A survey of 240 business professionals found that over half felt their organization understood business risks and had continuity plans. Larger companies were more prepared, while over half of small businesses were unsure or unprepared. The poll also found that most respondents correctly identified emergency response, crisis management, and disaster recovery plans as critical to business continuity planning. The study provides insight into awareness and preparedness levels across organizations of different sizes.

1. Business Continuity Poll:
Understanding Risks
Andrew M. Amalfitano
October 7, 2009
Contents
Abstract ..................................................................................................................................................................... 2
Introduction ............................................................................................................................................................ 2
Results ....................................................................................................................................................................... 3
Response:........................................................................................................................................................ 3
Recognition of Plans: .................................................................................................................................. 3
Company Disaster Preparedness: ......................................................................................................... 3
Conclusion................................................................................................................................................................ 4
Appendices .............................................................................................................................................................. 4
Appendix A - Poll #1........................................................................................................................................ 5
Appendix B - Poll #2........................................................................................................................................ 6
Appendix C - Feedback Survey Comments ............................................................................................. 7
References: .............................................................................................................................................................. 7
© AmalfiCORE, LLC. Business Continuity Poll: Understanding Risks, 10/7/2009 Page 1 of 7

2. Business Continuity Poll: Understanding Risks
Conducted by Andy Amalfitano via LinkedIn [1], Sept. 24 – Oct 6, 2009
Abstract
A majority of people polled in a recent online survey demonstrated awareness of
business continuity and stated their organizations were doing something about being
prepared. Those polled were from a variety of backgrounds, organizations, and
disciplines. Small businesses are the most likely not to be prepared, whereas, over 54%
of enterprise-level companies are actively engaged and prepared for disasters.
Introduction
During recent learning exercises related to business continuity planning-BCP, I found
differing perceptions by some of those in the industry regarding terminology and what's
included in a plan. That led me to wonder what awareness level of BCP existed among
the people I knew and care about in my professional network.
I conducted an online survey via a polling application on LinkedIn [1] using convenience
sampling.[2] The population was an audience selected from my professional contacts
and none of which state in their profile any connection to the business continuity
profession. I narrowed the contact group to 240 contacts by eliminating those people I
know are not in business. I queried the selected group of professional regarding their
awareness of business continuity plan names and how prepared they thought their
companies were for disasters. After five days, I reviewed the data summarized by the
polling application, collected the data, and created summary tables for analysis.
The purpose of Poll #1 would be to get a general sense of perceived readiness in each
person's company or organization. Poll #2 was simply to educate by asking a very
simply question which might elicit a common sense response and/or cause people to go
look it up or ask about the topic. The Polls were:
1. My company understands risk and likelihood of 'bad things happening' and has a plan
to continue business through disruptions.
2. Test your Knowledge: Which of the following is/are critical elements of a Business
Continuity Plan?
Some respondents commented on the poll questions and although few are germane,
they are included in Appendix C.
© AmalfiCORE, LLC. Business Continuity Poll: Understanding Risks, 10/7/2009 Page 2 of 7

3. Results
Response:
Since this was the first poll I've conducted in this manner, I did not know what to expect
in terms of participation. I would have hoped for a larger number of respondents to the
more important question about status of preparedness, however there was only a 6.6%
response on that question. For the easier educational type questions the number of
respondents was higher at 34%.
The validity of this type of poll is often debated as non-scientific, yet there are some who
support this approach to get an understanding of a particularly known population. [3]
Recognition of Plans:
I share the position with some authors [4] [5] that that all three plans (emergency, crisis,
disaster) mentioned in the question are part of a robust business continuity plan.
Respondents overwhelming demonstrated an awareness that this was true, whether
from common sense, guessing, or possibly looking it up on their own.
The results were true across the identity differentiators of company size, respondents'
title and function. Interesting, but not surprising, was the people most likely to choose
only one or two plans (and not all plans) were from other than the classifications 'owner',
'C-level', and 'management'.
The purpose of educating people on the business continuity plan names was
accomplished with 87% agreeing that all three plans are part of business continuity
planning.
See full results for plan recognition poll in Appendix A.
Company Disaster Preparedness:
There was a broad response to company preparedness where 52% of respondents said
their companies were either actively engaged or absolutely prepared. However, those
represented the larger companies. The smaller companies thought either that disaster
preparedness is recognized as important or they were not sure where their company
was at with such plans.
This result does correlates well with other survey statistics on small businesses.
 One study published by Symantec of over 1600 companies from several
countries found that "Eighty-two percent of respondents [said] they are
somewhat/very satisfied with their disaster plans, and a similar number (84
percent) [said] they fell somewhat/very protected in case a disaster strikes." [6]
© AmalfiCORE, LLC. Business Continuity Poll: Understanding Risks, 10/7/2009 Page 3 of 7

4. However, in that same study, Symantec reported that 47 percent of small
business did not have a formal disaster preparedness plan [c] vs my study which
indicates 56% were unsure or didn't think they were prepared.
 In a survey conducted by Office Depot in early 2008, it was found that 40% of
small businesses admitted they were not prepared for a disaster and one-third
indicated they had no current plans. [7]
See full results for company disaster preparedness poll in Appendix B.
Conclusion
This informal study taken non-randomly from business associates intended to help
educate and it seems that it did based on the responses. Many more people now know
something about the terminology of business continuity.
The small businesses seem to be less prepared than enterprise level companies. This
may be because of cost, not knowing what to do or where to begin, or the perception
that it won't happen to them. The data in my study correlates with other studies on a
similar topic of disaster preparedness in businesses.
Appendices
next three pages...
© AmalfiCORE, LLC. Business Continuity Poll: Understanding Risks, 10/7/2009 Page 4 of 7

