Service Line · 02 / 07 · Program · Retainer
Business Continuity Planning
A plan that hasn't been exercised is a wish list. Our BCP work is grounded in real scenario design and tabletop facilitation — by an Army veteran and CBCP who has built and operated enterprise resilience programs inside Fortune-scale organizations.
— The difference
Most business continuity plans are written by consultants who have never had to activate one. Ours are designed by someone who has operated in environments where the continuity plan was the difference between mission success and mission failure.
— Overview
Business continuity is a board-level concern that most mid-market organizations address with a 40-page document that hasn't been opened since the week it was finalized. When an actual disruption occurs — a ransomware event, a facility loss, a key-person absence, a supply chain failure — the gap between what the plan says and what the organization can actually execute is exposed immediately.
Our approach starts with a Business Impact Analysis that identifies what your organization actually cannot afford to lose and for how long. Recovery priorities are set based on that analysis, not based on what feels important in a conference room. The plans we write are operational documents — short, clear, and designed to be used under pressure, not filed in a drawer.
Tabletop exercises are the most underutilized tool in continuity planning and the most valuable. A well-designed scenario exposes gaps in three hours that a document review would miss entirely. Our tabletop facilitation is led by a principal with experience managing actual crises — not a consultant reading from a scenario script.
— How we work
The engagement from first call to final deliverable.
Four phases · scoped individually to the client
- — 01
BCP Assessment
We evaluate your existing BCP posture against DRI Professional Practices and industry standards. For organizations with an existing plan, we assess completeness, currency, and testability. For organizations starting from scratch, we scope the full development engagement. Delivered as a written assessment with prioritized recommendations.
- — 02
Business Impact Analysis
Through structured interviews with department heads and process owners, we identify your critical functions, systems, and dependencies — and establish the recovery time and recovery point objectives that drive the plan design. This is the foundation that makes the difference between a generic plan and one that actually reflects your organization.
- — 03
Plan Development
We write the BCP and DR playbooks based on the BIA findings — operational procedures, contact trees, decision frameworks, and scenario-specific annexes. Plans are tested for usability: if a team member who wasn't in the planning sessions can't execute a plan section under pressure, it needs to be rewritten.
- — 04
Tabletop Exercise
We design and facilitate a scenario-based exercise that tests the plan, the communication protocols, and the decision-making of your leadership team. The after-action review identifies what worked, what didn't, and produces an update roadmap for the plan. This is the step most organizations skip and the one that matters most.
— Investment
Transparent pricing. Scope drives the number.
Ranges shown reflect single-location mid-market engagements. Multi-site, complex, or urgent engagements are scoped individually. A thirty-minute consultation is the fastest path to a written proposal.
BCP Assessment
Existing plan review or from-scratch scoping; written findings report
$4,500 – $9,000
BCP Development (BIA + Plan)
Scope depends on organizational complexity and number of critical functions
$12,000 – $35,000
Tabletop Exercise
Half or full day; includes scenario design and written after-action review
$4,500 – $9,000
Annual Program Retainer
Annual review, exercise facilitation, regulatory monitoring, on-call consultation
$2,000 – $4,000 / month
— Common questions
What clients ask before they engage.
What is CBCP certification and why does it matter?
CBCP stands for Certified Business Continuity Professional, awarded by DRI International — the recognized global standard for business continuity expertise. When you engage Kestralis Group for BCP work, the engagement is led by a CBCP-credentialed principal. That credential signals to your board, your insurer, and any third party reviewing your program that the work was done to a recognized professional standard.
Our insurer is asking for a BCP. Where do we start?
Start with our BCP Assessment. It will tell you what your insurer is most likely to ask for, what you already have, and what gaps need to close before you respond to their questionnaire. Most insurer requests can be addressed with a well-structured 30-60 day development engagement.
How long does a full BCP engagement take?
For a mid-market organization with straightforward operations, plan development from BIA through completed documentation typically runs 60 to 90 days. More complex organizations with multiple sites or regulated functions may require longer. The tabletop exercise is typically scheduled 30 days after plan delivery.
Do we need separate plans for IT disaster recovery and business continuity?
Usually yes. Business continuity covers the whole organization — people, processes, facilities, and vendors. IT disaster recovery is a technical annex within the BCP. We can develop both, and we coordinate closely with your IT leadership to ensure the technical recovery objectives are consistent with the business recovery objectives.
— Related capability
Often engaged alongside business continuity planning.
— Engage
Let's talk about scope.
Pricing and timeline vary with the size of your organization, the maturity of the existing program, and the outcome you're engineering toward. A thirty-minute consultation is usually the fastest way to a written proposal.