disaster recovery and contingency plan RISK MANAGEMENT MADE TO MEASURE

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "disaster recovery and contingency plan RISK MANAGEMENT MADE TO MEASURE"

Transcription

1 disaster recovery and contingency plan RISK MANAGEMENT MADE TO MEASURE

2 INTRODUCTION Contingency planning for business continuity (business continuity management) is defined by the Institute of Business Continuity Management as an holistic management process that identifies potential impacts that threaten an organisation and provides a framework for building resilience and the capability for an effective response that safeguards the interests of its key stakeholder, reputation, brand and value creating activities. Commitment To be effective a properly formulated Plan must have full support at the highest level. It requires a considerable commitment on behalf of the business. Adequate time and resources must be allocated. There may be financial demands particularly if professional help has to be in sought in formulating the plan or back-up services have to be purchased. Objectives The prime objective is to protect the business or organisation from the effects of damage or some other unforeseen event. Not all losses are covered by insurance. It may not prevent the event but will mitigate its effects. You need to anticipate critical decisions. This is achieved by considering how the business will respond to certain events and how it will be restored. It should be understood that it is not possible to plan for every conceivable disaster. Who will be involved? You may decide that you need professional help to guide you through the various stages. Such help is available from specialist companies but is likely to involve a considerable amount of their time and consequently your money. However if you feel you need such help then this is part of the financial commitment to be made. The process will certainly involve your own Management and certain key personnel, as you know your business best. Also major strategic decisions will possibly have to be made which may affect the future activities of the business. The whole process needs to be controlled and steered by a Business Recovery Manager, Team or equivalent operating at Board level or reporting directly to the Board, depending upon the size of the organisation.

3 Procedures So how do you go about preparing your plan? There are no set procedures for this as every organisation is different and has its own problems. Whatever method you choose it needs to be structured, and the following sequence is suggested: Risk Assessment: You need to examine the threats to the business. These can be the result of natural occurrences, accidents or crime. The following list offers suggestions but is not exhaustive: Fire Flood Storm Burglary Malicious damage Computer failure Telecommunications failure Explosion Earthquake Bomb Arson Pollution Building services failure Subsidence The assessment needs to consider the likely effects of such events on the business and staff, short term and long term. For certain processes, especially chemical, a Hazard and Operability (HAZOP) study may be necessary to establish likely failure points and damage scenarios. What the effect is likely to be of an interruption of supplies or services to customers. It is vital to identify the critical areas and assets of the business. Events outside the organisation also need to be considered such as suppliers or nearby premises. The capability of existing protection measures, or lack of, should be measured against the likely effects. Such measures would include sprinklers, fire and intruder detection systems and flood protection schemes. (This is one area were professional help may be needed. You may not have the necessary knowledge and experience in this area and may underestimate the likely causes and effects). It may be decided as a result of the risk assessment that an improvement in the fire protection measures or some other strategy such as better computer back-up procedures is necessary.

4 Decide strategy: Having identified the risks to the business, and in particular the critical areas, the Management need to decide a number of key parameters: What are the maximum time scales for the recovery of key areas; this could be for partial and complete recovery. Criticality of customer base; degree to which it needs to be defended and prioritised. Degree of back-up resources necessary, especially in relation to computers and telecommunications. Policy on suppliers of critical raw materials, components and services, e.g. dual sourcing or strategic stock holding. Take opportunity to rebuild or relocate premises. Establish Planning Teams: Having identified the main priorities and set the principal parameters and targets, teams need to be formed to investigate further and establish how these objectives are to be achieved. Different teams may be necessary to deal with different threats or divisions within the organisation, typically the IT department. Team leaders should be appointed who should report back to the main Business Recovery Team, and who will be supported by representatives of all involved departments. These would include, for example, works engineering, production, sales, administration and warehouse staff. Plan development: The key to a successful plan is that it is clear, concise and gives simple instructions. It should be broken down into three main areas of immediate response, short term recovery and long term recovery: 1. Immediate Response: The following are typical of the main points to be addressed: Establish an incident control team. Membership may vary depending on the type of event, and reserve members will be needed in the event of illness or holidays. Where will they meet? for an organisation with a single premises this may have to be a local hotel, friendly neighbouring business etc. but one not vulnerable to the same incident. Define the duties of the incident control team members. Safety of personnel; evacuation procedures and roll calls. For bomb threats, safe shelter areas within the premises may be necessary.