5. Appendix A - Poll #1
Statement: “My company understands risk and likelihood of 'bad things happening' and
has a plan to continue business through disruptions.”
Number of Respondents = 16/240 = 6.6%
Overall Results
Choices All
Absolutely, we’re prepared 18%
Yes, we’re actively engaged 25%
Some, it’s important to our business 31%
Not sure, risk=maybe; prepared=?? 25%
Don’t care, ‘it won’t happen here’ <1%
By company size
Choices Small Large
18% 82%
Absolutely, we’re prepared 22%
Yes, we’re actively engaged 33%
Some, it’s important to our business 50% 44%
Not sure, risk=maybe; prepared=?? 50%
Don’t care, ‘it won’t happen here’
By Job Title
Choices All Other Management C-Level, VP Owner
57% 29% 14% <1%
Absolutely, we’re prepared 13% 25% 50%
Yes, we’re actively engaged 38%
Some, it’s important to our business 25% 50% 50%
Not sure, risk=maybe; prepared=?? 25% 25%
Don’t care, ‘it won’t happen here’ <1%
By Job Function
Choices Business Creative HR Product Sales
Development 14% 29% 29% 14%
14%
Absolutely, we’re prepared 100% 50%
Yes, we’re actively engaged
Some, it’s important to our business 100% 50% 50% 100%
Not sure, risk=maybe; prepared=?? 50%
Don’t care, ‘it won’t happen here’
© AmalfiCORE, LLC. Business Continuity Poll: Understanding Risks, 10/7/2009 Page 5 of 7

6. Appendix B - Poll #2
Question: "Test your Knowledge: Which of the following is/are critical elements of a
Business Continuity Plan?"
Number of Respondents = 82/240 = 34%
Overall Results
Choices All
Emergency Response Plan
Crisis Management Plan
Disaster Recovery Plan
Only B and C are needed 9%
All of the Above 89%
By company size
Choices Small Medium Large Enterprise
31% 8% 6% 54%
Emergency Response Plan
Crisis Management Plan 4%
Disaster Recovery Plan
Only B and C are needed 20% 8%
All of the Above 80% 100% 100% 88%
By Job Title
Choices All Other Management C-Level, VP Owner
61% 16% 21% 2%
Emergency Response Plan
Crisis Management Plan 3%
Disaster Recovery Plan
Only B and C are needed 13% 10%
All of the Above 84% 90% 100% 100%
By Job Function
Choices Academics Administrative Human Operations Product Sales
18% 14% Resources 5% 14% 23%
18%
Emergency Response Plan
Crisis Management Plan
Disaster Recovery Plan
Only B and C are needed 25% 25% 33%
All of the Above 75% 100% 75% 100% 67% 100%
© AmalfiCORE, LLC. Business Continuity Poll: Understanding Risks, 10/7/2009 Page 6 of 7

7. Appendix C - Feedback Survey Comments
Poll #2:
"Of course, option 'D' would not be included in the "All of the Above" since it directly
mentions only 2 specific cases. However, the other 3 are crucial. The Disaster Recovery
Plan is probably the least needed -- until you actually need it (then it is definitely the most
important)!"
"We should be ready for any contingency since it appears obvious that we do a fairly poor
job of being prepared for the WHAT IFs... With the current thinking by certain folks in the
world, we should be prepared for anything since our entry requirements into the country
virtually allows for undesirables to enter. Sad but true."
"My gut reaction was C, but I voted E."
"Interesting. Is this because we all know this or 'All of the Above' sounded like the safest
answer?"
______________________________________________________________________________
__
References:
[1 ] LinkedIn. An online professional social networking site. www.linkedin.com
[2] "Trochim, William M.K. 2006. "Nonprobability Sampling". Research Methods Knowledge Base. Retrieved 10-
07-09 form http://www.socialresearchmethods.net/kb/sampnon.php
[3] Taylor, Humphey. 2007."The Case for Publishing (some) Online Polls". 2007 Retrieved 10-07-09 from
http://www.pollingreport.com/ht_online.htm
[4]Slater, Derek.2009."Business Continuity and Disaster Recovery Planning: The Basics". Retrieved 10-07-09
from
http://www.csoonline.com/article/204450/Business_Continuity_and_Disaster_Recovery_Planning_The_Basics#2
[5] Disaster Recovery World. "The Business Continuity Planning & Disaster Recovery Planning Directory".
Retrieved 10-07-09 from http://www.disasterrecoveryworld.com/
[6] "Are businesses prepared for disaster recovery, or do they just think they are?".2009. HNS Consulting."
Retrieved 10-07-09 from http://www.net-security.org/secworld.php?id=8207
[7] "40 percent of US small businesses not prepared for disasters". 28MAY08.Continuity Central. Retrieved 10-
07-09 from http://www.continuitycentral.com/news03951.htm
www.amalficore.com. AmalfiCORE, LLC 2009 All rights reserved. AmalfiCORE LinkedIn Polls
© AmalfiCORE, LLC. Business Continuity Poll: Understanding Risks, 10/7/2009 Page 7 of 7