NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY"

Transcription

1 NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY

2 AUTHOR/ APPROVAL DETAILS Document Author Written By: Human Resources Authorised Signature Authorised By: Helen Shields Date: 20 th February 2013 Job Title: Human Resources Advisor Effective Date: 1 st April 2013 Approval At: CCG Governing Body Date: Job Title: Chief Officer Review Date: 20 th February 2014 Date Approved: 28 th February 2013 VERSION CONTROL Version Date Changes 1 20/02/13 First draft (amended)

3 CONTENTS Part Description Page 1 Executive Summary 4 2 Introduction 4 3 Scope 5 4 Key Responsibilities Senior Management Team Responsibilities Risk Management Lead Responsibilities Staff Responsibilities 6 5 Embedding Business Continuity into the Organisation s Culture 6 6 Developing and Implementing a Business Continuity Management Response 6 7 Determining the Business Continuity Response Flowchart 7 8 Exercising, Maintaining and Reviewing Exercising Maintaining Reviewing 9 9 Implementation / Training / Awareness 9 10 Monitoring / Key Performance Indicators References Links to Other Policies / Documents Disclaimer 10 Appendix Description Page 1 Key Definitions for Documentation 11 3

4 1. EXECUTIVE SUMMARY 1.1 The Isle of Wight Clinical Commissioning Group (herein CCG) recognises the need for effective business continuity management to ensure quality, whilst increasing cost efficiency and productivity. 1.2 The CCG has legislative obligations in relation to resilience both in planning and responding under the Civil Contingencies Act Business continuity is a key component of resilience, and all NHS funded organisations have been asked to align their business continuity arrangements with the requirements of British Standard By using this framework the CCG is able to provide an assurance to stakeholders, that it is a resilient organisation that is able to rapidly adapt to disruptions to critical services in a timely and effective way. 1.3 To align with the required standards, and best practice, the CCG Business Continuity Management Process (BCMP) will follow the four stages of the business continuity management lifecycle. The four stages are as follows:- 1) Understanding the organisation 2) Determining Business Continuity Management Policy 3) Developing and implementing Business Continuity Management Response 4) Exercising, maintaining and reviewing 1.4 The aim of this document is to introduce the necessity for Business Continuity Plans to be prepared and maintained for all areas of the CCG. 1.5 The intention of this document is to inform all staff of the legal obligations in relation to business continuity and to establish a proactive culture around resilience. This document will also provide direction to ensure that arrangements are in place to enable the CCG to react efficiently and recover from an incident that involves a loss, total or partial, of functions and services. 2. INTRODUCTION 2.1 The Business Continuity Management (BCM) is a process that ensures that there is minimal disruption to critical services and core business in the event of a major interruption / breakdown / incident and assists departments to reinstate normal services as quickly as possible. Business continuity (BC) is a key component of resilience, and all NHS funded organisations have been asked to align their business continuity arrangements with the requirements of British Standard (NHS) The benefits of an effective Business Continuity Management programme are: key products and services are identified and protected, ensuring their continuity an incident management capability is enabled to provide an effective response the organisation s understanding of itself and its relationships with other organisations, relevant regulators or government departments, local authorities and the emergency services is properly developed, documented and understood staff are trained to respond effectively to an incident or disruption through appropriate exercising stakeholder requirements are understood and able to be delivered staff receive adequate support and communications in the event of a disruption the organisation s supply chain is secured NHS Isle of Wight Clinical Commissioning Group 4

5 the organisation s reputation is protected; and the organisation remains compliant with its legal and regulatory obligations. 2.3 Code of Practice for Business Continuity Management (BS NHS ) 2.4 The CCG is also required to meet its statutory duties as defined within the Civil Contingencies Act (2004), these are: assess the risk of emergencies occurring and use this to inform contingency planning put into place emergency plans put into place Business Continuity Management arrangements put into place arrangements to make information available to the public about civil protection matters and maintain arrangements toward, inform and advise the public in the event of an emergency share information with other local responders to enhance co-ordination co-operate with other local responders to enhance co-ordination and efficiency 2.5 This policy is the first step of the initiation stage and clearly defines the framework which will ensure the Business Continuity process meets our statutory obligations. 2.6 Depending on the incident both the Major Incident and the Business Continuity plans may be activated to deliver the external and internal response. e.g. If the Isle of Wight was faced with a water contamination incident both the population of the Isle of Wight and the organisation would be affected. The activation of the plan ensures they fulfil their requirements as part of the Civil Contingency Function and also the organisation can continue to deliver its ordinary business. 3. SCOPE 3.1 This policy applies to all employees of the CCG. 4. KEY RESPONSIBILITIES 4.1 In the CCG, the Senior Management Team will be responsible for ensuring that their organisation has a Major Incident Plan in place that will be built on the principles of risk assessment, co-operation with partners, emergency planning, communicating with the public and information sharing. The plan will link into the organisation's arrangements for ensuring business continuity as required by the Civil Contingencies Act (NHS 2005 Emergency Planning Guidance) To comply with the requirements of Civil Contingencies Act the following actions are required to be undertaken by the following staff members: 4.2 The Senior Management Team responsibilities The Senior Management Team will: authorise the provision of the resources needed to establish, implement, operate and maintain a Business Continuity System support the Emergency Planning Lead to be responsible for co-ordinating the implementation of the Business Continuity System irrespective of other responsibilities determine the acceptable level of risk in relationship to Business Continuity and management of business continuity risks NHS Isle of Wight Clinical Commissioning Group 5