5 Damage limitation procedures such as isolation of gas or oil supplies, flood defence measures etc. Prepare lists of usual contact numbers (day and night) of key staff, emergency services, suppliers of emergency equipment such as generators or dehumidifiers, coach hire companies, tradesmen and tool hire companies. You will also need to advise your insurance broker/company. It can often be arranged for specific Loss Adjuster to be contacted. News media control: all communication should be through a dedicate person and other staff should be instructed to direct enquiries to that person. Incorrect or inadequate information can easily become distorted resulting in wrong messages being received by customers and the public. If handled correctly good PR can help the organisation s own image by showing that you are in control. Communication with staff: many staff may be better at home until needed. A cascade telephoning system should be considered. Arrangements for communicating with relatives or next of kin need to be agreed in the event of fatalities or serious injuries. Communication with customers: it is better for them to hear of the event from you rather than your competitors or news media. If you show you are in control you have a much better chance of keeping them. Salvage experts are invaluable in relation to damage limitation and recovery and may need to be called in at a very early stage if they are to be effective. The agreement of the Loss Adjuster would normally be required first. Designated team to carry out initial damage assessment: protective clothing and safety wear may be necessary. Bear in mind that Police and emergency services may not allow access immediately. Report to main Business Recovery team to make decision on invocation of full contingency plan. 2. Short and Long Term Planning: These sections will inevitably overlap, and depending on the criticality, may also overlap with the Immediate response actions. The requirements for industrial and computer-based organisations are very different and are therefore considered separately. Criteria to be considered would include: Industrial Define conditions for decision on whether to move (temporary or permanent). Planning permission for redeveloping existing sited should be kept in force and up to date.

6 Possibility of relocating production or processing to other locations; it should be explored beforehand whether production facilities are compatible and the likely spare capacity situation. Likely impact on Quality Standard procedures. Possibility of sub-contracting: likely candidates should be examined particularly if QA standards or other accreditation is involved. Replacement of machinery and stocks. Availability of critical drawings for dies, moulds, tooling and specialist machinery. Are copies held off site? If facilities can be provided inhouse is a duplicate mirrored computer room necessary or a cold sire where replacement equipment can be plugged in straight in. Will back-up copies of software and data be available access may not be possible to fire-resisting data cabinets for several days. Is there adequate provision for office staff with telephones, PCs etc. as necessary. Can telecommunications be restored or diverted. Explore contingency arrangements with alternative carriers or exchanges. Can damaged tools and dies be replaced quickly in the quantity needed? Are critical items and spares kept in a safe area not in use. Computers Critically of installations. Can recovery be made in the required time frame? If not, then what standby facilities are necessary and can these be provided in-house. If not, then arrangements mat need to be made with a specialist recovery company with a hot, warm or mobile site.

7 The finished plan The finished plan needs to be proved and should therefore be tested through a series of exercises. These can be desktop sessions but in some cases a simulated exercise, possibly involving the emergency services, could be staged. It is important for a thorough review of the exercise to be carries out and the plan revised if necessary. Because the organisation is a live entity it will continue to change and evolve and the plan therefore needs to change with it. Regular practices and reviews are therefore necessary o keep up to date and to act as a refresher for staff. The finished plan is a vital document and needs to be treated as such. Copies should be kept of site and lodged with all key members of the Recovery Team.

8 VERSION: april 2006 Wigham House Wakering Road Barking, Essex IG11 8PJ IBEX HOUSE Minories London EC3N 1DY Century House North Station Road Colchester, Essex CO1 1RE Colman House King Street Maidstone, Kent ME15 1DN CROYDOn 28 Dingwall Road Croydon, Surrey CR0 2NH Westmead House Farnborough Hampshire GU14 7LP

Business Continuity Plan

Business Continuity Plan Business Continuity Plan IMMEDIATE ACTIONS Manager/Supervisor 1. Ensure emergency services contacted 2. Ensure safety of personnel 3. Co-ordinate with the emergency services 4. Contact Senior members of

More information

BUSINESS CONTINUITY MANAGEMENT IN THE PUBLIC SECTOR A ROUGH GUIDE

BUSINESS CONTINUITY MANAGEMENT IN THE PUBLIC SECTOR A ROUGH GUIDE BUSINESS CONTINUITY MANAGEMENT IN THE PUBLIC SECTOR A ROUGH GUIDE Introduction 1. Recently many organisations both public and private have directed much more time, money and effort towards protecting service

More information

Business Continuity Planning advice for Businesses with 50-250 employees

Business Continuity Planning advice for Businesses with 50-250 employees Business Continuity Planning advice for Businesses with 50-250 employees Where to begin? A business continuity plan should consist of a business and contingencies analysis. It needs to be developed by

More information

Business Continuity Management For Small to Medium-Sized Businesses

Business Continuity Management For Small to Medium-Sized Businesses Business Continuity Management For Small to Medium-Sized Businesses Produced by NORMIT and Norfolk County Council Resilience Team For an electronic copy of this document visit www.normit.org Telephone

More information

Risk Management Guidelines

Risk Management Guidelines Business Continuity Management Understanding Risk We live in an unpredictable world. No matter how effectively a business protects itself through insurance, there are some risks that cannot be anticipated,

More information

Business Continuity Planning

Business Continuity Planning Business Continuity Planning Assistance for Young Enterprise Business Continuity Planning for small to medium-sized businesses This information will guide you through some steps that could help your business

More information

An Introduction to. Business Continuity Planning

An Introduction to. Business Continuity Planning An Introduction to Business Continuity Planning Company Profile Practical Experience European Head Office Extensive Client Base Established 1998 Expert Consultants Global Network Why BCP? I am often asked

