190503AuCtteePaper1Annex1 Business Continuity Planning

This document contains an April 2019 internal audit report on the Cairngorms National Park Authority's business continuity planning. The audit found limited assurance in the plan's design and effectiveness, highlighting several weaknesses. These included an incomplete and redacted business continuity plan, a lack of clear action plans for restoring critical functions, insufficient risk assessments and business impact analyses, and the absence of regular testing and staff training. The report offers seven recommendations for improvement, focusing on updating and fully distributing the plan, developing detailed action plans, conducting thorough risk assessments, implementing a testing schedule, and providing comprehensive staff training.