An optional working-document pack for UK small businesses and organisations that want a more controlled way to maintain continuity paperwork. It adds editable forms and repeatable records; it does not replace the free GPN assessment, plan builder, printable toolkit, operational workbook or incident playbooks.
GPN should remain useful to a business that never buys anything. The enhanced pack is intended to reduce administration and improve document control, not gate continuity knowledge.
The review build is supplied in two forms: editable DOCX files for maintaining the plan and clean PDFs for printing or controlled read-only copies.
Start Here guide, master index, full Business Continuity Plan and document-control / distribution register.
Emergency contacts, staff/deputy contact tree, critical supplier register and IT/data recovery register.
Power dependency, communications fallback and premises fallback worksheets built around minimum viable operation.
Incident decision log, incident chronology, customer communication templates and staff communication templates.
Post-incident review, annual resilience review, tabletop exercise worksheets and test/exercise record.
The pack is designed as ordinary files rather than a new GPN account or hosted SaaS product. Organisations can keep their working copies where their own security and document-control arrangements require.
Update owners, suppliers, dependencies, exercise outcomes and controlled-copy details using standard document software.
Use for blank working sheets, controlled reference copies or offline access without altering the editable source.
No automatic upload or synchronisation to GPN. Store completed documents appropriately for the sensitivity of the information they contain.
A continuity pack can contain names, phone numbers, system dependencies, supplier details and recovery information. Treat the completed documents as business records rather than public handouts.
DO NOT USE THESE FOR SECRETS. Do not record passwords, MFA recovery codes, card CVVs, private cryptographic keys or other credentials that should live in an appropriate secure system.
CYBER INCIDENTS NEED CARE. If malicious compromise is suspected, follow current NCSC guidance and competent incident-response advice. A continuity worksheet is not a forensic or technical response procedure.
DATA BREACHES ARE A SEPARATE QUESTION. The incident chronology is an operational record. Where personal data is involved, organisations should separately assess their duties under current ICO guidance rather than assuming every operational incident is reportable.
The pack uses current public UK guidance as its structural basis. These sources inform the prompts; they do not turn the pack into a certification, legal opinion or regulatory assessment.
Current UK sources anchor the pack. ISO and European resources may inform proportionate methods, but they do not impose general UK SME duties. No certification, legal assurance or HSE assessment is supplied.
This release establishes the product, its scope and its boundary with the free website. Pricing, checkout and download delivery should only follow once the editable and print versions have been reviewed as a customer would use them.