More information

The 10 Minute Business Continuity Assessment

The 10 Minute Business Continuity Assessment How would your business cope if an emergency evacuation was needed and you couldn t return for a week, or it suffered a serious flood? What would you do if a staff syndicate quit their jobs after winning

More information

Coping with a major business disruption. Some practical advice

Coping with a major business disruption. Some practical advice Coping with a major business disruption Some practical advice Coping with a major business disruption What is business continuity? Business continuity planning (BCP) is a management process that helps

More information

Business Continuity Planning

Business Continuity Planning WWW. BASILDON. GOV. UK A guide to Business Continuity Planning Would your business survive a crisis? FOREWORD The Civil Contingencies Act 2004 introduced a responsibility on all local authorities to raise

More information

BUSINESS CONTINUITY MANAGEMENT A Guide for Businesses In Northamptonshire

BUSINESS CONTINUITY MANAGEMENT A Guide for Businesses In Northamptonshire BUSINESS CONTINUITY MANAGEMENT A Guide for Businesses In Northamptonshire 1 What is Business Continuity? Business Continuity is a planning process which provides a framework to ensure the resilience of

More information

Preparing a Disaster Recovery Plan (Church)

Preparing a Disaster Recovery Plan (Church) Preparing a Disaster Recovery Plan (Church) In the event of a serious fire, a church may be required to close during the rebuilding period. The rebuilding process can take up to two years or more. Heritage

More information

GUIDANCE ON THE COMPILATION OF BUSINESS CONTINUITY PLANS. Front cover Add your logo, company name and the date the plan was last amended.

GUIDANCE ON THE COMPILATION OF BUSINESS CONTINUITY PLANS. Front cover Add your logo, company name and the date the plan was last amended. LINCOLNSHIRE SUPPORTING PEOPLE GUIDANCE ON THE COMPILATION OF BUSINESS CONTINUITY PLANS Front cover Add your logo, company name and the date the plan was last amended. Distribution list List who has a

More information

Assessment of natural hazards, man made hazards, technical and societal related risks and associated impact.

Assessment of natural hazards, man made hazards, technical and societal related risks and associated impact. Aon Business Continuity Planning The Aon Business Continuity Planning practice provides consulting services that allow Aon clients to measure and manage their strategic and tactical risks through Crisis

More information

Contingency Planning

Contingency Planning 22-23 September, 2010, Hotel La Plaza, Brussels, Belgium Contingency Planning Peter Sommer London School of Economics, Open University peter@pmsommer.com p.m.sommer sommer@lse.ac..ac.uk Assumptions Your

More information

Business Continuity Management & Disaster Recovery GETTING STARTED Checklist for Local Businesses & Organisations

Business Continuity Management & Disaster Recovery GETTING STARTED Checklist for Local Businesses & Organisations Business Continuity Management & Disaster Recovery GETTING STARTED Checklist for Local Businesses & Organisations Name of Organisation: Date: This Document has been designed to assist local businesses

More information

Offsite Disaster Recovery Plan

Offsite Disaster Recovery Plan 1 Offsite Disaster Recovery Plan Offsite Disaster Recovery Plan Presented By: Natan Verkhovsky President Disty Portal Inc. 2 Offsite Disaster Recovery Plan Introduction This document is a comprehensive

More information

Business Continuity Plan Template

Business Continuity Plan Template Business Continuity Plan Template Disclaimer This publication has been produced to provide a guide for people anticipating going into business and for business owners. It should not be regarded as an

More information

Would Your Business survive a crisis?

Would Your Business survive a crisis? Would Your Business survive a crisis? A guide to business continuity Planning. Emergency Planning in Partnership Page 1 A guide to Business Continuity Planning. The main objective of a Business Continuity

More information

THE INSURANCE POLICY: SIMPLIFIED!

THE INSURANCE POLICY: SIMPLIFIED! THE INSURANCE POLICY: SIMPLIFIED! INSURANCE CONTRACT: COMMERCIAL PROPERTY AND BUSINESS INCOME The insurance policy is a contract and as such, is governed by its conditions, provisions, and exclusions.

More information

BUSINESS CONTINUITY GUIDE FOR SMALL BUSINESSES

BUSINESS CONTINUITY GUIDE FOR SMALL BUSINESSES INTRODUCTION BUSINESS CONTINUITY GUIDE FOR SMALL BUSINESSES Organisations that have a business continuity capability are far more likely to survive the effects of a major incident than those that don t.