6 receive annual reviews following management reviews of the Business Continuity System communicate the Business Continuity Management programme to its stakeholders communicate to the organisation via the Executive lead the importance of: meeting Business Continuity management objectives conforming to the continual improvement 4.3 Risk Management Lead responsibilities The Risk Management Lead will: be responsible for ensuring an effective system is in place for monitoring, reviewing and exercising business continuity plans provide staff with support to develop their business continuity plans provide regular training to staff on business continuity provide reports on a quarterly basis to Risk management on business continuity planning 4.4 Staff responsibilities Staff will: develop business continuity plans for their services be responsible for reviewing and monitoring business continuity plans be responsible for exercising their business continuity plans be responsible for attending relevant training on business continuity 5. EMBEDDING BUSINESS CONTINUITY INTO THE ORGANIATION S CULTURE 5.1 The CCG will ensure that Business Continuity Management becomes part of its core values and effective management. To provide this the CCG will: raise, enhance and maintain awareness by the implementation of an ongoing Business Continuity education and information programme for all staff via the Mandatory training. This awareness can be raised by workshop sessions or via individual team briefings an evaluation process will be established to monitor its effectiveness 6. DEVELOPING AND IMPLEMENTING A BUSINESS CONTINUITY MANAGEMENT RESPONSE 6.1 The process is as follows: 1) Function analysis, which identifies a service areas day to day functions including those which are statutory and may be carried out as a service areas planned response to incidents. The analysis will identify resources required to deliver those functions (such as but not limited to staff, accommodation, equipment, systems and Information and Technology). 2) Process Mapping identifies stakeholders associated with the functions detailed in the function analysis. 3) Business Impact Analysis identifies the impact of failing to deliver those functions detailed within the function analysis. Financial and non-financial impacts are to be considered within the analysis as will timescales within which the failure of delivery can be tolerated (Maximum Tolerable Period of Disruption) NHS Isle of Wight Clinical Commissioning Group 6

7 Impact 4) Risk Analysis using the matrix below identifies the likelihood and impact of specific disruption. This process uses information from the Business Impact Analysis to determine the level of risk associated with disruption of a function and should take into account any mitigation in place to reduce both likelihood and impact. High PLAN REDUCE NO ACTION MANAGE / CONTROL Low Likelihood High 7. DETERMINING THE BUSINESS CONTINUITY RESPONSE FLOWCHART Function Analysis Identifies day to day functions within a service area Identifies statutory functions and those which may have excessive demands placed on them as part of a planned response Identifies stakeholders and resources required Process Mapping Identifies stakeholders through stages of functions Business Impact Analysis Details the impact of failure to carry out functions States the minimum time period within which a service area cannot provide those functions NHS Isle of Wight Clinical Commissioning Group 7

8 Risk Analysis Plots the likelihood and impact of disruption Business Continuity Response Decision Table Records outcomes of the Risk Analysis Identifies risks requiring immediate mitigation (reduce) Records options for mitigation of such risks and details reasons for and against adopting such options Business Continuity Decision Table Outcomes No action required Manage / Control Develop and manage the BCP In accordance with Establishment of Critical Functions information; Accept Risk 8. EXERCISING, MAINTAINING AND REVIEWING 8.1. Exercising All Business Continuity plans need to be exercised on an annual basis this may occur either through a table top exercise or through activation of a major incident or more localised service related incident The exercising of plans may be part of a wider major incident exercise across the CCG. The exercise programme will ensure all business continuity arrangements are validated and provide assurances that arrangements in place met the requirements of the CCG. The exercise programme has full support from the Senior Management team All exercises will be recorded on the business continuity management spread sheet All aims and objectives of the exercise will be fully documented and a report completed to the Commissioning Officers Group, which will demonstrate the organisations achievements of those aims and objectives. This report will include any relevant actions that are required and identify lessons learned and good emergency practice and any feedback from observers at an exercise or stakeholders involved in the incident. NHS Isle of Wight Clinical Commissioning Group 8

9 8.2. Maintaining Audits of Business Continuity Plans will be initiated and carried out by the Commissioning Officers Group. Audits will: be conducted by the auditor in a manner that will ensure objectivity and impartiality determine whether the Business Continuity Plan is effective in meeting the organisation s Business Continuity Management objectives determine whether the Business Continuity Plan has been properly maintained, in particular that changes following the preventative and corrective action processes have been completed take into account the results of previous audits be followed by a written report which details audit outcomes and includes required actions to be concluded Preventative and Corrective Action will be completed following reviews, exercises and audits. The Clinical Director is to ensure that such action is taken. This process will: ensure that any recommendations made as a result of Continual Improvement are completed and recorded as such provide confirmation that Business Continuity Plans have been amended following changes by completion of a Continual Improvement Record and Preventative and Corrective Action Record 6.3 Reviewing All business continuity plans need to be reviewed on an annual basis. This may be via the exercise programme or post incident or as part of the annual review process. The Senior Management Team will manage the Business Continuity review process via the Business Continuity Plan spreadsheet This policy is not intended as a linear process. The validity of the strategy lies not in the clarity or rigorously maintained structure, but in its capacity to capture the initiative, to deal with unexpected events, to redeploy and concentrate resources as new opportunities and thrusts emerge, and therefore to use resources most effectively when selected. 9. IMPLEMENTATION / TRAINING / AWARENESS 7.1 The CCG will ensure that all staff who have been assigned responsibilities defined by the Business Continuity Policy are competent to perform the required tasks by: determining necessary competencies to enable staff to perform work related to Business Continuity Management provide training via a number of platforms e.g. workshops, external courses and inductions evaluate the effectiveness of the training provided, via Evaluation reports, one to one sessions conducted by management training needs analysis to be conducted on staff assigned BCM roles and responsibilities provide the Risk Management Committee with annual review of training that has taken place and the impact it has had 7.2 In addition training and education programmes need to highlight the importance of meeting Business Continuity Management objectives and conforming to the CCG policy. NHS Isle of Wight Clinical Commissioning Group 9

