Manufacturing and industrial
Business continuity planning for Queensland manufacturers.
A business continuity plan for a Queensland manufacturer needs to cover machine downtime, power loss, input supply and the people who can actually restart the line, not a generic office template. Most manufacturing sites already carry the operational discipline for this, the gap is usually that it was never written down in one place staff can find at 5am.
1 line
Most QLD manufacturers run on a single production line with no built-in redundancy
24-72 hrs
Typical window before a stopped line starts costing more than the fix
3-5
Critical suppliers that, if they fail, stop most manufacturing SMEs cold
The state of play
Where Queensland manufacturing sits right now.
Queensland's manufacturing base runs heavy on food processing, metal fabrication, plastics, packaging and componentry for construction and resources. Most of it sits in industrial estates around Brisbane's southside, Ipswich, the Gold Coast hinterland, Townsville and Toowoomba, often on a single grid connection with a single production line and a handful of people who know how to restart the plant if something trips. That concentration of knowledge in two or three people is the single biggest continuity exposure in the sector, and it rarely appears on a risk register because it feels like a normal way to run a business.
What actually stops you trading
The disruptions that hit this sector hardest.
Single point of plant failure
Most SME manufacturing sites run one critical machine or line with no backup. A gearbox failure, compressor fault or control system fault can stop the whole site rather than one part of it. The businesses that recover fastest are the ones that already know which supplier can get a part or a technician on site within a day, because that decision made in advance saves the frantic phone-round that otherwise eats the first 24 hours.
Extended power outage
A tripped substation or storm-damaged line can take a plant offline for hours to days, and cold-chain or process-critical operations lose stock or batches within that window. Sites without a tested generator changeover plan often discover during the outage that the generator has not been run under load in months and does not carry the full site.
Input and freight disruption
Steel, resin, packaging and specialist components frequently come from a small number of suppliers or a single interstate freight route. A Bruce Highway closure, a supplier's own production issue, or a shipping delay at the port can stop a manufacturer's line even though nothing has gone wrong on site.
Key person and skills gap
A plant electrician, a PLC-literate operator or a single quality sign-off person leaving, being injured or being unavailable can stop production even with working machinery. Manufacturing continuity plans need a named backup for every role that can single-handedly halt the line.
Cyber attack on production or ERP systems
Ransomware against the office network can lock scheduling, purchasing and invoicing systems, and increasingly targets connected production equipment directly. A plant that has never rehearsed running on paper for a day will lose far more time reconstructing orders than one that has a manual fallback process ready.
WHS incident and plant shutdown
A serious injury involving machinery triggers a WHS Queensland investigation and can require the affected plant or area to be secured and stopped pending review. A documented incident response that covers first response, notification and evidence preservation reduces both the human and commercial cost of that shutdown.
Who is asking for a plan
The pressure is already on.
Clients, insurers, regulators and prime contractors increasingly want evidence, not assurances.
Insurer expectations at renewal
Business interruption and industrial special risks insurers increasingly ask manufacturers to demonstrate backup power arrangements, fire protection maintenance records and a written incident response plan before confirming terms, and a documented plan can materially affect premium and excess.
WHS Queensland duties
Under the Work Health and Safety Act, PCBUs must have systems in place to manage plant and machinery risks, and a documented incident response plan is part of demonstrating that duty was met if something goes wrong on the factory floor.
Client and supply chain contracts
Larger customers, particularly in construction, resources and food supply chains, are increasingly writing continuity and business resilience clauses into supplier agreements and asking for evidence of a plan as part of vendor onboarding or annual review.
Notifiable Data Breach scheme
Manufacturers running connected ERP, payroll or customer systems are subject to the same Notifiable Data Breach obligations to the OAIC as any other business if a cyber incident exposes personal information, regardless of company size.
Why planning is worth the afternoon
What it costs to work it out on the day.
For a manufacturer, downtime is not an abstract cost, it is a machine sitting idle while wages, lease payments and equipment finance keep running and orders queue up behind a line that cannot move.
A plant that stops for three days without a plan does not just lose three days of output, it loses the goodwill of customers who reroute orders elsewhere and, in some contracts, faces liquidated damages for late delivery.
