travel alerts. | HR, operations, line managers, customer service. |
Haulage Driver Shortage | Inbound or outbound freight capacity is limited. | Medium | Carrier panel, booking lead times, load prioritisation and stock buffers. | Logistics, procurement, operations, customer service, sales. |
Vehicle Accident Involving Company Staff | Injury, investigation, insurance and service delays may follow. | High | Driving policy, incident reporting, telematics and replacement vehicles. | Fleet, HR, health and safety, legal, operations. |
Travel Abroad Emergency | Staff overseas may be stranded, injured or unable to work. | Medium | Travel risk assessment, insurance, itinerary tracking and consular advice. | HR, travel, security, line managers, leadership. |
Regulatory | ||||
Accounting Records Seizure Or Legal Hold | Records access is restricted for investigation or litigation. | Medium | Legal hold process, duplicate records, access controls and counsel contact. | Legal, finance, IT, compliance, leadership. |
Court Or Tribunal Deadline Surge | Evidence, witness and legal preparation diverts key staff. | Medium | Legal calendar, document management, witness cover and escalation routes. | Legal, HR, operations, finance, leadership. |
Other | ||||
Loss Of Public Funding Or Grant | Services, projects or staffing may need rapid reduction. | High | Funding diversification, reserves, scenario budgets and stakeholder plan. | Finance, leadership, HR, operations, fundraising. |
Regulatory | ||||
Charity Commission Serious Incident | Trustees must manage reporting, investigation and stakeholder confidence. | High | Serious incident policy, trustee escalation and evidence records. | Trustees, legal, finance, safeguarding, communications. |
CQC Service Disruption | Care services may need notification, restrictions or urgent staffing cover. | High | Notification process, safe staffing plan and service continuity records. | Registered manager, compliance, HR, operations, safeguarding. |
Ofsted Inspection Crisis | Education or childcare staff focus shifts to inspection response. | Medium | Inspection file, safeguarding evidence, staff briefing and action plan. | Leadership, safeguarding, HR, operations, communications. |
What Disruption Scenarios Should A UK Business Continuity Plan Cover?
A UK business continuity plan should not be limited to fire, flood or IT failure. The catalogue shows that credible disruption scenarios span premises, people, technology, suppliers, utilities, transport and regulatory events. Practical planning should therefore include alternative working locations, remote-working capacity, cyber incident response, supplier exit options, utility outage procedures and clear ownership by senior management.
Which UK Legal And Regulatory Duties Affect Business Continuity Planning?
Several scenarios have direct legal or regulatory consequences. Personal data incidents must be assessed under the UK GDPR and Data Protection Act 2018, with potential notification to the ICO within 72 hours where required. Workplace incidents may require reporting under RIDDOR, and health and safety controls remain relevant during severe weather, evacuation, lone working and emergency operations. Regulated sectors should also consider FCA, PRA, Ofcom, CQC or other sector rules where operational resilience duties apply.
How Should Organisations Prioritise Continuity Measures?
The highest-impact scenarios in the dataset commonly involve loss of technology, premises, people or critical suppliers. Useful priorities include:
- Document recovery time objectives for critical services, applications and processes.
- Maintain tested backups and cyber response playbooks for ransomware, cloud outage and data breach events.
- Map single points of failure in suppliers, utilities, transport routes and key personnel.
- Prepare communications templates for staff, customers, regulators, insurers and emergency services.
- Run exercises covering compound events such as cyber attack during staff absence or premises loss during transport disruption.
Why Should UK Plans Include Supplier And Infrastructure Scenarios?
Many UK organisations rely on outsourced payroll, hosting, logistics, payment processing, professional advisers and cloud platforms. Supplier failure, insolvency, industrial action, port disruption, energy interruption or telecoms outage can stop service delivery even where the organisation itself is unaffected. Contracts, service levels, escrow arrangements, alternative suppliers and manual workarounds should be reviewed before disruption occurs.

FAQs
You Might Also Be Interested In