10 10. MONITORING / KEY PERFORMANCE INDICATORS 10.1 Key Performance Indicators include: monitoring of the programme by the Risk Management Committee with overall responsibility held by the Clinical Director reviews and lessons learned from any incidents where Business Continuity Plans have been invoked Risk Assessment Process to compliment Business Continuity Plans 11. REFERENCES The Civil Contingencies Acts London. The Stationary Office. British Standard 25999:2007, Business Continuity Management The Business Continuity Institute Good Practice Guidelines (2008). The Business Continuity Institute. NHS Emergency Planning Guidance (2005). Department of Health. Strategy Safari (2009)., Mintzberg, H., Ahlstrand, B., Lampel, J., Prentice Hall ( Harlow). Expectations and Indications of Good Practice. Cabinet Office (2006) 12. LINKS TO OTHER POLICIES / DOCUMENTS 12.1 This policy should be read in conjunction with: BS NHS Civil Contingencies Act (2004) 13. DISCLAIMER 11.1 It is the responsibility of staff to check the organisation intranet to ensure that the most recent version/issue of this document is being referenced. NHS Isle of Wight Clinical Commissioning Group 10

11 APPENDIX 1 KEY DEFINITIONS FOR DOCUMENTATION Business Continuity (BC) Strategic and tactical capability of the organisation to plan for and response to incidents and business disruptions in order to continue business operations at an acceptable predefined level. Business Continuity Management (BCM) Holistic management process that identifies potential threats to an organisation and the impacts to business operations that those threats, if realised, might cause and which provides a framework for building organisational resilience with the capability for an effective response that safeguards the interests of its key stakeholders, reputation, brand and value creating activities. Business Continuity Management Lifecycle series of business continuity activities which collectively cover all aspects and phases of the business continuity management programme. Business Continuity Management Programme ongoing management and governance process supported by tope management and appropriately resourced to ensure the necessary steps are taken to identify the impact of potential losses, maintain viable recovery strategies and plans, and ensure continuity or products and services through training, exercising maintenance and review. Business Continuity Plan (BCP) documented collection of procedures and information that is developed, compiled and maintained in readiness for use in an incident to enable an organisation to continue to delivers its critical activities at an acceptable predefined level. Business Impact Analysis (BIA) process of analysing business functions and the effect that a business disruption might have upon them. Critical Activities those activities which have to be performed in order to deliver the key products and services which enable an organisation to meet its most important time sensitive objectives. Disruption event, whether anticipated (e.g. labour strike or hurricane) or unanticipated (e.g. a blackout or earthquake), which causes an unplanned, negative deviation from the expected delivery or products or services according to the organisations objectives. Maximum Tolerable Period of Disruption (MTPD) duration after which organisations viability will be irrevocably threatened if product and service delivery cannot be resumed. Recovery Time Objective (RTO) target time set for resumption of product, service or activity delivery after an incident. NHS Isle of Wight Clinical Commissioning Group 11 Attendance Management Policy

Business Continuity Management Policy

Business Continuity Management Policy Business Continuity Management Policy Business Continuity Policy Version 1.0 1 Version control Version Date Changes Author 0.1 April 13 1 st draft PH 0.2 June 13 Amendments in line with guidance PH 0.3

More information

BSO Board Director of Human Resources & Corporate Services Business Continuity Policy. 28 February 2012

BSO Board Director of Human Resources & Corporate Services Business Continuity Policy. 28 February 2012 To: From: Subject: Status: Date of Meeting: BSO Board Director of Human Resources & Corporate Services Business Continuity Policy For Approval 28 February 2012 The Board is asked to agree the attached

More information

NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00)

NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) Subject and version number of document: Serial Number: Business Continuity Management Policy

More information

BUSINESS CONTINUITY MANAGEMENT POLICY

BUSINESS CONTINUITY MANAGEMENT POLICY BUSINESS CONTINUITY MANAGEMENT POLICY AUTHORISED BY: DATE: Andy Buck Chief Executive March 2011 Ratifying Committee: NHS Rotherham Board Date Agreed: Issue No: NEXT REVIEW DATE: 2013 1 Lead Director John

More information

Business Continuity Policy and Business Continuity Management System

Business Continuity Policy and Business Continuity Management System Business Continuity Policy and Business Continuity Management System Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain

More information

Business Continuity Management

Business Continuity Management Business Continuity Management Policy Statement & Strategy July 2009 Basildon District Council Business Continuity Management Policy Statement The Council is committed to ensuring robust and effective

More information

CHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY AND POLICY

CHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY AND POLICY Zurich Management Services Limited Registered in England: No 2741053 Registered Office The Zurich Centre, 3000 Parkway Whiteley, Fareham Hampshire, PO15 7JZ CHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY

More information

1.0 Policy Statement / Intentions (FOIA - Open)

1.0 Policy Statement / Intentions (FOIA - Open) Force Policy & Procedure Reference Number Business Continuity Management D269 Policy Version Date 23 July 2015 Review Date 23 July 2016 Policy Ownership Portfolio Holder Links or overlaps with other policies

More information

Business Continuity Management

Business Continuity Management Business Continuity Management Standard Operating Procedure Notice: This document has been made available through the Police Service of Scotland Freedom of Information Publication Scheme. It should not

More information

Company Management System. Business Continuity in SIA

Company Management System. Business Continuity in SIA Company Management System Business Continuity in SIA Document code: Classification: Company Project/Service Year Document No. Version Public INDEX 1. INTRODUCTION... 3 2. SIA S BUSINESS CONTINUITY MANAGEMENT

More information

BUSINESS CONTINUITY POLICY

BUSINESS CONTINUITY POLICY BUSINESS CONTINUITY POLICY It should be acknowledged that emergency preparedness and business continuity within the health sector poses a range of challenges and can be a rapidly changing situation. In

More information

Proposal for Business Continuity Plan and Management Review 6 August 2008

Proposal for Business Continuity Plan and Management Review 6 August 2008 Proposal for Business Continuity Plan and Management Review 6 August 2008 2008/8/6 Contents About Newton IT / Quality of our services. BCM & BS25999 Overview 2. BCM Development in line with BS25999 3.

