Business Continuity for Managed Buildings
Continuity planning for a managed building: the functions occupiers cannot do without, a tolerance for each, and tested alternatives when the usual route fails.
A water main breaks at 4am three floors above the electrical room. The fire department isolates the supply, the building loses power to half its floors, and by 7am a hundred people are standing in the lobby asking a question the property manager has not answered in writing: what happens next, and for how long?
Business continuity property planning is the discipline of answering that question before it is shouted. It is not the emergency response plan, which protects life in the first minutes. It covers the hours and days afterwards, when the building must keep functioning at some reduced level or explain why it cannot.
Key takeaways
- Emergency response, business continuity and recovery are three plans with three triggers; most portfolios have only the first.
- Continuity planning starts with critical functions and a stated tolerance for each, not with a list of hazards.
- Every mitigated function needs a pre-arranged alternative — a generator, a restoration contractor, temporary facilities — with a name and a response time.
- A plan nobody has tested is a document, not a capability; test the call tree once a quarter and the scenario twice a year.
- Life safety code compliance, fire systems verification and structural assessment stay with licensed professionals; the plan records and commissions them.
What does business continuity property planning cover?
It covers the arrangements that keep a building's essential services running, or substitute for them, when a disruption outlasts the immediate emergency. Three plans get conflated, and separating them is the first useful thing a manager can do.
Emergency response covers life safety in the first minutes: evacuation, fire department liaison, shutting down systems, accounting for people. Business continuity covers the next hours and days: power, water, access, lifts, waste, communications, and the reduced service that keeps occupiers operating. Recovery covers the return to normal: repairs, restoration, reinstatement, insurance.
Different triggers, different owners, and different documents. Where continuity sits alongside the rest of the operating model is set out in property management operations.
What are a building's critical functions?
They are the services whose loss stops occupiers from working, or makes the building unsafe or unusable, within a defined time. Judge by consequence, not by cost or by how interesting the equipment is.
| Function | Why its loss escalates | Practical tolerance |
|---|---|---|
| Electrical supply | Lifts, access control, pumps, fire systems, tenant IT all depend on it | Hours, not days |
| Domestic water and drainage | Washrooms close, food service stops, tenants send staff home | Same day |
| Fire alarm and suppression | Loss creates a life-safety exposure and can trigger evacuation or closure | Immediately — never a planned outage without a fire watch |
| Lifts | Accessibility, goods movement, high-rise access | Hours for one car, days for a bank |
| Heating and cooling | Comfort becomes an occupier relations problem, then a lease issue | One working day in mild weather, hours in extremes |
| Access control and doors | Security and liability, especially after hours | Immediately |
| Waste and cleaning | Hygiene and perception, with a fast tail of complaints | One service cycle |
| Communications and entry systems | Occupiers cannot be told what is happening | Immediately |
How do you set recovery targets without inventing precision?
Give each function a band, not a number, and write down what happens at the edge of the band. Recovery time objective (RTO) is the target for restoring a function; maximum tolerable downtime (MTD) is the point at which the consequence becomes unacceptable.
| Band | Restore within | Typical functions |
|---|---|---|
| Immediate | 0–4 hours | Fire systems, access control, communications to occupiers |
| Same day | 4–24 hours | Power to critical areas, water, one lift |
| Short | 1–7 days | Full HVAC, all lifts, waste normalisation |
| Flexible | Beyond 7 days | Cosmetic repairs, landscaping, non-essential finishes |
The value of the band is that it tells you what to buy. If water must be restored same day, you need a plumber on retainer with a stated call-out, not a phone number in a drawer.
Which disruptions should a plan cover?
Cover the eight that account for most building closures, and test the two most likely. Breadth reassures; testing protects.
Loss of utility power; water ingress or a burst supply; fire or smoke damage in a part of the building; loss of access to the building or to a floor; failure of a single critical system such as a chiller or a lift bank; loss of a key vendor mid-contract; loss of key staff, especially anyone who holds site knowledge; and a civil event requiring evacuation or shelter-in-place.
Overlap with the risk register is intentional and healthy: the register ranks likelihood and consequence, and the plan describes what you would do about the top few. Building an operational risk register explains how the two documents reference each other.
What does the plan actually contain?
Twelve pages at most, in a fixed structure, with the contact tree on page one. A plan people cannot use under pressure is a decoration.
- Scope, buildings covered, plan owner and review date on the cover
- Roles with names and two contact methods each, plus a deputy for every role
- Critical functions with their bands and the tolerated outage for each
- Pre-arranged alternatives: generator hire, restoration contractor, temporary washrooms, security guards, locksmith, water delivery
- Decision triggers: who declares an incident, who escalates, who may close the building
- Occupier communications templates, pre-approved, one page each
- Vendors with contractual response times, not aspirations
- A documentation log that says who records what during an incident
- A test schedule with named owners
Keep a printed copy in the building and an offsite copy. A plan stored only on the server in the building it describes has a single point of failure.
