Business continuity plan, Hollin Cross Pharmacy

Business continuity plan template with recovery times

A business continuity plan has to say which work must keep going in a disruption, how fast each piece must come back, and exactly who does what in the first hour. This nine page plan for a community pharmacy does that with nine critical functions ranked by recovery time, six disruption scenarios, numbered recovery steps, a contacts table and a testing log.

Create a document with OneCraft9 A4 pages, editable, then download as a PDF

The document, page by page

Every page as it renders and as it prints, with nothing summarised. Read the wording before you reuse it.

Hollin Cross Pharmacy

Business continuity plan

How the pharmacy keeps dispensing, protects its medicines and gets back to normal after a power cut, a system outage, a lost building or a missing pharmacist.

Prepared by
Pharmacist in charge
Date
Reviewed 2 March 2026
Hollin Cross Pharmacy, business continuity plan. Keep a printed copy in the dispensary grab bag.Page 2 of 9
Hollin Cross Pharmacy, business continuity plan. Keep a printed copy in the dispensary grab bag.Page 3 of 9
Hollin Cross Pharmacy, business continuity plan. Keep a printed copy in the dispensary grab bag.Page 4 of 9
Hollin Cross Pharmacy, business continuity plan. Keep a printed copy in the dispensary grab bag.Page 5 of 9
Hollin Cross Pharmacy, business continuity plan. Keep a printed copy in the dispensary grab bag.Page 6 of 9
Hollin Cross Pharmacy, business continuity plan. Keep a printed copy in the dispensary grab bag.Page 7 of 9
Hollin Cross Pharmacy, business continuity plan. Keep a printed copy in the dispensary grab bag.Page 8 of 9
Hollin Cross Pharmacy, business continuity plan. Keep a printed copy in the dispensary grab bag.Page 9 of 9
1. Purpose and scope

This plan sets out how Hollin Cross Pharmacy keeps its most important work going during a disruption and recovers the rest in a planned order. It covers the dispensary, the vaccination room, the dose administration aid packing room and the front shop at 14 Cardew Street, and the 14 people who work there.

Patients depend on us for medicines they cannot go without: insulin, anticoagulants, epilepsy and heart medicines, and the weekly packs we prepare for 160 people living at home and in two care homes. A disruption that stops dispensing for a day can put someone in hospital. That is why the recovery times in section 3 are measured in hours, not days.

9
Critical functions
30 min
Fastest recovery time
14
Staff covered
4
Tests a year
When this plan is activated
Any outage of power, the dispensing system or the internet expected to last more than 30 minutes
A medicine fridge reading outside 2 to 8 °C that cannot be corrected within 15 minutes
Loss of access to the building for any reason, including fire, flood, police order or structural damage
No pharmacist available to open the dispensary at the start of a trading day
A cyber attack, ransomware message or suspected breach of patient records
A wholesaler failure or shortage that leaves a critical medicine unavailable for more than 24 hours

The pharmacist on duty decides whether to activate the plan and then leads the response until the pharmacist in charge or the owner takes over. When in doubt, activate: standing the plan down costs nothing.

2. Continuity team

Each role has a named deputy, so the plan never depends on one person being reachable.

Role
Lead
Deputy
Responsible for
Response lead
Mira Talbot, pharmacist in charge
Owen Achebe, pharmacist
Activating the plan, every decision on dispensing
Medicines and cold chain
Owen Achebe
Priya Sandhu, pharmacist
Fridges, controlled drugs, stock moves
Systems and records
Lena Kowal, dispensary technician
Mira Talbot
Dispensing system, backups, manual records
Patients and prescribers
Hannah Royce, dose aid coordinator
Tomas Reyes, technician
Calling patients, care homes and surgeries
Premises and suppliers
Gareth Hollin, owner
Mira Talbot
Landlord, insurer, wholesaler, contractors
3. Critical functions and recovery times

The table ranks every function by how long the pharmacy can be without it before patients are harmed or the business cannot recover. The maximum tolerable outage is the point of real harm; the recovery time objective is the earlier point by which the function must be running again, even in a reduced form.