More information

It s the Business! Business continuity considerations for all organisations

It s the Business! Business continuity considerations for all organisations It s the Business! Business continuity considerations for all organisations It ll never happen to me That s what they all say isn t it? But it happens a lot more than you d think. Statistics show that

More information

Appendix 6c. Final Internal Audit Report Disaster Recovery Planning. June 2007. Report 6c Page 1 of 15

Appendix 6c. Final Internal Audit Report Disaster Recovery Planning. June 2007. Report 6c Page 1 of 15 Appendix 6c Final Internal Audit Report Disaster Recovery Planning June 2007 Report 6c Page 1 of 15 Contents Page Executive Summary 3 Observations and Recommendations 8 Appendix 1 - Audit Framework 13

More information

IT Disaster Recovery Plan Template

IT Disaster Recovery Plan Template HOPONE INTERNET CORP IT Disaster Recovery Plan Template Compliments of: Tim Sexton 1/1/2015 An information technology (IT) disaster recovery (DR) plan provides a structured approach for responding to unplanned

More information

IT Disaster Recovery Plan Template. By Paul Kirvan, CISA, CISSP, FBCI, CBCP

<Client Name> IT Disaster Recovery Plan Template. By Paul Kirvan, CISA, CISSP, FBCI, CBCP IT Disaster Recovery Plan Template By Paul Kirvan, CISA, CISSP, FBCI, CBCP Revision History REVISION DATE NAME DESCRIPTION Original 1.0 2 Table of Contents Information Technology Statement

More information

Emergency Response and Business Continuity Management Policy

Emergency Response and Business Continuity Management Policy Emergency Response and Business Continuity Management Policy Owner: John Duffy, Registrar & Secretary Last updated: September 2012 Version: 04 Document control Date Version Author Changes To be populated

More information

Disaster Recovery. 1.1 Introduction. 1.2 Reasons for Disaster Recovery. EKAM Solutions Ltd Disaster Recovery

Disaster Recovery. 1.1 Introduction. 1.2 Reasons for Disaster Recovery. EKAM Solutions Ltd Disaster Recovery Disaster Recovery 1.1 Introduction Every day, there is the chance that some sort of business interruption, crisis, disaster, or emergency will occur. Anything that prevents access to key processes and

More information

Disaster Recovery. Hendry Taylor Tayori Limited

Disaster Recovery. Hendry Taylor Tayori Limited Disaster Recovery Hendry Taylor Tayori Limited Agenda What is Business Continuity planning (BCP) What is Disaster Recovery (DR) and Disaster Recovery Planning (DRP) Overview Lifecycle Analysis Plan design

More information

Audit and Governance Committee 24 September 2015 Business Continuity Plan

Audit and Governance Committee 24 September 2015 Business Continuity Plan Audit and Governance Committee 24 September 2015 Business Continuity Plan For Information Portfolio Holder(s) Environmental Protection & Assets Senior Leadership Team Contact: Strategic Director 1. Purpose

More information

Business Continuity Planning advice for Businesses with over 250 employees

Business Continuity Planning advice for Businesses with over 250 employees Business Continuity Planning advice for Businesses with over 250 employees Where to begin? You can compose an effectual business continuity plan in a relatively short period and for little expenditure.

More information

Information Security Policy. Chapter 11. Business Continuity

Information Security Policy. Chapter 11. Business Continuity Information Security Policy Chapter 11 Business Continuity Author: Policy & Strategy Team Version: 0.5 Date: July 2008 Version 0.5 Page 1 of 6 Document Control Information Document ID Document title Sefton

More information

Business Continuity Planning in IT

Business Continuity Planning in IT Introduction: Business Continuity Planning in IT The more your business relies on its IT systems, the more you need to consider how unexpected disruptions might affect your business. These disruptions

More information

Business Continuity Plan Toolkit

Business Continuity Plan Toolkit Business Continuity Plan Toolkit March 2015 1 Contents The Template instructions for use... 2 Introduction... 3 What is the purpose of this toolkit?... 3 Why do you need a Business Continuity Plan?...

More information

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA 1 Chapter-4: Business Continuity Planning and Disaster Recovery Planning PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA Learning Objectives 2 To understand the concept of Business Continuity Management To understand

More information

BUSINESS CONTINUITY POLICY RM03

BUSINESS CONTINUITY POLICY RM03 BUSINESS CONTINUITY POLICY RM03 Applies to: All NHS LA employees, contractors, secondees and consultants, contractors and/or any other parties who will carry out duties on behalf of the NHS LA Version:

More information

BUSINESS CONTINUITY ASSESSMENT CHECKLIST

BUSINESS CONTINUITY ASSESSMENT CHECKLIST BUSINESS CONTINUITY ASSESSMENT CHECKLIST This assessment checklist will help you put your business continuity plan together. The assessment has been split into sections for ease of reference. Document

More information

5-02-15. Andres Llana, Jr. INSIDE. Upper Management s Role; Delegating Responsibilities; Minimum Plan Outline; Business Impact Analysis

5-02-15. Andres Llana, Jr. INSIDE. Upper Management s Role; Delegating Responsibilities; Minimum Plan Outline; Business Impact Analysis 5-02-15 INFORMATION MANAGEMENT: STRATEGY, SYSTEMS, AND TECHNOLOGIES CONTINGENCY PLANNING FOR SMALL- TO MEDIUM-SIZED BUSINESSES Andres Llana, Jr. INSIDE Upper Management s Role; Delegating Responsibilities;

More information

University of Hong Kong. Emergency Management Plan

University of Hong Kong. Emergency Management Plan University of Hong Kong Emergency Management Plan (HKU emergency hotline: 3917 2882) Version 1.0 Oct 2014 (Issued by Safety Office) (Appendix 3 not included) UNIVERSITY OF HONG KONG EMERGENCY MANAGEMENT