Who does what during an incident?
Assign five roles and make sure each has a deputy, because the person who wrote the plan is often on holiday when it is needed.
The incident lead decides and authorises, usually the property manager or senior operator. The building operator handles plant, isolation and access. The occupier liaison handles tenants and their questions. The vendor liaison chases contractors and confirms arrival times. The recorder keeps the timeline, because insurance, claims and the post-incident review all run on it.
Roles belong in writing with names, not job titles alone, and the emergency response plan should name the same people so the two documents do not contradict each other.
How do you test a plan without a big exercise?
Test one component at a time, on a schedule, and keep the evidence. Component testing finds real gaps without emptying the building.
- Call tree test quarterly: send a message down the tree and record how long each link takes and how many people are reachable
- Tabletop scenario twice a year: 90 minutes, no slides, walk a single disruption minute by minute and log the decisions you cannot make
- Vendor call test annually: call the restoration contractor and the generator supplier, confirm the response time in the contract, and record what they actually said
- Single-system drill annually, with occupiers warned: isolate a lift or a chiller and run the manual workaround
- Generator and pump tests on the manufacturer's schedule, with results filed
Tell occupiers what you learned in one page. A test nobody hears about does not build the confidence that keeps tenants calm during the real thing.
Illustrative worked example: a 36-hour power loss
The sequence below is invented to show the shape of a response, not a prescription. Substitute your own roles, vendors and thresholds.
| Hour | What happens | Who acts | Record created |
|---|---|---|---|
| 0–1 | Supply lost to floors 4–12; fire department attends | Operator isolates, incident lead declared | Timeline started, time of loss noted |
| 1–4 | Occupiers told to leave affected floors; one lift kept on a generator | Occupier liaison, vendor liaison | Message sent, generator arrival time logged |
| 4–24 | Generator hired for lift and access control; restoration contractor assesses | Incident lead | Vendor attendance, scope estimate |
| 24–36 | Partial power restored; cleaning and waste catch-up sequenced | Operator, site supervisor | Restoration certificate, condition photos |
| After | Post-incident review within five working days | Incident lead | Actions with owners and dates |
The lesson sits in the middle row. The plan's real content is the pre-arranged alternative — who you call, what it costs, how fast they come — and whether the occupier communication was written before the event. Everything else is administration.
What records prove the plan exists?
Keep five artefacts current and hand them over at every handover of responsibility: the signed plan with its review date, the contact tree with its last test date, drill and exercise records with observations, vendor agreements showing response times, and the post-incident reviews that produced changes.
These are the same records an insurer, a lender or a prospective tenant will ask for. Combine them with inspection evidence and you can show not only that a plan exists but that the building is being watched between incidents.
Scope note: Fire systems design and verification, electrical work, structural assessment, hazardous materials and building code compliance sit outside a property manager's scope. Record what you observe, restrict access where the condition warrants it, and commission the professional of record.
Frequently asked questions
Is business continuity the same as an emergency response plan?
No. Emergency response protects life in the first minutes; business continuity keeps essential services going through the following hours and days; recovery returns the building to normal. The same people often fill both roles, which is why the two documents must not contradict each other.
What is a realistic recovery time objective for a building?
It depends on the function, not the building. Fire systems and access control need immediate restoration, power and water are usually same-day, and non-essential finishes can wait a week. Write the band down and buy the arrangement that meets it.
How often should a continuity plan be reviewed?
Annually as a full review, with the contact tree tested quarterly and any material change — new tenant, new plant, vendor swap — triggering an immediate update. An untested contact tree is the most common failure found in a real incident.
Who owns continuity planning for a managed portfolio?
The property manager owns the plan for each building; the portfolio or regional manager owns consistency across sites and the escalation route. Owners approve anything that changes the building's operating or spending commitments.
How much should continuity planning cost?
Far less than most managers assume, because the expensive part already exists: the engineering, the vendors and the contact information. The remaining cost is the time to write the plan down, test it twice a year and keep the alternatives current.
Where the plan meets the building
Continuity planning is a small, unglamorous document set that decides how the next bad week goes. The work is naming functions, tolerances, people and alternatives — then proving every quarter that the contact list still works and the vendors still answer.
NeatScore is where the observation side of that evidence lives: area-specific checklists, critical items flagged, a photo per finding, offline inspections that sync, and dated branded reports an owner or insurer can read. Try it free for 14 days, or see pricing.
Not regulatory advice. Emergency planning, fire safety, building code and reporting obligations vary by province and building type, and Public Safety Canada's emergency management guidance describes the national framework rather than the local requirement. Confirm specifics with your provincial regulator, your local fire service and the owner.