No.
Function
Max outage
Recovery time
Minimum to run it
1
Medicine fridges held at 2 to 8 °C
2 hours
30 minutes
Backup fridge or validated cool boxes, data logger
2
Controlled drugs kept secure and recorded
None
Immediate
Locked safe, paper register
3
Dispensing urgent prescriptions
8 hours
4 hours
One pharmacist, labels, paper dispensing log
4
Patient medication records
8 hours
4 hours
Read access to the cloud backup on any laptop
5
Dose administration aid packs
72 hours
48 hours
Packing room or partner site, last week's pack sheets
6
Medicine supply from the wholesaler
48 hours
24 hours
Second wholesaler account, phone ordering
7
Taking payment
24 hours
8 hours
Mobile card reader, cash float, invoice book
8
Vaccination clinic
10 days
5 days
Vaccine stock, consulting room, booking list
9
Front shop retail
14 days
7 days
Shop floor, payment
No.
Function
Max outage
Recovery time
Minimum to run it
1
Medicine fridges held at 2 to 8 °C
2 hours
30 minutes
Backup fridge or validated cool boxes, data logger
2
Controlled drugs kept secure and recorded
None
Immediate
Locked safe, paper register
3
Dispensing urgent prescriptions
8 hours
4 hours
One pharmacist, labels, paper dispensing log
4
Patient medication records
8 hours
4 hours
Read access to the cloud backup on any laptop
5
Dose administration aid packs
72 hours
48 hours
Packing room or partner site, last week's pack sheets
6
Medicine supply from the wholesaler
48 hours
24 hours
Second wholesaler account, phone ordering
7
Taking payment
24 hours
8 hours
Mobile card reader, cash float, invoice book
8
Vaccination clinic
10 days
5 days
Vaccine stock, consulting room, booking list
9
Front shop retail
14 days
7 days
Shop floor, payment
No.
Function
Max outage
Recovery time
Minimum to run it
1
Medicine fridges held at 2 to 8 °C
2 hours
30 minutes
Backup fridge or validated cool boxes, data logger
2
Controlled drugs kept secure and recorded
None
Immediate
Locked safe, paper register
3
Dispensing urgent prescriptions
8 hours
4 hours
One pharmacist, labels, paper dispensing log
4
Patient medication records
8 hours
4 hours
Read access to the cloud backup on any laptop
5
Dose administration aid packs
72 hours
48 hours
Packing room or partner site, last week's pack sheets
6
Medicine supply from the wholesaler
48 hours
24 hours
Second wholesaler account, phone ordering
7
Taking payment
24 hours
8 hours
Mobile card reader, cash float, invoice book
8
Vaccination clinic
10 days
5 days
Vaccine stock, consulting room, booking list
9
Front shop retail
14 days
7 days
Shop floor, payment
No pharmacist, no dispensing
Functions 2 to 5 and 8 need a pharmacist on site. If none is available the dispensary stays closed, the front shop may trade, and the patients and prescribers lead redirects urgent prescriptions under section 6.4.
4. Disruption scenarios

Six scenarios cover almost every disruption the pharmacy has seen or can foresee. Each one names the functions it hits first and where its recovery steps are.

Scenario
Likelihood
Functions hit
First response
Steps
Power cut
Likely
1, 3, 4, 7
Keep fridges shut, start the logger watch, switch to manual dispensing
6.1
Dispensing system or internet outage, including a cyber attack
Likely
3, 4, 5
Disconnect affected machines, open the paper dispensing log
6.2
Fridge failure
Possible
1, 8
Move stock to the backup fridge within 30 minutes
6.3
No pharmacist available
Possible
2 to 5, 8
Call the locum list, redirect urgent prescriptions
6.4
Building lost to fire, flood or damage
Unlikely
All
Evacuate, secure controlled drugs, move to the partner site
6.5
Wholesaler failure or medicine shortage
Possible
3, 5, 6
Order from the second wholesaler, contact prescribers about alternatives
6.6
5. The first hour

Whatever the scenario, the first hour follows the same pattern, so staff do not need to read the whole plan before acting.