More information

BUSINESS CONTINUITY POLICY

BUSINESS CONTINUITY POLICY BUSINESS CONTINUITY POLICY Document Type Corporate Policy Unique Identifier CO-038 Document Purpose To provide a structure through which: i. A comprehensive business continuity management system (BCMS)

More information

WEST YORKSHIRE FIRE & RESCUE SERVICE. Business Continuity Management Strategy

WEST YORKSHIRE FIRE & RESCUE SERVICE. Business Continuity Management Strategy WEST YORKSHIRE FIRE & RESCUE SERVICE Business Continuity Management Strategy Date Issued: 12 November 2012 Review Date: 12 November 2015 Version Control Version Number Date Author Comment 0.1 June 2011

More information

Business Continuity (Policy & Procedure)

Business Continuity (Policy & Procedure) Business Continuity (Policy & Procedure) Publication Scheme Y/N Can be published on Force Website Department of Origin Force Operations Policy Holder Ch Supt Head of Force Ops Author Business Continuity

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy Page 1 of 15 Business Continuity Policy First published: Amendment record Version Date Reviewer Comment 1.0 07/01/2014 Debbie Campbell 2.0 11/07/14 Vicky Ryan Updated to include

More information

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK BUSINESS CONTINUITY MANAGEMENT FRAMEWORK Document Author: Civil Contingencies Service - Authorised by the CCS Joint Management Board - Version 1.0. Issued December 2012 Page 1 FRAMEWORK STATEMENT Business

More information

NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy. Version 1.0

NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy. Version 1.0 NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy Version 1.0 Document Control Title: Status: Version: 1.0 Issue date: May 2014 Document owner: (Name,

More information

Business Continuity Management Framework 2014 2017

Business Continuity Management Framework 2014 2017 Business Continuity Management Framework 2014 2017 Blackpool Council Business Continuity Framework V3.0 Page 1 of 13 CONTENTS 1.0 Forward 03 2.0 Administration 04 3.0 Policy 05 4.0 Business Continuity

More information

BUSINESS CONTINUITY POLICY

BUSINESS CONTINUITY POLICY BUSINESS CONTINUITY POLICY Last Review Date Approving Body n/a Audit Committee Date of Approval 9 th January 2014 Date of Implementation 1 st February 2014 Next Review Date February 2017 Review Responsibility

More information

Business Continuity Management

Business Continuity Management Business Continuity Management Version 1 approved by SMG December 2013 Business Continuity Policy Version 1 1 of 9 Business Continuity Management Summary description: This document provides the rationale

More information

Business Continuity Management. Policy Statement and Strategy

Business Continuity Management. Policy Statement and Strategy Business Continuity Management Policy Statement and Strategy November 2011 Title Business Continuity Management Policy & Strategy Date of Publication: Cabinet Council Published by Borough Council of King

More information

Solihull Clinical Commissioning Group

Solihull Clinical Commissioning Group Solihull Clinical Commissioning Group Business Continuity Policy Version v1 Ratified by SMT Date ratified 24 February 2014 Name of originator / author CSU Corporate Services Review date Annual Target audience

More information

NHS Hardwick Clinical Commissioning Group. Business Continuity Policy

NHS Hardwick Clinical Commissioning Group. Business Continuity Policy NHS Hardwick Clinical Commissioning Group Business Continuity Policy Version Date: 26 January 2016 Version Number: 2.0 Status: Approved Next Revision Due: January 2017 Gordon Stevens MBCI Corporate Assurance

More information

TRUST POLICY FOR EMERGENCY PLANNING

TRUST POLICY FOR EMERGENCY PLANNING TRUST POLICY FOR EMERGENCY PLANNING Reference Number: CL-OP/ 2013/027 Version: 1.4 Status: New Draft Author: Ashley Reed Job Title: Head of Security and EPO Version / Amendment History Version Date Author

More information

Appendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015. Business Continuity Policy Statement 2015

Appendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015. Business Continuity Policy Statement 2015 Appendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015 Business Continuity Policy Statement 2015 This Policy sets the direction for Business Continuity

More information

www.td.com.au Business Continuity - IT Disaster Recovery Discussion Paper - - Commercial in Confidence Version V2.0R Wednesday, 5 September 2012

www.td.com.au Business Continuity - IT Disaster Recovery Discussion Paper - - Commercial in Confidence Version V2.0R Wednesday, 5 September 2012 Business Continuity - IT Disaster Recovery Discussion Paper - - Version V2.0R Wednesday, 5 September 2012 Commercial in Confidence Melbourne Sydney 79-81 Coppin St Level 2 Richmond VIC 3121 414 Kent St

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain its essential business functions during

More information

Business Continuity Management (BCM) Policy

Business Continuity Management (BCM) Policy Business Continuity Management (BCM) Policy Reference number: Corporate 042 Title: Business Continuity Management (BCM) Policy Version number: Version 2 Policy Approved by: LLR PCT Cluster Board Date of

More information

NOT PROTECTIVELY MARKED BUSINESS CONTINUITY. Specialist Operations Contingency Planning Business Continuity Manager 17.09.12

NOT PROTECTIVELY MARKED BUSINESS CONTINUITY. Specialist Operations Contingency Planning Business Continuity Manager 17.09.12 POLICY BUSINESS CONTINUITY Policy owners Policy holder Author Head of Services Specialist Operations Contingency Planning Business Continuity Manager Policy No. 132 Approved by Legal Services 17.09.12

More information

Principles for BCM requirements for the Dutch financial sector and its providers.

