The OGO Blog

5 reasons your Credit Union disaster recovery plan fails

data destruction data security

If you are concerned about the quality (or existence) of your Credit Union disaster recovery plan in your Credit Union there is good reason. Disaster Recovery and Business Continuity Planning are part art and part science. Ultimately, each plan comes down to a combination of the proper documentation mixed with the proper training and staff knowledge. If you aren’t following a consistent and regular planning methodology than one of these 5 reasons could cause your Credit Unions’ plan to fail.

Documentation Out of Date

One of the primary functions your Credit Union Disaster Recovery plan is to document the key information that would be needed by your staff to run or recover the organization. Your Credit Union is probably constantly tweaking, adjusting and adding business processes as part of its ongoing business planning. If you don’t constantly modify the documentdata destruction data securityation than a key piece could be missed and the whole organization turns left instead of right.

Practice & Testing

Like anything in life, you are only good at what you practice and rehearse. Imagine if all you had was a script but had never rehearsed it. You probably wouldn’t deliver a very good show on your first try. Disaster Recovery and Business Continuity requires regular exercising and testing. It is only through this process that people and process know what needs to happen in an actual event.


If your recovery plan involves complex logistics such as getting a tape half way across the country or having a mobile location brought in – your chance of failure goes up. Each time you add new logistical component into the plan it increases risk that either your vendor may not come through for you or that whatever is impacting you is also impacting the logistics. For example, a road being closed or a regional power outage mean that having your hotsite at the hotel down the street means you can’t use it because it also doesn’t have power or you can’t get to it.

Too Much Information

Just because a plan is three inches thick or really long doesn’t mean it will work. It is far more important to have the right data and right organization in your plan. Making it easy to follow and find the right information is more important than that you have all information. This comes back to testing too. Ideally the plan will make it easy to follow recovery scripts and checklists to make sure you are following the right path – not telling you how to take every single step.


In the actual event communication is key. This is one of the main reasons testing is so critical. Employees need to trust each other and communicate effectively. Just like in normal business – communication of key priorities and plans is key – it is even more so in a disaster event. With media and member scrutiny on the Credit Union, it becomes even more important to act in a cohesive manner. Companies that are effective at crisis management and disaster events master communication first.

Do you have questions about how best to measure risk or what events you should plan for? Are you looking for ideas on which scenarios could be useful for your next table top or Disaster Recovery Test? If you would like additional information please fill out this quick form –