More information

Expecting the unexpected. Business continuity in an uncertain world

Expecting the unexpected. Business continuity in an uncertain world Expecting the unexpected Business continuity in an uncertain world National Counter Terrorism Security Office (NaCTSO) The National Counter Terrorism Security Office is a police unit working to the Association

More information

GUIDE NOTES FOR SCHOOLS, ACADEMIES AND COLLEGES

GUIDE NOTES FOR SCHOOLS, ACADEMIES AND COLLEGES CONTINGENCY PLANNING GUIDE NOTES FOR SCHOOLS, ACADEMIES AND COLLEGES We have received a number of requests from schools for assistance in the preparation of a disaster recovery plan. Attached are some

More information

Business Continuity Planning and Disaster Recovery Planning

Business Continuity Planning and Disaster Recovery Planning 4 Business Continuity Planning and Disaster Recovery Planning Basic Concepts 1. Business Continuity Management: Business Continuity means maintaining the uninterrupted availability of all key business

More information

Business Continuity. Is your Business Prepared for the worse? What is Business Continuity? Why use a Business Continuity Plan?

Business Continuity. Is your Business Prepared for the worse? What is Business Continuity? Why use a Business Continuity Plan? Business Continuity Is your Business Prepared for the worse? Major emergencies can develop suddenly without warning. Situations can threaten and disrupt your business and impact upon you and your staff.

More information

The Business of Continuity

The Business of Continuity The Business of Continuity The loss of, or serious disruption to, any critical process, function or system can have a significant impact on an organisation; in some cases threatening its very survival.

More information

Business Continuity Management Governance. Frank Higgins Abu Dhabi March 2015

Business Continuity Management Governance. Frank Higgins Abu Dhabi March 2015 Business Continuity Management Governance Frank Higgins Abu Dhabi March 2015 Different Names Same Concept BCM (Business Continuity Management) BSI 25999 IPOCM (Incident Preparedness & Operational Continuity

More information

Introduction UNDERSTANDING BUSINESS CONTINUITY MANAGEMENT

Introduction UNDERSTANDING BUSINESS CONTINUITY MANAGEMENT INFORMATION SECURITY: UNDERSTANDING BUSINESS CONTINUITY MANAGEMENT FACTSHEET This factsheet will introduce you to Business Continuity Management (BCM), which is a process developed to counteract systems

More information

BUSINESS CONTINUITY PLAN

BUSINESS CONTINUITY PLAN Business Logo or Name here BUSINESS CONTINUITY PLAN FOR RESIDENTIAL CARE HOMES PRODUCED BY DURHAM CIVIL CONTINGENCIES UNIT BUSINESS CONTINUITY PLAN LIST OF CONTENTS 1. DISCLAIMER...4 2. AIM...4 3. BUSINESS

More information

80% of businesses affected by a major incident close within a month.

80% of businesses affected by a major incident close within a month. Business Continuity Management Promotion A Template for Commercial & Voluntary Organisations Could your business safely handle a major crisis to its operations with a loss of Staff, Premises, Technology,

More information

BUSINESS CONTINUITY MANAGEMENT SYSTEM STEP BY STEP GUIDE TO DEVELOPING A BUSINESS CONTINUITY MANAGEMENT SYSTEM REPUBLIC OF IRELAND

BUSINESS CONTINUITY MANAGEMENT SYSTEM STEP BY STEP GUIDE TO DEVELOPING A BUSINESS CONTINUITY MANAGEMENT SYSTEM REPUBLIC OF IRELAND BUSINESS CONTINUITY MANAGEMENT SYSTEM STEP BY STEP GUIDE TO DEVELOPING A BUSINESS CONTINUITY MANAGEMENT SYSTEM REPUBLIC OF IRELAND YOUR QUICK REFERENCE GUIDE TO THE PROCESS DEVELOPING A BUSINESS CONTINUITY

More information

Information Security Management: Business Continuity Planning. Presentation by Stanislav Nurilov March 9th, 2005 CS 996: Info. Sec. Mgmt.

Information Security Management: Business Continuity Planning. Presentation by Stanislav Nurilov March 9th, 2005 CS 996: Info. Sec. Mgmt. Information Security Management: Business Continuity Planning Presentation by Stanislav Nurilov March 9th, 2005 CS 996: Info. Sec. Mgmt. Overview BCP: Definition BCP: Need for (Why?) BCP: When BCP: Who

More information

Continuity of Operations Planning. A step by step guide for business

Continuity of Operations Planning. A step by step guide for business What is a COOP? Continuity of Operations Planning A step by step guide for business A Continuity Of Operations Plan (COOP) is a MANAGEMENT APPROVED set of agreed-to preparations and sufficient procedures

More information

Good Security. Good Business

Good Security. Good Business Good Security Good Business Good Security Good Business Attorney-General s foreword Small business plays a crucial role, not only in our nation s economy but in Australian society. We often make decisions