Principles for BCM requirements for the Dutch financial sector and its providers. Principles for BCM requirements for the Dutch financial sector and its providers. Platform Business Continuity Vitale Infrastructuur Financiële sector (BC VIF) Werkgroep BCM requirements 21 September 2011

More information

By. Mr. Chomnaphas Tangsook Business Director BSI Group ( Thailand) Co., Ltd

By. Mr. Chomnaphas Tangsook Business Director BSI Group ( Thailand) Co., Ltd BS 25999 Business Continuity Management By. Mr. Chomnaphas Tangsook Business Director BSI Group ( Thailand) Co., Ltd 1 Contents slide BSI British Standards 2006 BS 25999(Business Continuity) 2002 BS 15000

More information

Business Continuity Management

Business Continuity Management Annex A Business Continuity Management Programme Business Continuity Management Policy 1. Introduction This Business Continuity Management (BCM) Policy defines the scope of the SPCB s ability to maintain

More information

TRANSPORT FOR LONDON SAFETY, HEALTH AND ENVIRONMENT ASSURANCE COMMITTEE

TRANSPORT FOR LONDON SAFETY, HEALTH AND ENVIRONMENT ASSURANCE COMMITTEE AGENDA ITEM 9 TRANSPORT FOR LONDON SAFETY, HEALTH AND ENVIRONMENT ASSURANCE COMMITTEE SUBJECT: REVIEW OF TFL RESILIENCE MANAGEMENT POLICY FRAMEWORK DATE: 20 JULY 2010 1 PURPOSE AND DECISION REQUIRED 1.1

More information

BUSINESS CONTINUITY MANAGEMENT POLICY

BUSINESS CONTINUITY MANAGEMENT POLICY This document is uncontrolled once printed. Please check on the CCG s Intranet site for the most up to date version BUSINESS CONTINUITY MANAGEMENT POLICY DOCUMENT CONTROL Type of Document Document Title

More information

South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy

South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy Reference No: CG 01 Version: Version 1 Approval date 18 December 2013 Date ratified: 18 December 2013 Name of Author

More information

Risk Management & Business Continuity Manual 2011-2014

Risk Management & Business Continuity Manual 2011-2014 ANNEX C Risk Management & Business Continuity Manual 2011-2014 Produced by the Risk Produced and by the Business Risk and Business Continuity Continuity Team Team February 2011 April 2011 Draft V.10 Page

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy Reference Number: 243 Author & Title: Siân Dyson Resilience Manager Responsible Director: Chief Operating Officer Review Date: 29 May 2018 Ratified by: Francesca Thompson Chief

More information

BUSINESS CONTINUITY MANAGEMENT POLICY

BUSINESS CONTINUITY MANAGEMENT POLICY BUSINESS CONTINUITY MANAGEMENT POLICY Version No: 1 Issue Status: awaiting Trust Board approval Date of Ratification: 11th April 2012 Ratified by: Risk Management Committee Policy Author(s): Stuart Coalwood

More information

Appendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016

Appendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016 Appendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016 Policy Statement - 2016 This Policy sets the direction for Business Continuity Management at Leicester

More information

Business Continuity Management Policy

Business Continuity Management Policy Governance: Business Committee Policy Owner: Chief Superintendent, Corporate Services Department: Corporate Services Policy Number: 002 Version: 3.0 Policy Writer: Business Continuity Co-ordinator Effective

More information

WILTSHIRE POLICE FORCE POLICY

WILTSHIRE POLICE FORCE POLICY Template v4 WILTSHIRE POLICE FORCE POLICY BUSINESS CONTINUITY MANAGEMENT SYSTEMS (BCMS) Effective from: July 2013 Version: 2.0 Next Review Date: July 2015 POLICY STATEMENT Wiltshire Police has a statutory

More information

HEALTH AND SOCIAL CARE BOARD POLICY ON BUSINESS CONTINUITY MANAGEMENT

HEALTH AND SOCIAL CARE BOARD POLICY ON BUSINESS CONTINUITY MANAGEMENT HEALTH AND SOCIAL CARE BOARD POLICY ON BUSINESS CONTINUITY MANAGEMENT February 2012 1 Role of the Health and Social Care Board The role of the Health and Social Care Board (the Board) is broadly contained

More information

Council Policy Business Continuity Management

Council Policy Business Continuity Management Policy Name: Business Continuity Management Council Policy Business Continuity Management ADOPTED BY COUNCIL: 19 th April 2016 DATE OF NEXT REVIEW: 18 th April 2020 RESPONSIBLE OFFICER: REFERENCES: Chief

More information

Update from the Business Continuity Working Group

Update from the Business Continuity Working Group 23 June 2014 Performance and Resources Board 19 To note Update from the Business Continuity Working Group Issue 1 The Business Continuity Working Group oversees the development, maintenance and improvement

More information

Essex Clinical Commissioning Groups. Business Continuity Management System. Scope and Policy

Essex Clinical Commissioning Groups. Business Continuity Management System. Scope and Policy Essex Clinical Commissioning Groups Essex Clinical Commissioning Groups Business Continuity Management System Scope and Policy Policy Author: Daniel Hale - Head of Emergency Planning Version: 1.0 Date

More information

BS a framework for resilience and success. Robert Whitcher BCI Webinar June, 2009

