View
216
Download
1
Tags:
Embed Size (px)
Citation preview
London Metropolitan London Metropolitan UniversityUniversity
Business Continuity Management Business Continuity Management Seminar Friday June 27Seminar Friday June 27thth 2008 2008
The Henry Thomas RoomThe Henry Thomas Room
LUNCHLUNCH
Business Continuity Business Continuity Management Seminar Management Seminar Friday 27Friday 27thth June 2008 June 2008 Introduction to London Metropolitan Introduction to London Metropolitan
University Business Continuity Plan University Business Continuity Plan (John Friary)(John Friary)
The New Standard for Business The New Standard for Business Continuity Management – BS25999 Continuity Management – BS25999 (John Sharp FBCI(Hons) FCMI MCIM)(John Sharp FBCI(Hons) FCMI MCIM)
The Next Steps – Review,Departmental The Next Steps – Review,Departmental Plans and Desk Top Exercise(John Plans and Desk Top Exercise(John Friary)Friary)
Business ContinuityBusiness Continuity
Major Incident PlanningMajor Incident Planning Disaster PlanningDisaster Planning Emergency PlanningEmergency Planning Disaster Recovery and Business Disaster Recovery and Business
Continuity PlanningContinuity Planning
London Metropolitan University Commercial Road Fire 25th June 2008 – 4 Fire Engines, Police and ambulance arrive on scene
London Metropolitan University Commercial Road Fire 25th June 2008 – Fire Investigations Team arrive
Expecting the Expecting the UnexpectedUnexpected
Business Continuity in an uncertain world Business Continuity in an uncertain world (BCI/ACPO/London First 2003)(BCI/ACPO/London First 2003)
Key Steps in developing business continuity Key Steps in developing business continuity management :management :
Analyse your businessAnalyse your business Assess the risksAssess the risks Develop your strategy Develop your strategy Develop your planDevelop your plan Rehearse your planRehearse your plan
Business ContinuityBusiness Continuity
London Metropolitan University is a member London Metropolitan University is a member of the HIGHER EDUCATION BUSINESS of the HIGHER EDUCATION BUSINESS CONTINUITY NETWORK (HEBCoN) :CONTINUITY NETWORK (HEBCoN) :
- Attended first National Conference in Attended first National Conference in University of Birmingham April 2008University of Birmingham April 2008
- Attended National meeting on Pandemic Attended National meeting on Pandemic Influenza May 2008Influenza May 2008
- Attends HEBCoN London Regional Group Attends HEBCoN London Regional Group meetingsmeetings
London Metropolitan London Metropolitan UniversityUniversity
Estates Emergency Response Estates Emergency Response Plan and Business Continuity PlanPlan and Business Continuity Plan
Management framework for responding to Management framework for responding to a major incidenta major incident
Estates Emergency Estates Emergency Response PlanResponse Plan
The The Emergency Response PlanEmergency Response Plan is a management tool to is a management tool to aid the aid the Estates DepartmentEstates Department in the overall management in the overall management of the University’s of the University’s first response to an emergencyfirst response to an emergency that that impacts on the operational use of its buildings. All other impacts on the operational use of its buildings. All other business continuity matters are subordinate to the business continuity matters are subordinate to the Emergency Response Team (ERT)Emergency Response Team (ERT) until the initial until the initial emergency period has passed.emergency period has passed.
The plan focuses on the emergency response to incidents The plan focuses on the emergency response to incidents that occur during normal and out of normal working hours that occur during normal and out of normal working hours of the University. Normal hours are defined as 09:00 – of the University. Normal hours are defined as 09:00 – 17:00hrs Monday to Friday. Out of ours defined as 17:00 17:00hrs Monday to Friday. Out of ours defined as 17:00 – 09:00hrs 7 days a week including national holidays. – 09:00hrs 7 days a week including national holidays.
Business Continuity Business Continuity PlanPlan
The The Business Continuity PlanBusiness Continuity Plan establishes an establishes an Emergency Emergency Committee(ECOM)Committee(ECOM) that manages response strategies that manages response strategies and allocates resources to ensure a major incident has and allocates resources to ensure a major incident has minimal impact on the University's business operation.minimal impact on the University's business operation.
The emergency responses are guided by London The emergency responses are guided by London
Metropolitan University's overriding emergency goals of:Metropolitan University's overriding emergency goals of: Protecting lifeProtecting life Securing the critical infrastructure and facilitiesSecuring the critical infrastructure and facilities Resuming the teaching and research programResuming the teaching and research program
Scope of the planScope of the plan
The plan will be involved when:The plan will be involved when:
Access to any University building is denied due Access to any University building is denied due to any incidentto any incident
The University’s business systems are The University’s business systems are interruptedinterrupted
A Health & Safety incident affects staff, students A Health & Safety incident affects staff, students and/or local community/environmentand/or local community/environment
Stages of ActivationStages of Activation
BronzeBronze - No immediate threat to safety - No immediate threat to safety and/or property but emergency situation and/or property but emergency situation has an impact on the operation of the has an impact on the operation of the building(s) that may eventually lead to building(s) that may eventually lead to closure or limited occupancy/operation of closure or limited occupancy/operation of building. This will be activated by a level 1 building. This will be activated by a level 1 response (see below).response (see below).