0 to 15 minutes, make safe
People safe first. Fridges closed, controlled drugs safe locked, dispensing paused until the pharmacist confirms how it continues.
15 to 30 minutes, assess
The response lead decides which scenario applies, how long it may last and whether to activate the plan.
30 to 45 minutes, tell people
Team leads called, a sign on the door and the phone message updated, the owner told.
45 to 60 minutes, start recovery
The steps for the scenario in section 6 begin, and the incident log is opened with the time of each decision.
6. Recovery steps
6.1 Power cut
1.
Keep both medicine fridges closed. A closed fridge holds 2 to 8 °C for about 2 hours.
2.
Check the data logger every 15 minutes and write the reading in the cold chain log.
3.
If power is not back within 90 minutes, pack vaccines and insulin into the two validated cool boxes with conditioned ice packs and move them to the partner site.
4.
Dispense urgent prescriptions by hand: handwritten labels from the grab bag, each item recorded in the paper dispensing log.
5.
Take payment on the mobile card reader, or record an account to settle later.
6.
When power returns, check fridge temperatures for 30 minutes before returning stock, and enter every paper record into the dispensing system the same day.
6.2 Dispensing system or internet outage
1.
If a ransom message or unusual behaviour appears, unplug the affected computer from the network at once and do not switch it off.
2.
Call the dispensing system support line and log the call number.
3.
Open the paper dispensing log and use the patient summaries printed each Friday to check current medicines.
4.
For anything not on the printed summary, read the patient's record from the cloud backup on the manager's laptop over the phone hotspot.
5.
Restrict dispensing to urgent prescriptions until the system is back; ask non urgent patients to return.
6.
After recovery, enter every paper record, check for duplicates, and record what happened in the incident log.
1.
If a ransom message or unusual behaviour appears, unplug the affected computer from the network at once and do not switch it off.
2.
Call the dispensing system support line and log the call number.
3.
Open the paper dispensing log and use the patient summaries printed each Friday to check current medicines.
4.
For anything not on the printed summary, read the patient's record from the cloud backup on the manager's laptop over the phone hotspot.
5.
Restrict dispensing to urgent prescriptions until the system is back; ask non urgent patients to return.
6.
After recovery, enter every paper record, check for duplicates, and record what happened in the incident log.
1.
If a ransom message or unusual behaviour appears, unplug the affected computer from the network at once and do not switch it off.
2.
Call the dispensing system support line and log the call number.
3.
Open the paper dispensing log and use the patient summaries printed each Friday to check current medicines.
4.
For anything not on the printed summary, read the patient's record from the cloud backup on the manager's laptop over the phone hotspot.
5.
Restrict dispensing to urgent prescriptions until the system is back; ask non urgent patients to return.
6.
After recovery, enter every paper record, check for duplicates, and record what happened in the incident log.
6.3 Fridge failure
1.
Move all stock to the backup fridge within 30 minutes, vaccines first.
2.
Quarantine any stock that went above 8 °C or below 2 °C, label it "do not use" and record the time and temperature.
3.
Ask the manufacturer or supplier whether quarantined stock can still be used. Discard only on their advice.
4.
Book the refrigeration contractor for a same day callout.
6.4 No pharmacist available
1.
Call the three relief pharmacists on the locum list in order, then the locum agency.
2.
Until a pharmacist arrives, keep the dispensary closed and the controlled drug safe locked.
3.
Put the redirect sign on the door naming the partner pharmacy, and tell callers the same.
4.
Ring the two care homes if packs due that day will be late.
6.5 Building lost
1.
Evacuate. Take the grab bag and, only if it is safe, the controlled drug register.
2.
Tell the partner pharmacy, Ellbrook Lane Pharmacy, that the agreement in section 8 is now active.
3.
Notify the pharmacy regulator and the insurer the same day.
4.
Restore patient records to a laptop at the partner site from the cloud backup.
5.
Call every dose aid patient and both care homes with the new pick up point, then the local prescribers.
6.6 Wholesaler failure or shortage
1.
Order from the second wholesaler account. Both accounts are kept active with at least one order a month.
2.
For a medicine short at both, check stock at the partner pharmacy and the two nearest pharmacies.
3.
If still short, contact the prescriber about an alternative before the patient's supply runs out.
7. Contacts

Staff mobile numbers are on the printed staff list in the grab bag, not in this plan. The contacts below are the outside parties the team needs.

Contact
Why we call
Number
Ellbrook Lane Pharmacy
Partner site for stock, packing and dispensing
555 0142
Dispensing system support
Outage, cyber incident, data restore
555 0198, 24 hours
Refrigeration contractor
Fridge failure, same day callout
555 0167
Wholesaler, main account
Orders and shortages
555 0110
Wholesaler, second account
Orders when the main account fails
555 0133
Locum agency
Relief pharmacist
555 0175
Electricity network
Fault and restoration time
555 0101
Landlord
Building damage, access
555 0156
Insurer, claims line
Damage, stock loss, business interruption
555 0189
Pharmacy regulator
Closure or relocation notice
See the regulator's website
8. Resources and backups
Resource
What is kept ready
Partner site
A written agreement with Ellbrook Lane Pharmacy, 3 km away, for fridge space, a packing bench and dispensing time.
Cold chain kit
A backup fridge on a separate circuit, two validated cool boxes, 24 ice packs and three data loggers.
Data backup
The dispensing system backs up to the cloud every hour. A restore is tested each quarter.
Grab bag
Labels, the paper dispensing log, Friday patient summaries, the staff list and this plan, kept by the dispensary door.
Payments
A mobile card reader on its own data plan and a cash float in small notes and coins.
Insurance
Cover for premises, stock, cold chain loss and 12 months of business interruption, checked each March.
9. Testing and review

A plan that has never been tried will fail at the first step nobody thought about. Each test below is run by the named lead, and what went wrong is fixed within a month.

