Core 4.0

C-RM 2-1: Business Continuity Plan

Submited by: Tom Goddard

The Basics

Your organization must implement a business continuity plan ("BCP") for its program operations. The BCP must:

  • Clearly identify the systems and processes that are essential to your organization;
  • Outline the effect that the disruption of these systems and processes would have on your organization;
  • Describe your organization's strategy for dealing with such disruptions in various circumstances, such as various lengths of time of outage.

Management Tips

URAC sees this as a sequential process:

  • In order to prepare a BCP, you need first to figure out what business operations need to be continuous.
  • Once you've done that, you need to envision what would happen if something happened to each of these operations.
  • Only then are you ready to say what you'll do to respond to an outage.

In the midst of your BCP document, we recommend that you build a spreadsheet or grid that outlines all of these possible outage scenarios and your responses. Reviewers like grids for this standard.

Accreditation Tips

Desktop Review
Provide the BCP and any other documents that would be useful in conveying to the reviewer that you've thought through and planned for the full array of outage scenarios.
Validation Review
The URAC reviewer will talk about your BCP with senior leadership and staff involved with its implementation.
Document review
Be prepared to show the reviewer any documentation that shows activity related to the BCP since you submitted documents to URAC for desktop review. Such documents might include committee meeting minutes or testing results.

  • Core 3.2 / 06.03.2019

    CORE 11 - Written Business Agreements

    My colleagues and I have noticed, as have some veteran URAC reviewers to whom we've spoken lately, that some folks are still misinterpreting this standard. Let me see what we can do to help sort out the confusion.The standard requires that your organization keep "signed written agreements with all clients describing the scope of the business arrangement.""For which organizations does your organiza...

  • Core for Health Plan 3.2 / 06.03.2019

    CORE 40 - Health Literacy

    This standard, a new, experimental standard, suggests that your organization should have policies and procedures that address health literacy. In this context, the meaning of health literacy is, "The degree to which individuals have the capacity to obtain, process, and understand basic health information and services needed to make appropriate decisions regarding their health." The three suggested...

  • Core for Health Plan 3.2 / 06.03.2019

    CORE 39 - Consumer Satisfaction

    This short standard requires that your organization have a mechanism to collect information about your consumers' satisfaction.This often is done in the form of customer satisfaction surveys, consumer complaints, and sometimes even focus groups. Find out what your organization does -- it's likely more than one mechanism.