The Philippines is no stranger to extreme weather events. In recent days, multiple storms and the intensified southwest monsoon or “habagat” have brought relentless rains, flooding, and disruption across the country. These events are no longer anomalies—they are becoming the norm. According to the United Nations Office for Disaster Risk Reduction (UNDRR), the number of climate-related disasters has increased by nearly 83% over the past two decades. This alarming trend underscores the urgent need for organisations to rethink their approach to resilience, particularly through robust Business Continuity Planning (BCP) and IT Disaster Recovery Planning (IT DRP).
Technology: Building Resilience in the Cloud
In today’s digital-first world, technology is the backbone of business operations. However, the increasing frequency of natural disasters demands that our technological infrastructure be not only efficient but also resilient. Migrating critical systems to the cloud is no longer a strategic advantage—it is a necessity. Cloud platforms offer scalability, redundancy, and geographic dispersion, which are vital during localised disruptions. Backup and recovery systems hosted in the cloud ensure that data remains accessible and secure, even when physical offices are compromised.
Moreover, backup connectivity solutions such as satellite internet and mobile devices are essential tools for maintaining operational continuity. These technologies allow employees to stay connected and productive even when traditional infrastructure fails. In a country like the Philippines, where typhoons and flooding can easily knock out terrestrial internet services, having mobile and satellite-based alternatives is a prudent investment.
Process: BCP and IT DRP as a Business-Wide Imperative
While technology plays a critical role, it is only one piece of the puzzle. BCP and IT DRP must be embraced as organisation-wide initiatives. A report by Gartner emphasises that effective business continuity planning requires cross-functional collaboration and executive sponsorship. It is not enough for IT departments to shoulder the responsibility alone.
Organisations must develop comprehensive and well-documented BCP and DRP frameworks that consider all facets of the business—from finance and operations to human resources and client services. These plans should identify potential disruptors, outline response protocols, and assign clear roles and responsibilities. Importantly, they must be reviewed and tested at least annually to ensure relevance and effectiveness.
One practical example is the implementation of a call tree system. During calamities, this system enables organisations to quickly check on the status and welfare of employees, ensuring that support is extended where needed, and that leadership has visibility into workforce availability.
People: Empowering Teams for Resilience
At the heart of every organisation are its people. During disasters, it is realistic to expect that employees may be unreachable for at least three days, as they prioritise the safety and well-being of their families. A study by the Harvard Business Review confirms that in times of crisis, personal responsibilities often take precedence over professional ones.
This reality necessitates that IT infrastructure and services be resilient enough to operate autonomously for extended periods. Organisations must build capacity within their IT teams by forming backup and cross-functional groups to ensure continuity. Relying on a single IT personnel is a critical risk that must be mitigated.
Training employees on remote work protocols and maximising the use of available technology tools is equally important. Familiarity with the organisation’s BCP protocols, collaboration platforms, cloud storage, and cybersecurity practices can significantly enhance productivity and security during disruptions.
Speaking of security, calamities often present opportunities for cybercriminals, who will take advantage of the situation. Phishing attacks disguised as relief fund offers, or emergency loans, are common during such times. Organisations must remain vigilant and educate their workforce on identifying and reporting suspicious activities. Cybersecurity awareness should be an integral part of BCP and DRP training.
Conclusion: Planning for the Inevitable
Climate change has made disruptive natural disasters a regular occurrence. As such, organisations must shift their mindset from reactive to proactive. BCP and IT DRP are no longer optional—they are critical components of business survivability. Resilience is built not just through technology, but through thoughtful processes and empowered people. By investing in these pillars, businesses can weather any storm and emerge stronger, more agile, and better prepared not just for the future, but today’s realities.
As published in The Manila Times, dated 30 July 2025
