What Business Continuity Means for Buildings
Business continuity planning (BCP) for buildings is about ensuring that the physical facility — and the services it provides — can maintain critical operations during disruptions and recover quickly after them. The building is not just a workplace; it is infrastructure that operations depend on. When the building fails, the business stops.
In Bangladesh, disruption risks are higher than most markets: power grid instability, monsoon flooding, earthquake risk, political disruptions (hartals/strikes), and infrastructure limitations all create scenarios that buildings must be prepared for.
Applicable Standards
| Standard | Scope | Publisher |
|---|---|---|
| ISO 22301 | Business continuity management systems — requirements | ISO |
| NFPA 1600 | Standard on continuity, emergency, and crisis management | NFPA |
| ISO 31000 | Risk management — principles and guidelines | ISO |
| NFPA 110 | Emergency and standby power systems | NFPA |
Building BCP Elements
Power Resilience
| Parameter | Good Practice | Red Flag |
|---|---|---|
| Generator capacity | 100% of critical load + 20% margin | Partial coverage or undersized |
| Fuel autonomy | ≥ 24 hours (critical), ≥ 8 hours (commercial) | < 4 hours or unreliable fuel supply |
| ATS transfer time | ≤ 10 seconds (NFPA 110 Type 10) | Manual transfer or > 60 seconds |
| UPS for critical systems | 15–30 minutes bridge for IT, fire alarm, security | No UPS or batteries expired |
| Dual power feed | Two independent utility feeds for critical facilities | Single feed, no redundancy |
Water Resilience
- Water storage: minimum 2 days supply for building occupancy
- Backup water source (borehole) if municipal supply is unreliable
- Fire water reserve: dedicated, not shared with domestic supply
IT/Communications Resilience
- Dual internet service providers with diverse routes
- Dedicated comms room with cooling, UPS, access control
- Backup communication (satellite phone or cellular backup for critical staff)
Physical Resilience
- Flood protection: barriers, sump pumps, raised critical equipment
- Seismic adequacy: confirmed or risk-assessed with mitigation
- Wind resilience: envelope integrity for design wind speed
- Alternative workspace: identified and pre-agreed for relocation
BCP Metrics
| Metric | Definition | Typical Target |
|---|---|---|
| RTO (Recovery Time Objective) | Maximum acceptable downtime | 4–24 hours (office), 1–4 hours (critical operations) |
| RPO (Recovery Point Objective) | Maximum data loss acceptable | 0–4 hours (depends on backup frequency) |
| MTPD (Maximum Tolerable Period of Disruption) | Beyond this, business viability threatened | 1–7 days (most commercial operations) |
| Generator test frequency | How often generator is tested under load | Monthly (no-load), quarterly (full-load) |
| BCP drill frequency | How often BCP is exercised | Annually (full), semi-annually (tabletop) |
Bangladesh-Specific Disruption Risks
- Power grid failure — extended outages (4–12+ hours) during peak summer demand. Generator fuel supply chain disruption during hartals.
- Monsoon flooding — waterlogging in Dhaka can last 1–3 days. Basement and ground floor inundation.
- Cyclone — coastal facilities directly affected; Dhaka indirectly affected (supply chain, communications).
- Earthquake — no major event in living memory for Dhaka, but seismologists consider it overdue. BCP must include post-earthquake response.
- Political disruption — hartals and strikes can prevent staff access for 1–3 days. Plan for remote work capability.
- Pandemic — COVID-19 demonstrated the need for remote work infrastructure and reduced-occupancy building operation.
References & Sources
Insights & Guidance
- The building is infrastructure — when it fails, the business stops. BCP must address physical facility resilience.
- Power resilience: 100% generator with ATS ≤ 10s, ≥ 8 hours fuel, UPS for critical systems.
- RTO for office operations: typically 4–24 hours. Critical operations: 1–4 hours.
- Bangladesh-specific risks: power grid failure, monsoon flooding, earthquake, hartals, cyclone.
- Generator fuel supply chain is vulnerable during hartals — maintain minimum 24-hour reserve.
- BCP must be tested annually (full exercise) and semi-annually (tabletop).
A business continuity plan that doesn't address building infrastructure is incomplete. The most common BCP failures are physical: the generator runs out of fuel, the server room overheats because HVAC fails, floodwater enters the basement, or the building is inaccessible during a hartal. These are building management failures, not IT failures — and they must be addressed by FM and CRE teams.
- Extended power outage — generator fuel depleted; no cooling, no IT, no lifts, no security systems.
- Flood damage — basement data centre or electrical switchgear submerged. Weeks to recover.
- Earthquake damage — building structurally damaged; cannot reoccupy. No alternative workspace arranged.
- Communication failure — single ISP fails; no backup. Staff cannot work remotely.
- Staff access blocked — hartal prevents travel; no remote work infrastructure in place.
- Business Continuity Plan (BCP) document — current, tested, reviewed annually
- Business Impact Analysis (BIA) — identifying critical functions and RTO/RPO
- Generator fuel supply agreement with minimum reserve
- UPS battery test records
- Alternative workspace agreement or plan
- BCP exercise/drill records with improvement actions
- Insurance coverage review against identified risks
- Generator room — fuel level, condition, test log, ATS present.
- UPS — battery condition, load indicator, last test date.
- Server/comms room — dedicated cooling, access control, fire suppression, dual power feed.
- Basement — flood risk indicators, sump pump condition, critical equipment placement.
- Emergency supplies — torch, first aid, water stored for emergencies?
- Is there a documented BCP that addresses building infrastructure?
- What is the generator fuel autonomy? Is there a fuel supply agreement?
- What is the UPS capacity for critical systems? When were batteries last replaced?
- Is there an alternative workspace identified and pre-agreed?
- What is the flood risk for this building? What protection is in place?
- When was the BCP last tested? What were the findings?
- Is remote work infrastructure in place for hartal/pandemic scenarios?
- BCP development — ISO 22301 consultant for comprehensive BCP.
- Business Impact Analysis — BCP specialist to identify critical functions and dependencies.
- Flood risk assessment — hydraulic engineer for site-specific flood analysis.
- Power resilience design — electrical engineer for generator sizing, UPS, dual feed evaluation.