BS a framework for resilience and success. Robert Whitcher BCI Webinar June, 2009 BS 25999 a framework for resilience and success Robert Whitcher BCI Webinar June, 2009 2 Scope of Presentation The Standards process Drivers for BCM and BS 25999 BS 25999 development Overview of BS 25999

More information

Emergency Response and Business Continuity Management Policy

Emergency Response and Business Continuity Management Policy Emergency Response and Business Continuity Management Policy Owner: John Duffy, Registrar & Secretary Last updated: September 2012 Version: 04 Document control Date Version Author Changes To be populated

More information

abcdefghijklmnopqrstu

abcdefghijklmnopqrstu abcdefghijklmnopqrstu Business Continuity A Framework for NHS Scotland Strategic Guidance for NHS Organisations in Scotland 1 Contents 1. Introduction 4 1.1 Business Continuity Overview 5 2. Roles and

More information

Business Continuity Management Policy

Business Continuity Management Policy i Business Continuity Management Policy Version: Version 1.0 Ratified by: Governing Body Date ratified: July 2013 Name of originator/author: Alison Fox Name of responsible committee/individual: Head of

More information

BUSINESS CONTINUITY & STRATEGY POLICY

BUSINESS CONTINUITY & STRATEGY POLICY BUSINESS CONTINUITY & STRATEGY POLICY Authorship: Chris Wallace, Information Governance Manager Committee Approved: Quality and Clinical Governance Committee Approved date: 1 Feb 2014 Review Date: Jan

More information

Business Continuity Management AIRM Presentation

Business Continuity Management AIRM Presentation 16 January, 2008 Business Continuity Management AIRM Presentation David Hamilton, Senior Consultant http://www.marsh.ie Presentation Overview Terms used for BCP Where BCM fits in a business plan Business

More information

Introduction to Business Continuity Management (BCM) Andy Fyfe MBCI Resilience Manager Buckinghamshire County Council

Introduction to Business Continuity Management (BCM) Andy Fyfe MBCI Resilience Manager Buckinghamshire County Council Introduction to Business Continuity Management (BCM) Andy Fyfe MBCI Resilience Manager Buckinghamshire County Council Aim To provide an introduction to Business Continuity Management (BCM). Objectives

More information

Birmingham CrossCity Clinical Commissioning Group. Business Continuity Management Policy

Birmingham CrossCity Clinical Commissioning Group. Business Continuity Management Policy Birmingham CrossCity Clinical Commissioning Group Business Continuity Management Policy Version V1.0 Ratified by Operational Development Group Date ratified 6 th November 2014 Name of originator / author

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy 1 NHS England INFORMATION READER BOX Directorate Medical Commissioning Operations Patients and Information Nursing Trans. & Corp. Ops. Commissioning Strategy Finance Publications

More information

I attach the following documents in response:

I attach the following documents in response: London Fire Brigade Headquarters 169 Union Street London SE1 0LL T 020 8555 1200 F 020 7960 3602 Minicom 020 7960 3629 www.london-fire.gov.uk Freedom of Information request reference number: FOIA608.1

More information

Business Continuity Policy

Business Continuity Policy Page 1 of 16 Business Continuity Policy Issue Date: Aug 2013 Document Number: 00241 Prepared by: Business Management and Continuity Senior Manager Next Review Date: April 2014 Page 2 of 16 NHS England

More information

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT JANUARY 2008 GUIDELINE ON BUSINESS CONTINUITY GUIDELINE CBK/PG/14

More information

DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Performance, Risk and Business Continuity Management Policy

DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Performance, Risk and Business Continuity Management Policy Not Protectively Marked Item 6 Appendix B DORSET & WILTSHIRE FIRE AND RESCUE AUTHORITY Management Policy The Dorset & Wiltshire Fire and Rescue Authority () is the combined fire and rescue authority for

More information

The PNC Financial Services Group, Inc. Business Continuity Program

The PNC Financial Services Group, Inc. Business Continuity Program The PNC Financial Services Group, Inc. Business Continuity Program 1 Content Overview A. Introduction Page 3 B. Governance Model Page 4 C. Program Components Page 4 Business Impact Analysis (BIA) Page

More information

HOW CAN YOU ENSURE BUSINESS CONTINUITY? ISO 22301 AUDITS, CERTIFICATION AND TRAINING

HOW CAN YOU ENSURE BUSINESS CONTINUITY? ISO 22301 AUDITS, CERTIFICATION AND TRAINING HOW CAN YOU ENSURE BUSINESS CONTINUITY? ISO 22301 AUDITS, CERTIFICATION AND TRAINING ISO 22301 BUSINESS CONTINUITY MANAGEMENT SYSTEMS Most organisations will, at some point, be faced with having to respond

More information

BUSINESS CONTINUITY FRAMEWORK

BUSINESS CONTINUITY FRAMEWORK BUSINESS CONTINUITY FRAMEWORK DOCUMENT INFORMATION DOCUMENT TYPE: DOCUMENT STATUS: POLICY OWNER POSITION: INTERNAL COMMITTEE ENDORSEMENT: APPROVED BY: Strategic document Approved Manager Organisational

More information

Community and Built Environment Localities and Safer Communities Business Continuity Management Policy Andrew Fyfe

Community and Built Environment Localities and Safer Communities Business Continuity Management Policy Andrew Fyfe Community and Built Environment Localities and Safer Communities Business Continuity Management Policy Andrew Fyfe 4 Aug 14 Draft v4.4 TBC Resilience Team BCM Policy draft v4.4 1 4 Aug 2014 Statement of

