Free disaster recovery budget template to justify BCDR spending

Getting started

Begin the DR budget process by identifying large expense items, such as off-site storage facilities, salaries, rent, utilities, network resources, managed services, specialized applications, hardware and software maintenance, travel, and outside consulting. Use past-year data and available trending information to help project spending in a new year.

Download our free disaster
recovery budget template.

For most small expense categories, past-year trends will be enough to determine what to budget for the next year.

If a new program is in development, DR teams should work with departments including IT and human resources to get estimates of likely expenses and expense categories. Prepare assumptions, especially for major expense items, and review these assumptions once the budget has been completed. Use the included template to help further pinpoint likely expense categories.

Funding a DR plan

Senior management's commitment to DR and related activities needs to extend beyond simply agreeing to a BCDR policy and initial funding. Management must support development of the company infrastructure that strengthens the policy, ongoing maintenance of the overall program, program staffing, and ongoing provision of resources, including financial and technological resources.

DR budgets must account for both immediate and long-term expenses, which might change over time. Ongoing review and assessment of a program by internal DR teams and business continuity audits are essential for continued management support and funding. Be prepared to justify the need for continued support and be clear about how needs might change.

Traditionally, expensive preparations for events that might never occur were difficult to justify.

When preparing a budget, start with an estimate of how much the DR budget is as a percentage of another budget, such as IT. Often, DR and related activities are approximately 0.1% of a company's overall budget and 1% to 3% of an IT department's budget. The COVID-19 pandemic forced organizations to take a harder look at their disaster preparations and the costs of not investing enough in a DR program.

Traditionally, expensive preparations for events that might never occur were difficult to justify. The ongoing COVID-19 experience has supported the case that DR plans help companies survive over the long term.

Budget assumptions and considerations

If DR is not budgeted as a separate entity or department, it can be part of other departments -- most frequently IT. Other departments that might own the DR budget and related initiatives include risk management, facilities management, operations, emergency management, administration, finance/accounting and strategic planning.

When developing a DR department budget, several assumptions and considerations need to be addressed. Teams can address these by asking the following questions:

1. Do BCDR plans and related activities exist?
2. Are disaster plans in place for IT and business functions?
3. Which departments or divisions have business continuity plans?
4. Does management support DR activities?
5. Is the department currently conducting business impact analyses and risk assessments?
6. Is the department currently developing or implementing plans that meet the organization's needs?
7. Does an emergency operations center exist?
8. Has senior management approved the DR plan and related policies and procedures?
9. Does an incident response or crisis management plan exist?
10. Has the board or senior management completed an enterprise risk assessment?

Budget line items

The table below provides examples of typical DR and related activity budget line items. We've divided some of the items below into different categories, including staff, special systems and training. Consider grouping various items under specific areas that suit your organization's structure. The downloadable template included with this article provides additional detail and more line items.

Importance of budgeting

The budget process exists to accomplish several key activities. These activities will come into play during the justification process to management.

Common goals of the disaster recovery budget process include the following:

1. Develop and implement DR and related plans that facilitate the timely recovery of critical business functions and IT facilities following a major disruption or disaster.
2. Develop policies, procedures and compliance activities to address all DR and security requirements.
3. Develop, document, exercise and maintain plans to ensure the survival and resilience of the business by minimizing the negative impact of business and technology disruptions.
4. Identify and assess potential risks to the enterprise and its operations, technology infrastructure, business processes and people.
5. Identify and assess potential vulnerabilities to the enterprise and its operations, technology infrastructure, business processes and people.
6. Design and deploy cost-effective emergency response activities, such as remote working, that can quickly recover business and technology operations.
7. Develop and deploy training and awareness programs so that all employees are fully aware of their responsibilities and commitments.
8. Establish and maintain liaison with external parties including customers, vendors, insurers, emergency first responders, regulators and financial institutions.
9. Ensure any external recovery facilities are secure and that systems are prepared for emergency activation.
10. Develop a capability to optimize media relations to minimize adverse publicity and negative business implications.