Insurance does not fill the gap on its own.
Business interruption cover typically has a waiting period before it activates and rarely covers the full margin lost while a customer relationship cools or a competitor picks up an order that never comes back. The manufacturers who recover fastest are the ones who had already worked out, before the event, which orders to protect first and which suppliers to call.
The reputational cost compounds in a small industry.
Queensland's manufacturing sector runs on repeat relationships between suppliers, fabricators and builders, and a business known for missing deadlines during a disruption it could have planned for loses future work quietly, through customers who simply stop asking for a quote.
None of this requires a large compliance program.
A written plan that names the critical line, the backup contacts and the first ninety minutes of action after a shutdown costs a fraction of one lost production day, and it is the difference between an outage that is managed and one that spirals.
A realistic morning
A ransomware event at a Toowoomba metal fabricator.
A 32-person steel fabrication business in Toowoomba had its office network locked by ransomware on a Tuesday morning, encrypting the ERP system that held production scheduling, purchase orders and invoicing.
Office staff find the scheduling system inaccessible and a ransom note on two workstations.
IT contact isolates the network from production floor systems, which run on a separate controller and are unaffected.
Owner activates the written incident plan, reports to ReportCyber and calls the cyber insurer's incident line.
Operations manager switches to a printed job board and paper docket system, kept ready in the plan for exactly this.
Backups restored from an offline copy stored separately from the main network, avoiding a ransom decision entirely.
Production continued on paper for a day and a half while the ERP system was rebuilt from clean backups, and the plant lost no scheduled orders. A comparable business without a manual fallback or offline backup would have faced a genuine choice between paying a ransom and losing days of production entirely.
What good looks like
What a plan for manufacturing and industrial should contain.
How we fix it
One app. Your risks, and what to do about them.
The ResilientQLD app has two modules. The Risk Register works out what could stop you trading. The Disruption Playbooks tell whoever is on shift exactly what to do when it happens. Enter your business once, use it on a phone or a laptop, and export a printed copy for the wall.
Risk Register built for plant and supply exposure
The Risk Register module lets a manufacturer log its single points of failure, from the one machine that can halt the line to the three suppliers who cannot be replaced quickly, in plain language rather than a generic corporate risk matrix.
Disruption Playbooks for the outages that actually happen
Power loss, key supplier failure and cyber lockout each get a specific playbook with the first ninety minutes of steps written for whoever is on shift, not just the owner.
Works from the factory floor
The app runs on mobile and desktop, so a shift supervisor can open the power outage playbook on their phone standing next to the switchboard instead of hunting for a folder in the office.
One printable plan for insurers and auditors
The full plan exports as a clean PDF, ready to hand to an insurer at renewal or a customer doing vendor due diligence, without needing to build a document from scratch.
Questions we get asked
Straight answers.
Do Queensland manufacturers need a business continuity plan?
There is no single law forcing every manufacturer to hold one, but WHS duties, insurer renewal requirements and increasingly customer contracts all push toward having a documented plan, and most manufacturers who go through a serious disruption wish they had one.
What should a manufacturing continuity plan cover first?
Start with the single machine or line that would stop the whole site if it failed, then work outward to power, key suppliers and the people who can restart production. Most of the value sits in that first list.
How does a factory keep operating during a power outage in Queensland?
A tested generator sized to actual site load, a documented changeover procedure and a clear decision on which processes to prioritise if generator capacity is limited are the core of it. Untested generators are the most common failure point.
What happens if a manufacturer's ERP system is hit by ransomware?
Report the incident through ReportCyber, notify the cyber insurer immediately, and fall back to a pre-prepared manual process for scheduling and dispatch while systems are restored from offline backups.
Does business interruption insurance cover a stopped production line?
Often yes, subject to policy wording, a waiting period and proof of loss, but it rarely covers customers who move to another supplier during the outage, which is why a fast operational response matters as much as the insurance claim.
Related guides.
Get your plan sorted before you need it.
Most operators finish the first version in an afternoon. Start in the app, or have a 20 minute conversation with us first.