More information

Temple university. Auditing a business continuity management BCM. November, 2015

Temple university. Auditing a business continuity management BCM. November, 2015 Temple university Auditing a business continuity management BCM November, 2015 Auditing BCM Agenda 1. Introduction 2. Definitions 3. Standards 4. BCM key elements IT Governance class - IT audit program

More information

Business Continuity Business Continuity Management Policy

Business Continuity Business Continuity Management Policy Business Continuity Business Continuity Management Policy : Date of Issue: 28 January 2009 Version no: 1.1 Review Date: January 2010 Document Owner: Patricia Hughes Document Authoriser: Tony Curtis 1 Version

More information

DERBYSHIRE COUNTY COUNCIL BUSINESS CONTINUITY POLICY

DERBYSHIRE COUNTY COUNCIL BUSINESS CONTINUITY POLICY DERBYSHIRE COUNTY COUNCIL BUSINESS CONTINUITY POLICY VERSION 1.0 ISSUED JULY 2015 CONTENTS Page CONTENTS VERSION CONTROL FOREWORD i ii iii POLICY 1 Scope 1 Aim and Objectives 1 Methods and Standards 1

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy St Mary Magdalene Academy V1.0 / September 2014 Document Control Document Details Document Title Document Type Business Continuity Policy Policy Version 2.0 Effective From 1st

More information

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA 1 Chapter-4: Business Continuity Planning and Disaster Recovery Planning PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA Learning Objectives 2 To understand the concept of Business Continuity Management To understand

More information

Business Continuity Management Policy and Framework

Business Continuity Management Policy and Framework Management Policy and Framework Version: Produced by: Date Produced: Approved by: Updated: 7 University Manager with the assistance of the Operational Group 11 th March 2010 Steering Group (14 December

More information

Business Continuity Management Policy and Plan

Business Continuity Management Policy and Plan Business Continuity Management Policy and Plan 1 Page No: Contents 1.0 Introduction 3 2.0 Purpose 3 3.0 Definitions 4 4.0 Roles, Duties & Responsibilities 4 4.1 Legal And Statutory Duties, Responsibilities

More information

Departmental Business Continuity Framework. Part 2 Working Guides

Departmental Business Continuity Framework. Part 2 Working Guides Department for Work and Pensions Departmental Business Continuity Framework Part 2 Working Guides Page 1 of 60 CONTENTS Guide to business impact analysis...3 Guide to business continuity planning...7 Guide

More information

BCP and DR. P K Patel AGM, MoF

BCP and DR. P K Patel AGM, MoF BCP and DR P K Patel AGM, MoF Key difference between BS 25999 and ISO 22301 ISO 22301 puts a much greater emphasis on setting the objectives, monitoring performance and metrics aligning BC to top management

More information

Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD.

Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD. Business Continuity Management & Disaster Recovery Planning Presented by: Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD. 1 What is Business Continuity Management? Is a holistic management

More information

The PNC Financial Services Group, Inc. Business Continuity Program

The PNC Financial Services Group, Inc. Business Continuity Program The PNC Financial Services Group, Inc. Business Continuity Program subsidiaries) 1 Content Overview A. Introduction Page 3 B. Governance Model Page 4 C. Program Components Page 4 Business Impact Analysis

More information

VISION FOR LEARNING AND DEVELOPMENT

VISION FOR LEARNING AND DEVELOPMENT VISION FOR LEARNING AND DEVELOPMENT As a Council we will strive for excellence in our approach to developing our employees. We will: Value our employees and their impact on Cardiff Council s ability to

More information

Business Continuity Management and BS 25999 by Steve Chan, Head of Training - HK, BSI Management Systems

Business Continuity Management and BS 25999 by Steve Chan, Head of Training - HK, BSI Management Systems Business Continuity Management and BS 25999 by Steve Chan, Head of Training - HK, BSI Management Systems 9 April, 2008 2 Presentation content Drivers for Business Continuity Standards and definitions.

More information

Business Continuity Management For Small to Medium-Sized Businesses

Business Continuity Management For Small to Medium-Sized Businesses Business Continuity Management For Small to Medium-Sized Businesses Produced by NORMIT and Norfolk County Council Resilience Team For an electronic copy of this document visit www.normit.org Telephone

More information

Business Continuity Policy

Business Continuity Policy Business Continuity Policy Ref. No. TP/028 Title: Business Continuity Policy Page 1 of 15 DOCUMENT PROFILE and CONTROL. Purpose of the document: Provides an overview of the London Ambulance Service NHS

More information

NOT PROTECTIVELY MARKED. Business Continuity Management Policy. Risk and Business Continuity Management

NOT PROTECTIVELY MARKED. Business Continuity Management Policy. Risk and Business Continuity Management Policy Title CCMT Sponsor Department/Area Section/Sector Business Continuity Management Policy Deputy Chief Constable Strategic Development Risk and Business Continuity Management 1.0 Rationale Thames

More information

Harrow Business Consultative Panel. Business Continuity Management. Responsible Officer: Myfanwy Barrett Director of Finance and Business Strategy

Harrow Business Consultative Panel. Business Continuity Management. Responsible Officer: Myfanwy Barrett Director of Finance and Business Strategy Meeting: Harrow Business Consultative Panel Date: 18 th July 2006 Subject: Business Continuity Management Responsible Officer: Myfanwy Barrett Director of Finance and Business Strategy Contact Officer:

More information

Code Subsidiary Document No. 0007: Business Continuity Management. September 2015

Code Subsidiary Document No. 0007: Business Continuity Management. September 2015 Code Subsidiary Document No. 0007: September 2015 Change History Version Number Date of Issue Reason For Change Change Control Reference Sections Affected 20150511 11 May 2015 For industry consultation

More information

Update from the Business Continuity Working Group

Update from the Business Continuity Working Group 18 June 2015 Performance and Resources Board 14 To note Update from the Business Continuity Working Group Issue 1 The Business Continuity Working Group oversees the development, maintenance and improvement

