Business continuity planning is not just a compliance exercise – it’s a core part of responsible governance.

For charities, non‑profits, companies and Rūnanga, the ability to continue delivering services during disruption is essential. From fuel supply constraints and extreme weather to cyber incidents and workforce shortages, organisations across Aotearoa New Zealand operate in an environment where disruption is increasingly likely and often interconnected.

We’ve recently completed an update to the Business Continuity Plan (BCP) available through our online policy service.  It refreshes key risk scenarios and aligns with the Government’s Fuel Response Plan 2026, helping organisations of different sizes and structures strengthen their preparedness in a practical, proportionate way.

In this blog, we explore why business continuity planning remains so important, how risk‑based annexes support effective planning, and how organisations can keep their plans current as risks and expectations evolve.

Who this is for

This article is relevant for people responsible for governance, management, or operational continuity in:

• Charities and non‑profits managing essential services with limited time and resources
• Community organisations and trusts balancing service delivery and compliance
• Larger entities, like rūnanga, with complex structures, interdependencies, and community responsibilities

Whether your organisation is small and volunteer‑led or large and multi‑site, business continuity planning should be fit for purpose and regularly reviewed.

What is business continuity planning?

Business continuity planning is the process of identifying an organisation’s critical functions, the risks that could disrupt them, and the controls and strategies required to continue operating or recover quickly during a disruption.

Effective business continuity planning helps you to:

• Maintain essential services during emergencies
• Protect kaimahi/staff, contractors, and service users
• Meet legislative, contractual, and audit requirements
• Support confident decision-making during incidents
• Demonstrate sound governance and risk management

BCPs are increasingly scrutinised by auditors, regulators, and central agencies to check they exist, are current and relevant.

Why business continuity planning matters for NZ organisations

Recent years have shown that disruption rarely occurs in isolation. A single event, like a fuel supply interruption, can quickly affect transport, staffing, supply chains, and service delivery.

At an organisational level, the consequences of inadequate continuity planning can include:

• Service outages or reduced public access
• Increased health and safety risks
• Reputational damage and loss of public trust
• Governance and assurance gaps
• Increased recovery costs and decision fatigue

Business continuity planning helps you move from reactive crisis response to planned, proportionate resilience.

The value of risk-based annexes in continuity planning

One of the most effective ways to keep business continuity plans practical is through the use of risk-based annexes.

Rather than overloading the core BCP with scenario detail, annexes allow us to:

• Identify and document specific disruption risks (eg fuel shortages or IT failure)
• Identify tailored and appropriate controls
• Update individual scenarios without rewriting the entire plan
• Maintain consistency across teams or agencies

The updated annex in our online service identifies key risks relevant to organisations in Aotearoa and links each risk to practical, achievable controls that support real-world decision-making.

Aligning with the Government’s Fuel Response Plan 2026

Fuel supply disruption is a critical cross-cutting risk for many agencies, even where fuel is not a primary operational input.
The Fuel Response Plan 2026 outlines how fuel supply constraints may be managed nationally and highlights the interdependencies between fuel, transport, essential services, and emergency response.

Aligning business continuity planning with this framework helps agencies to:

• Understand their role within national response arrangements
• Test assumptions about kaimahi/staff availability, logistics, and suppliers
• Identify indirect impacts on service delivery
• Strengthen whole-of-organisation resilience.

Effective continuity planning does not require managers and boards to become fuel specialists. It requires simply an awareness and preparedness to address fuel as a strategic dependency.

Business continuity planning is not a “set and forget” activity

One of the most common gaps identified in audits and reviews is outdated documentation.

Business continuity plans must be reviewed when:

• When organisational risks change
• When government response frameworks are updated
• After incidents, exercises, or near-misses
• As part of regular governance and assurance cycles

Our online service supports this ongoing review by providing structured, current, and audit-ready content that evolves alongside emerging risks and government guidance.

Supporting agencies beyond business continuity planning

Business continuity planning is one part of a broader resilience and assurance framework. Through our service, we also support agencies with:

• Risk management and assurance frameworks
• Crisis and incident management planning
• Emergency management documentation
• Governance and compliance policies
• Audit-ready policy and procedure development
• Regular content review and updates

The goal is practical, fit-for-purpose documentation that supports agencies before, during, and after disruption.

Building resilient organisations for the future

Business continuity planning is not about predicting every possible disruption. It is about building confidence, clarity, and capability to respond effectively when disruption occurs.

As risks continue to evolve, so too must the plans and systems that support organisational resilience. Regular review, alignment with national or area guidance, and proportionate planning help charities, non‑profits, and other organisations like rūnanga, continue to operate when they are needed most.