More information

BUSINESS CONTINUITY PLAN

BUSINESS CONTINUITY PLAN How to Develop a BUSINESS CONTINUITY PLAN To print to A4, print at 75%. TABLE OF CONTENTS SUMMARY SUMMARY WHAT IS A BUSINESS CONTINUITY PLAN? CHAPTER PREPARING TO WRITE YOUR BUSINESS CONTINUITY PLAN CHAPTER

More information

Business Continuity Planning Assessment

Business Continuity Planning Assessment Business Continuity Planning Assessment www.cheshirefire.gov.uk Every business is at risk of disruption from a variety of threats, as well as fire, these threats can include flood, loss of power or even

More information

Emergency Preparedness Guidelines

Emergency Preparedness Guidelines DM-PH&SD-P7-TG6 رقم النموذج : I. Introduction This Guideline on supports the national platform for disaster risk reduction. It specifies requirements to enable both the public and private sector to develop

More information

BUSINESS CONTINUITY POLICY

BUSINESS CONTINUITY POLICY BUSINESS CONTINUITY POLICY Last Review Date Approving Body n/a Audit Committee Date of Approval 9 th January 2014 Date of Implementation 1 st February 2014 Next Review Date February 2017 Review Responsibility

More information

BUSINESS CONTINUITY FRAMEWORK

BUSINESS CONTINUITY FRAMEWORK BUSINESS CONTINUITY FRAMEWORK DOCUMENT INFORMATION DOCUMENT TYPE: DOCUMENT STATUS: POLICY OWNER POSITION: INTERNAL COMMITTEE ENDORSEMENT: APPROVED BY: Strategic document Approved Manager Organisational

More information

BUSINESS CONTINUITY PLANNING

BUSINESS CONTINUITY PLANNING BUSINESS CONTINUITY PLANNING PureCNS Information Leaflet 001 August 2014 Introduction Organisations that have a business continuity capability are far more likely to survive the effects of a major incident

More information

SANDYMOOR SCHOOL CRISIS MANAGEMENT POLICY

SANDYMOOR SCHOOL CRISIS MANAGEMENT POLICY SANDYMOOR SCHOOL CRISIS MANAGEMENT POLICY Crisis Management Policy Contents Version History... 2 1. Introduction... 3 2. Aims and Objectives of this Policy... 4 3. Roles and Responsibilities... 4 4. Emergency

More information

Business Continuity. Introduction. Safer Business - Better Health. Issue date - December 2007

Business Continuity. Introduction. Safer Business - Better Health. Issue date - December 2007 Business Continuity Business Continuity Safer Business - Better Health Issue date - December 2007 Introduction Would your business survive if it was affected by a major incident or circumstances beyond

More information

Implementation Date: May 5, 2009. Table of Contents. Section Description Page. 1.0 Description 1. 2.0 Initial Response 2

Implementation Date: May 5, 2009. Table of Contents. Section Description Page. 1.0 Description 1. 2.0 Initial Response 2 Recommended by Emergency Preparedness Committee: April 21, 2009 Recommended by President s Council: May 1, 2009 Approved by Executive Committee: May 5, 2009 NAIT Procedures CS1.2.6 Flood Implementation

More information

PROMOTING BUSINESS CONTINUITY. Greater Manchester Local Authority Business Continuity Group

PROMOTING BUSINESS CONTINUITY. Greater Manchester Local Authority Business Continuity Group PROMOTING BUSINESS CONTINUITY Greater Manchester Local Authority Business Continuity Group What is Business Continuity? Business Continuity is a planning process, which provides a framework for ensuring

More information

Learning about an Emergency Management Plan GET READY NOW!

Learning about an Emergency Management Plan GET READY NOW! GET READY NOW! This supplemental document was designed to be used in conjunction with the Guide to an Emergency Management Plan (October 2014). It is meant to further support the emergency planning process

More information

Business continuity plan

Business continuity plan Business continuity plan CONTENTS INTRODUCTION 2 - Scope - Components BUSINESS IMPACT ANALYSIS 3 - Business Affairs - Information Technology RISK ASSESSMENT 5 - Broad Categories of Hazards - Hazard Table

More information

SCHEDULE 25. Business Continuity

SCHEDULE 25. Business Continuity SCHEDULE 25 Business Continuity 1. Scope 1.1 This schedule covers TfL s requirements in respect of: any circumstance or event which renders, or which TfL considers likely to render, it necessary or desirable

More information

BUSINESS CONTINUITY PLAN

BUSINESS CONTINUITY PLAN Business Logo Here BUSINESS CONTINUITY PLAN FOR SMALL TO MEDIUM SIZED BUSINESSES DATE :??? VERSION:?? PRODUCED BY DURHAM CIVIL CONTINGENCIES UNIT BUSINESS CONTINUITY PLAN LIST OF CONTENTS 1. DISCLAIMER...4

More information

City of Buffalo Municipal Electric Utility Energy Emergency Response

City of Buffalo Municipal Electric Utility Energy Emergency Response City of Buffalo Municipal Electric Utility Energy Emergency Response Table of Contents Page 1. Goals 2 2. Types of Energy Emergencies..3 3. Utility Emergency Operating Plans.4 4. Link to General Reliability/Outage