More information

Business Continuity Management Governance. Frank Higgins Abu Dhabi March 2015

Business Continuity Management Governance. Frank Higgins Abu Dhabi March 2015 Business Continuity Management Governance Frank Higgins Abu Dhabi March 2015 Different Names Same Concept BCM (Business Continuity Management) BSI 25999 IPOCM (Incident Preparedness & Operational Continuity

More information

Cumbria Constabulary. Business Continuity Planning

Cumbria Constabulary. Business Continuity Planning Cumbria Constabulary Business Continuity Planning 0 Cumbria Shared Internal Audit Service Images courtesy of Carlisle City Council except: Parks (Chinese Gardens), www.sjstudios.co.uk, Monument (Market

More information

Business Continuity Planning

Business Continuity Planning Business Continuity Planning We believe all organisations recognise the importance of having a Business Continuity Plan, however we understand that it can be difficult to know where to start. That s why

More information

Business Continuity in SIA

Business Continuity in SIA Aim of the document: This document describes how SIA develops, implements and maintains its business continuity management system, applying what is stated in the company Business Continuity Guidelines,

More information

University of Sunderland Business Assurance Information Security Policy

University of Sunderland Business Assurance Information Security Policy University of Sunderland Business Assurance Information Security Policy Document Classification: Public Policy Reference Central Register Policy Reference Faculty / Service IG 003 Policy Owner Assistant

More information

Business continuity management policy

Business continuity management policy Business continuity management policy health.wa.gov.au Effective: XXX Title: Business continuity management policy 1. Purpose All public sector bodies are required to establish, maintain and review business

More information

BUSINESS CONTINUITY POLICY. UHB 050 Version No: 4 Previous Trust / LHB Ref No: Interim Civil Contingencies and Emergency Planning Manager

BUSINESS CONTINUITY POLICY. UHB 050 Version No: 4 Previous Trust / LHB Ref No: Interim Civil Contingencies and Emergency Planning Manager Reference No: BUSINESS CONTINUITY POLICY UHB 050 Version No: 4 Previous Trust / LHB Ref No: N/A Documents to read alongside this Policy N/A Classification of document: Area for Circulation: Author: Executive

More information

Business continuity management policy

Business continuity management policy Business continuity management policy Issue sheet Document reference Document location Title Author Issued to Reason issued NHSBSADPN001b S:\BSA\IGM\Mng IG\Developing Policy and Strategy\Develop or Review

More information

LINCOLNSHIRE POLICE Policy Document

LINCOLNSHIRE POLICE Policy Document LINCOLNSHIRE POLICE Policy Document Code of Ethics All staff involved in carrying out functions under this policy and associated procedures and appendices will do so in accordance with the principles of

More information

University of Glasgow. Policy for. Business Continuity Management

University of Glasgow. Policy for. Business Continuity Management University of Glasgow Policy for Business Continuity Management 1 Policy Statement The University of Glasgow is committed to delivering the highest possible quality of service to our students, and the

More information

South Norfolk Council Business Continuity Policy

South Norfolk Council Business Continuity Policy South Norfolk Council Business Continuity Policy 1 Title: Business Continuity Policy Date of Publication: TBC Version: 2 Published by: Emergency Planning Team Review date: April 2014 Document Owner: Document

More information

EPRR: Toolkit Facilitator Guide

EPRR: Toolkit Facilitator Guide NHS England Business Continuity Management EPRR: Toolkit Facilitator Guide APPENDIX 1 1 [Intentionally Blank] INTRODUCTION The document has been designed to assist you to deliver the outcomes of the workshop

More information

Desktop Scenario Self Assessment Exercise Page 1

Desktop Scenario Self Assessment Exercise Page 1 Page 1 Neil Jarvis Head of IT Security & IT Risk DHL Page 2 From reputation to data loss - how important is business continuity? Neil Jarvis Head of IT Security (EMEA) DHL Logistics IT Security Taking

More information

Information and Communication Technology. Service Continuity Plan

Information and Communication Technology. Service Continuity Plan BELA-BELA LOCAL MUNICIPALITY Chris Hani Drive, Bela- Bela, Limpopo. Private Bag x 1609 BELA-BELA 0480 Tel: 014 736 8000 Fax: 014 736 3288 Website: www.belabela.gov.za OFFICE OF THE MUNICIPAL MANAGER Information

More information

Team Business Continuity Plan Guide

Team Business Continuity Plan Guide Team Business Continuity Plan Guide Contents Introduction 1.0 Functional Analysis of your Team 2.0 Business Continuity Risk Assessment 3.0 Team Network of Contacts 4.0 Incident Log Sheet 5.0 Record of

More information

BS 25999 BUSINESS CONTINUITY MANAGEMENT

BS 25999 BUSINESS CONTINUITY MANAGEMENT BS 25999 BUSINESS CONTINUITY MANAGEMENT AUDIT, CERTIFICATION & training services HOW CAN YOU ENSURE BUSINESS CONTINUITY? BS 25999 AUDITS & CERTIFICATION FROM SGS Most organisations will, at some point,

More information

How prepared are you?

How prepared are you? How prepared are you? Business Continuity Management Toolkit Version 1 Click on content to navigate What Is Business Continuity Management (BCM)? 3 About the Toolkit 4 1. BCM programme management 5 2.

More information

Corporate Risk Management Policy

Corporate Risk Management Policy Corporate Risk Management Policy Managing the Risk and Realising the Opportunity www.reading.gov.uk Risk Management is Good Management Page 1 of 19 Contents 1. Our Risk Management Vision 3 2. Introduction

More information