Stages of ActivationStages of Activation
Level 1Level 1 - Business interruption affecting - Business interruption affecting
one or more departments and/or function one or more departments and/or function an example of such an incident could be an example of such an incident could be localised flooding or temporary loss of localised flooding or temporary loss of building services. Members of the EMT building services. Members of the EMT will be placed on alert by the ERT in will be placed on alert by the ERT in preparedness should the incident preparedness should the incident escalate. escalate.
Stages of ActivationStages of Activation
SilverSilver - Threat to safety and/or property identified - Threat to safety and/or property identified but not immediate. Has a severe impact on the but not immediate. Has a severe impact on the operation of the building(s) that could result in operation of the building(s) that could result in closure of the building. Staff to evacuate when closure of the building. Staff to evacuate when ordered to do so by ERT or police/authorities. ordered to do so by ERT or police/authorities. This will be activated by a level 2 response (see This will be activated by a level 2 response (see below).below).
Stages of ActivationStages of Activation
Level 2 - Level 2 - Business interruption affecting one or more Business interruption affecting one or more buildings resulting in short term closure of the buildings resulting in short term closure of the building e.g. up to and including two working days building e.g. up to and including two working days and will be overcome by the relevant department(s) and will be overcome by the relevant department(s) implementing their own departmental emergency implementing their own departmental emergency response plan supported by the Estates Team. An response plan supported by the Estates Team. An example of such an incident could be total loss of example of such an incident could be total loss of building services to one or more buildings. Members building services to one or more buildings. Members of the ECOM will be notified.of the ECOM will be notified.
Stages of ActivationStages of Activation
GoldGold - Immediate threat to safety and/or property - Immediate threat to safety and/or property requiring controlled evacuation and closure of requiring controlled evacuation and closure of the building(s) ordered either by the ERT or the the building(s) ordered either by the ERT or the police/authorities. Immediate activation of the police/authorities. Immediate activation of the business continuity plan and notification of business continuity plan and notification of members of the EMT and resources to be members of the EMT and resources to be mobilised. This will be activated by a level 3 mobilised. This will be activated by a level 3 response (see below) response (see below)
Stages of ActivationStages of Activation
Level 3Level 3 - Business interruption affecting the operation - Business interruption affecting the operation of the University. An incident of this nature will of the University. An incident of this nature will invoke immediate activation of the University invoke immediate activation of the University Business Continuity Plan. An example of such an Business Continuity Plan. An example of such an incident could be a terrorist attack on infrastructure incident could be a terrorist attack on infrastructure of the University or surrounding buildings, gas leak, of the University or surrounding buildings, gas leak, major fire or other infrastructure problems. Members major fire or other infrastructure problems. Members of the ECOM will be notified.of the ECOM will be notified.
Key ResponsibilitiesKey Responsibilities
Life PreservationLife Preservation MediaMedia Learning resources; Library, Media, student IT Learning resources; Library, Media, student IT
facilitiesfacilities TeachingTeaching OperationsOperations RecoveryRecovery
Business Continuity Business Continuity Management Seminar Management Seminar Friday June 27Friday June 27thth 2008 2008
… … and now over to John!and now over to John!
Departmental Plans Departmental Plans and Risk assessmentsand Risk assessments
Some Departmental Plans very detailed:Some Departmental Plans very detailed:
Systems and Services IT and Libraries Systems and Services IT and Libraries (M25)(M25)
For most Departments best approach is For most Departments best approach is based on Risk Assessment, iebased on Risk Assessment, ie
- Critical activitiesCritical activities- Critical locationsCritical locations- Critical dates and timesCritical dates and times
Departmental Departmental Emergency Plans Emergency Plans
Department:Department: Critical function:Critical function:Effect on the Department:Effect on the Department:Effect on the University:Effect on the University:Recovery timescale:Recovery timescale:Contact Information:Contact Information:Special Instructions:Special Instructions:
QUESTIONSQUESTIONS
John Friary, Health & Safety AdviserJohn Friary, Health & Safety Adviser
Steve Taylor, Head of FacilitiesSteve Taylor, Head of Facilities
Helen Kruczkowska, Insurance ManagerHelen Kruczkowska, Insurance Manager
John Sharpe, Kiln House Associated Ltd.John Sharpe, Kiln House Associated Ltd.
The Next StepsThe Next Steps
1. Departmental Business Continuity Plans 1. Departmental Business Continuity Plans (Risk Assessments) to be completed by End (Risk Assessments) to be completed by End of July 2008of July 2008
2. Desk Top Exercise with Emergency 2. Desk Top Exercise with Emergency Management Team (EMR) and Emergency Management Team (EMR) and Emergency Response Team (ERT) September 2008Response Team (ERT) September 2008
3. Review of Estates Emergency Response 3. Review of Estates Emergency Response Plan and Business Continuity Plan in 2009 Plan and Business Continuity Plan in 2009 with Desk Top Exercises (Talk Through and with Desk Top Exercises (Talk Through and Walk Through)Walk Through)