More information

Disaster Recovery Planning

Disaster Recovery Planning NASA IV & V ANNUAL WORKSHOP 202 The 4th International Workshop on Independent Verification & Validation of Software Disaster Recovery Planning Divya Krishnamoorthy Mailam Engineering College, Mailam. (Affiliated

More information

Ohio Supercomputer Center

Ohio Supercomputer Center Ohio Supercomputer Center IT Business Continuity Planning No: Effective: OSC-13 06/02/2009 Issued By: Kevin Wohlever Director of Supercomputer Operations Published By: Ohio Supercomputer Center Original

More information

BCP and DR. P K Patel AGM, MoF

BCP and DR. P K Patel AGM, MoF BCP and DR P K Patel AGM, MoF Key difference between BS 25999 and ISO 22301 ISO 22301 puts a much greater emphasis on setting the objectives, monitoring performance and metrics aligning BC to top management

More information

Dealing with risk. Why is risk management important?

Dealing with risk. Why is risk management important? Why is risk management important? Things don t always go according to plan: a company s sales manager changes employment in the middle of an important project, a packaging machine breaks down, a lathe

More information

South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy

South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy Reference No: CG 01 Version: Version 1 Approval date 18 December 2013 Date ratified: 18 December 2013 Name of Author

More information

SCHOOLS BUSINESS CONTINUITY PLANNING GUIDANCE

SCHOOLS BUSINESS CONTINUITY PLANNING GUIDANCE SCHOOLS BUSINESS CONTINUITY PLANNING GUIDANCE This guidance is to be used as a tool to support you in your business continuity planning and aligns to the schools business continuity plan template provided.

More information

PSPSOHS606A Develop and implement crisis management processes

PSPSOHS606A Develop and implement crisis management processes PSPSOHS606A Develop and implement crisis management processes Revision Number: 1 PSPSOHS606A Develop and implement crisis management processes Modification History Not applicable. Unit Descriptor Unit

More information

Resilience Audit Checklist ORG 5 RESILIENCE AUDIT CHECKLIST ORG 5

Resilience Audit Checklist ORG 5 RESILIENCE AUDIT CHECKLIST ORG 5 ORG 5 Andrew Wood, Organisational Resilience Consultant 1 Introduction We define organisational resilience as the ability and capability to anticipate, avoid, deter, protect, respond and adapt to threats

More information

Emergency management in Cardiff. A practical guide

Emergency management in Cardiff. A practical guide Emergency management in Cardiff A practical guide Emergency management in Cardiff Introduction It is very unlikely that any of us will ever be caught up in an emergency or disaster, but by being informed

More information

BNA FEDERAL CREDIT UNION DISASTER RECOVERY PLAN

BNA FEDERAL CREDIT UNION DISASTER RECOVERY PLAN BNA FEDERAL CREDIT UNION DISASTER RECOVERY PLAN INTRODUCTION The need for a contingency plan for business interruptions is vital to the operations of the BNA Federal Credit Union. Without such a plan,

More information

How to Prepare for an Emergency: A Disaster and Business Recovery Plan

How to Prepare for an Emergency: A Disaster and Business Recovery Plan How to Prepare for an Emergency: A Disaster and Business Recovery Plan Chapter 1: Overview of the Disaster and Business Recovery Plan Purpose: To develop and establish a comprehensive Disaster and Business

More information

Disaster Recovery Plan July 2013

Disaster Recovery Plan July 2013 Disaster Recovery This plan has been formulated to ensure that any impact on business continuity, following any emergency situations such as floods, acts of vandalism or terrorism, pandemic, explosion,

More information

BUSINESS CONTINUITY MANAGEMENT POLICY

BUSINESS CONTINUITY MANAGEMENT POLICY BUSINESS CONTINUITY MANAGEMENT POLICY AUTHORISED BY: DATE: Andy Buck Chief Executive March 2011 Ratifying Committee: NHS Rotherham Board Date Agreed: Issue No: NEXT REVIEW DATE: 2013 1 Lead Director John

More information

NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00)

NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) Subject and version number of document: Serial Number: Business Continuity Management Policy

More information

Insurance. for your small. business

Insurance. for your small. business Insurance for your small business @BritishInsurers As an employer, you are legally required to have Employers Liability Insurance. If you use motor vehicles for your business, you are legally required

More information

A GUIDE TO BUSINESS CONTINUITY PLANNING

A GUIDE TO BUSINESS CONTINUITY PLANNING A GUIDE TO BUSINESS CONTINUITY PLANNING Introduction The Civil Contingencies Act 2004 places a duty on Local Authorities to ensure that local businesses and voluntary sector organisations in their area

More information

University of Nottingham Emergency Procedures and Recovery Policy

University of Nottingham Emergency Procedures and Recovery Policy University of Nottingham Emergency Procedures and Recovery Policy Guidelines for High Hazard Schools and Departments 1. Introduction The University of Nottingham is committed to the identification and

