← Back to NOVRISK.
06 — Business continuity

Thinking beyond the emergency.

Managing a crisis is only one step: the real question is how the organization keeps functioning during it — and afterward.

What we hand over
Our support

PCA, PRA, PCI, PRI: four documents, one partner.

Four acronyms, four distinct workstreams. We make them tactical and operational, from drafting through to implementation.

PCA

Business Continuity Plan

How the organization keeps producing when part of its resources is unavailable.

  • 1 Assessment of your critical activities and breaking points
  • 2 Drafting quick-reference sheets and decision chains
  • 3 Testing in a live exercise, then updating
PRA

Activity Recovery Plan

The return to normal operation after a major disruption.

  • 1 Defining recovery timelines and priorities
  • 2 Drafting the plan and recovery procedures
  • 3 Recovery simulation with your teams
PCI

IT Continuity Plan

How your digital tools and data remain accessible in the event of an incident.

  • 1 Mapping critical systems and data
  • 2 Drafting the plan with your technical teams
  • 3 Deployment and continuity testing
PRI

IT Disaster Recovery Plan

Restoring your IT infrastructure after a disaster.

  • 1 Recovery time (RTO) and data loss (RPO) targets
  • 2 Drafting the restoration procedure
  • 3 Failover testing under real conditions

What stops an organisation rarely comes from inside it. A single supplier, a production site abroad, a power cut, an IT provider: continuity turns first on dependencies nobody chose.

We map them with you, then look at which ones can be doubled, brought back closer, or covered by a mutual-aid agreement with another organisation.

Let's talk about your situation
Our approach

Operational plans, usable on the day.

A continuity plan only has value if your teams can use it under pressure, without having to re-read it. We build tactical response plans with you — step by step, role by role — designed to be activated the day they actually matter, then proven during your COMPACTRAIN® sessions so you can be sure they hold up the day you need them.

Tactical sheet Step 3/6
Role: IT Lead

Switch servers over to the backup site.

  • Alert the crisis unit
  • Cut off compromised access
  • Activate the backup site
  • Confirm the switch to teams
⏱ Target time: 15 min Tested in a COMPACTRAIN® session
44%

Of European businesses actually test their continuity plan — the rest find out its gaps during the crisis. Source: Proton, 2026 European survey

54%

Of businesses couldn't operate for more than a single day without access to their digital tools before having to shut down. Source: Proton, 2026 European survey

In practice

What you walk away with.

At the end of our engagement, you walk away with field-ready documents, written to be followed step by step, with nothing left to interpret.

Sheet 01/04

Business Impact Analysis (BIA)

Every activity quantified: criticality, breaking point, RTO and RPO — documented, not estimated.

Sheet 02/04

Fallback plan

Alternate site, remote work, IT failover: the procedure, written in advance, ready to trigger.

Sheet 03/04

Activity mapping

Your essential activities mapped, with breaking points flagged by priority.

Sheet 04/04

Testing calendar

An annual testing calendar, to keep the plan operational.