业务恢复流程包含四个关键元素。

请根据业务影响分析中已确定的重要商业活动考虑这些因素：

The business recovery process has four key elements. Consider these against your businesses critical business activities as identified in the business impact analysis:

1. 制定策略：制定策略：针对业务影响分析中确定的每项重要商业活动，请考虑在应对各种可能事件时，您将采取哪些策略或措施，以便在最短时间内恢复这些商业活动。

2. 确定资源：针对每项策略，确定企业恢复运营所需的资源。

1. Developing strategies: For each critical business activity, identified in your business impact analysis, consider now what your strategies, or actions, will be to recover the activities from a range of possible incidents in the quickest possible timeframe.

2. Identifying Resources: For each strategy, determine what resources your business will require to recover operations.

3. 恢复时间目标(RTO)：RTO是指在商业损失发生前预计需要的恢复时间，这一点在业务活动回顾中已确定。

4. 负责人：指定负责每项行动或活动的员工，这可以是个人或团队。列出每项任务的负责人和预计完成日期，并确保负责相关工作人员了解自己的责任。

3. Recovery Time Objective (RTO): The RTO is the forecasted period to recover before business losses occur, this was identified in the business activity review.

4. Responsible People: Which staff member/s will be responsible for each action or activity. This could be an individual or a team. List those who have responsibility for each task and the expected completion date. Ensure that responsible staff members understand what is expected of them.

与疏散和应急计划不同，您可以选择将责任指派给某个角色，而不是指定特定工作人员。

如此一来，当员工离职或新员工加入企业时，恢复计划仍然持续有效，无需进行更新。

Unlike the evacuation and emergency plans, you may choose to assign responsibility to a role rather than a named staff member. This way the recovery plan remains valid and doesn't require updating when staff members leave or begin working in your business.

恢复计划

恢复是指回到紧急情况发生前的状态。在重大事件发生后，您的首要任务是尽快恢复重要商业活动。建议您在制定恢复计划时，针对「最恶劣」情况进行准备。之后再根据实际的商业损失程度对计划进行调整。

在许多情况下，恢复计划都是必要的，且计划可根据事件的不同而有所变化。

Recovery Plan

Recovery is the return to your pre-emergency condition. Performing your critical activities as soon as possible after a critical incident is your primary focus. It is recommended you complete your Business Recovery Plan with the intention of supporting the recovery in ‘worst case’ scenarios. Your plan can then be modified according to the degree of loss to your business. There are many instances where a recovery plan will be necessary. The plan can vary depending on the incident.

想了解为什么恢复计划如此重要吗？👉请访问昆士兰商业局的 Disaster HubLinks to an external site. 网站（英文），查看可能发生的事件。(以下链接为英文资源）

Wondering why you need a recovery plan? 👉 Check out these possible incidents on the Business Queensland Disaster HubLinks to an external site. website.

自然灾难 Natural disasters

重大健康事件 Major health events

重大健康事件：如大流行病、传染病、局部疫情爆发、食物中毒和污染。

Major health events: Such as pandemics, epidemics, localised outbreaks, food poisoning and contamination

紧急情况 Emergency

紧急情况：生物安全威胁（如虫害和动物疾病爆发）、工作场所事故或死亡、危险物质洩漏或爆炸、电力或基础设施中断、重大交通灾害、恐怖事件或重大犯罪事件、气候变化风险。

Emergency: Such as biosecurity threats (pest and animal disease outbreaks), workplace accidents or deaths, dangerous material spills, leaks, or explosions, loss of power or infrastructure, major transport disasters, terrorist or major criminal incidents, climate change risks

信息安全(IT)威胁 Information technology (IT) threat

资讯技术(IT)威胁：如网络攻击、数据入侵或IT系统故障。

Information technology (IT) threat: Such as cyber-attack or data hacking, and IT failure

声誉事件 Reputation incident

声誉事件：如高度负面的媒体或社交媒体报导、谣言引发的危机、不当工作场所行为（如欺凌、骚扰）、组织不当行为和法律诉讼（如欺诈、盗窃）。

Reputation incident: Such as highly negative media or social media coverage, rumour-driven crisis, inappropriate workplace behaviour (e.g. bullying, harassment), organisational misdeeds and legal action (e.g. fraud, theft)

请填写《商业连续性计划书》第五部分中的「恢复计划」表格。

Complete the Recovery Plan table in Section 5 of your Business Continuity Plan.

填写恢复计划的提示

这部份着重于恢复，而非风险缓解，两者有所区别。恢复是指事件发生后的应对行动，而风险缓解则是在事件发生前的预防措施或降低影响的策略。请考虑在事件发生后需要立即采取哪些行动，以尽快恢复运营。

从恢复计划中获得的经验教训可以为下一版本的风险缓解计划提供重要参考。

Tip to complete the Recovery Plan

This part focuses on your recovery, rather than risk mitigation. There is a difference. Recovery is about responding after an incident, whereas risk mitigation is about preventing or minimising the impact of incidents before they occur. Consider what you will need to do immediately after an incident to restore operations as quickly as possible.

The learning from your recovery plan can then inform the next version of your risk mitigation plan.

《商业连续性计划书》范本中提供了以下示例。请注意，此练习旨在帮助您从事件（例如：暴风雨造成的停电和水灾）中恢复，该事件对您的一项或多项重要商业活动造成了直接影响（例如：生产流程停止）。恢复行动（例如：与供应商协商）和所需资源（例如：寻找并确保临时生产设施）将帮助您和您的组织缩短事件后的恢复时间。

The following example is provided in the Business Continuity Plan template. Be mindful that this exercise is to assist your recovery from an incident (i.e., loss of power and water damage caused by a storm) that has had a direct impact to one or more of your critical business activities (i.e., halted production processes). The recovery action (i.e., negotiate with suppliers) and the required resources (i.e., source and secure a temporary production facility) will enable you and your organisation to reduce the recovery time following the incident.

恢复计划示例：

重要商业活动	预防/恢复措施	所需资源/预期成果	恢复时间目标	负责人	完成
生产服务：停止	重新评估企业的财务状况，包括因收入减少而产生的现金流情况，以确保能够支付最低运营成本降低营运开支：审查开支并制定行动计划，以减少固定和可变开支，包括减少临时员工和正式员工的工时与供应商协商，防止材料积压，降低成本寻找替代生产地点使产品范围与服务多样化（如维修和翻新）	预留现金储备以支付成本尽可能降低成本研究新产品和服务确定替代生产地点	两周	企业主/经营者	__/__/__

Recovery Plan Example:

Critical business activity	Preventative/Recovery actions	Resource requirements/ outcomes	RTO	Responsibility	Completed
Production services - halted	re-assess financial position of business including cash flows due to loss of revenue to meet minimal overheads minimise overheads – review expenses and develop plan of action to reduce fixed and variable overheads include reduction of casual and permanent staff hours negotiate with suppliers to prevent build-up of materials and reduce costs source alternative production site diversify product range and services offered (e.g. repairs and restoration).	put aside cash reserves to cover costs reduce costs where able research new products and services identify alternative production site	2 weeks	Business owner / operator	__/__/__

此外，请考虑在恢复过程中可能需要联络哪些人提供帮助。请在《商业连续性计划书》第五部份的「恢复联络人名单」中填写这些详细资讯。

Also think about who you may need to contact to assist in the recovery process. Complete these details in the Recovery Contacts table in Section 5 of your Business Continuity Plan.