More information

Disaster Recovery Plan (DRP) / Business Continuity Plan (BCP)

Disaster Recovery Plan (DRP) / Business Continuity Plan (BCP) Preface Computer systems are the core tool of today s business and are vital to every business from the smallest to giant organizations. Money transactions, customer service are just simple examples. Despite

More information

IT Disaster Recovery and Business Resumption Planning Standards

IT Disaster Recovery and Business Resumption Planning Standards Information Technology Disaster Recovery and Business IT Disaster Recovery and Business Adopted by the Information Services Board (ISB) on May 28, 1992 Policy No: Also see: 500-P1, 502-G1 Supersedes No:

More information

[INSERT NAME OF SCHOOL] BUSINESS CONTINUITY PLAN

[INSERT NAME OF SCHOOL] BUSINESS CONTINUITY PLAN Plan Ref No: [INSERT NAME OF SCHOOL] BUSINESS CONTINUITY PLAN PLAN DETAILS Date Written Plan Owner Plan Writer Version Number Review Schedule 6 monthly Annually Date of Plan Review Date of Plan Exercise

More information

Recovery Action Plan Guidelines

Recovery Action Plan Guidelines Recovery Action Plan Guidelines July 2011 TABLE OF CONTENTS Section 1: Introduction... 3 Audience... 3 Background... 3 Purpose... 3 Section 2: Development of a Recovery Action Plan... 4 Information Sources...

More information

Checklist Fire, Water Damage, Storm Damage or similar

Checklist Fire, Water Damage, Storm Damage or similar Checklist Fire, Water Damage, Storm Damage or similar Get a clear picture of the event. What has happened/is about to happen? The fire officer/leader of the rescue operation is informed of the abovementioned

More information

Business Continuity Planning and Disaster Recovery Planning. Ed Crowley IAM/IEM

Business Continuity Planning and Disaster Recovery Planning. Ed Crowley IAM/IEM Business Continuity Planning and Disaster Recovery Planning Ed Crowley IAM/IEM 1 Goals Compare and contrast aspects of business continuity Execute disaster recovery plans and procedures 2 Topics Business

More information

Corporate Business Continuity Plan

Corporate Business Continuity Plan Corporate Business Continuity Plan Introduction The Council is a major business in the Town, and as part of its Quality Management System must ensure that it can recover quickly from a disaster which affects

More information

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT JANUARY 2008 GUIDELINE ON BUSINESS CONTINUITY GUIDELINE CBK/PG/14

More information

Critical Incident Policy. Document Sponsor: Dr Stephen Weller Deputy Vice-Chancellor, University Services and Head of Campus, Cairns

Critical Incident Policy. Document Sponsor: Dr Stephen Weller Deputy Vice-Chancellor, University Services and Head of Campus, Cairns Critical Incident Policy Document Sponsor: Dr Stephen Weller Deputy Vice-Chancellor, University Services and Head of Campus, Cairns Document Date: 14 September 2011 Contents Intent... 1 Scope... 1 Definitions...

More information

Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD.

Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD. Business Continuity Management & Disaster Recovery Planning Presented by: Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD. 1 What is Business Continuity Management? Is a holistic management

More information

NHS 24 - Business Continuity Strategy

NHS 24 - Business Continuity Strategy NHS 24 - Strategy Version: 0.3 Issue Date: 20/09/2005 Status: Issued for Board Approval Status: draft Page 1 of 13 Table of Contents 1 INTRODUCTION...3 2 PURPOSE...3 3 SCOPE...3 4 ASSUMPTIONS...4 5 BUSINESS

More information

Disaster Recovery Planning Process

Disaster Recovery Planning Process Disaster Recovery Planning Process By Geoffrey H. Wold Part I of III This is the first of a three-part series that describes the planning process related to disaster recovery. Based on the various considerations

More information

Business Continuity Management Policy

Business Continuity Management Policy Governance 1 Purpose The purpose of this policy is to communicate Business Continuity Management (BCM) framework, responsibilities and guiding principles for Victoria to effectively prepare for and achieve

More information

Section A: Introduction, Definitions and Principles of Infrastructure Resilience

Section A: Introduction, Definitions and Principles of Infrastructure Resilience Section A: Introduction, Definitions and Principles of Infrastructure Resilience A1. This section introduces infrastructure resilience, sets out the background and provides definitions. Introduction Purpose

More information

business continuity plan for:

business continuity plan for: business continuity plan for: Insert your company name here Our statement of Business Continuity is: > To ensure all employees are competent to do their tasks, and to provide adequate training > To review

More information

Business Continuity Plan

Business Continuity Plan Business Continuity Plan A guide for business operators in South Australia www.statedevelopment.sa.gov.au/smallbusiness Table of Contents 01 Introduction... 4 02 Developing your plan... 6 03 Work section...

More information

City of London Supported Housing. Incident Reporting Procedure

City of London Supported Housing. Incident Reporting Procedure City of London Supported Housing Incident Reporting Procedure Policy purpose Policy scope Legal requirements Definition of Responsibilities Mandatory procedures Practical guidance Related - Serious incident

More information