Test
How
How often
Last done
Next due
Restore patient records from backup
Restore to a spare laptop and check five records
Quarterly
9 Feb 2026
11 May 2026
Cold chain move
Pack the cool boxes and log temperatures for 2 hours
Twice a year
16 Mar 2026
14 Sep 2026
Manual dispensing drill
One hour of dispensing on paper with the system off
Twice a year
16 Mar 2026
14 Sep 2026
Contact list check
Call every number in section 7
Twice a year
2 Mar 2026
7 Sep 2026
Full scenario exercise
Walk through the building loss scenario with the team
Once a year
3 Nov 2025
2 Nov 2026
Test log, last four tests
Date
Test
Result and fix
16 Mar 2026
Cold chain move
Held 3.1 to 6.4 °C for 2 hours. Two ice packs were not conditioned; added to the checklist.
16 Mar 2026
Manual dispensing drill
11 items dispensed in an hour. Label stock ran low; grab bag now holds 200.
9 Feb 2026
Backup restore
Restored in 40 minutes, five records matched.
3 Nov 2025
Building loss exercise
Partner site had no spare data logger; one now kept there.

The pharmacist in charge reviews this plan every March, after any activation, and whenever staff, suppliers or premises change. The next review is due on 1 March 2027.

Section by section

What each section is for, so you can keep the ones you need and drop the rest.

Cover
Panel cover with the pharmacy, the plan and its review date.
1. Purpose and scope
What is covered, why hours matter, and six triggers that activate the plan.
2. Continuity team
Five roles, each with a lead, a deputy and responsibilities.
3. Critical functions
Nine functions with maximum outage, recovery time and minimum resources.
4 and 5. Scenarios and the first hour
Six scenarios with first response, and a four step first hour timeline.
6. Recovery steps
Numbered steps for each of the six scenarios.
7 to 9. Contacts, resources and testing
Outside contacts, backups and kit, a test schedule and the test log.

How to adapt this document

First, list your own critical functions by asking what would hurt a customer or the business first if it stopped, and set each recovery time from that harm rather than from what feels achievable. Second, keep the scenarios to the five or six that really threaten you; a cafe would swap cold chain and pharmacist cover for refrigeration and a chef. Third, name a deputy for every role and test the plan within a month of writing it, because the first test always finds a missing number or an empty grab bag.

What makes this document work

Recovery times come from patient harm

The critical functions table separates the maximum tolerable outage from the recovery time objective. Medicine fridges can last 2 hours closed, so they must be recovered within 30 minutes; urgent dispensing can wait 8 hours, so its target is 4. The ranking tells staff what to save first without a meeting.

The first hour needs no reading

Section 5 gives one pattern for every scenario: make safe in 15 minutes, assess, tell people, then start the scenario steps. Staff act on four lines before they open the detailed steps in section 6, which is how a plan survives a real power cut at 5 pm on a Friday.

Tests produce fixes, not ticks

The test log records what went wrong as well as the result: two ice packs not conditioned, label stock too low for an hour of manual dispensing, no spare data logger at the partner site. Each finding changed the plan, and every test has a last done and next due date.

Questions people ask

What is the difference between RTO and maximum tolerable outage?

The maximum tolerable outage is how long a function can be down before the harm becomes unacceptable or the business cannot recover. The recovery time objective is the earlier target by which it must be running again, even in reduced form. Setting the target well inside the limit leaves room for things to go wrong during recovery.

Is a business continuity plan the same as a disaster recovery plan?

No. A continuity plan keeps the whole business serving its customers during a disruption, using workarounds such as paper records and a partner site. A disaster recovery plan restores IT systems and data. Most businesses need both, and the continuity plan usually calls the recovery plan when systems fail, as this pharmacy plan does for its dispensing system.

How many scenarios should a continuity plan cover?

Enough to cover the ways you can lose people, premises, systems, power and suppliers, which often comes to five to eight. Writing one plan per possible event becomes unreadable. This plan uses six scenarios and a common first hour, so an unexpected event can still be handled by choosing the closest scenario.

Where should the business continuity plan be kept?

Somewhere that survives the disruption it is for. A plan stored only on the server that has failed, or in the building that has flooded, is no use. Keep printed copies in a grab bag and off site, and a digital copy in cloud storage the team can reach from a phone. The footer of this plan reminds staff of that.

How often should a continuity plan be tested?

Test the parts that change most often more often. Contact numbers and backup restores are worth checking every quarter or half year; a full walk through of a major scenario once a year is common. Test after any big change too, such as new premises or a new system, and record what failed and how it was fixed.

Build your own in about a minute

The button below opens the generator with this use case already described. Change the wording to match your own, generate, then edit anything you like.

Make one like this

Other document examples

Want the steps in the builder? Read Create a document with AI, then Add a cover page to your document. For everything this generator can do, see the document maker.

Sources

Written and checked by the OneCraft team. Last checked .