B.1 DISASTER RECOVERY

Size: px
Start display at page:

Download "B.1 DISASTER RECOVERY"

Transcription

1 B.1 DISASTER RECOVERY Technology Recovery Strategy (20 hours) To confirm that MHS has developed an overall strategy to Standard: EM The hospital has an Emergency Operations Plan. (EP#4) manage information technology to minimize impact to business operations during a declared event. MHS Policy - Technology: Disaster Recovery, Section 1a Information Services will: Develop, monitor and maintain a disaster recovery plan for Information Services systems that include: a Business Impact Analysis, data backup procedures, emergency mode operation procedures, recovery procedures, and testing and revision procedures for Tier 1 production systems. Procedure I. D.2. All systems in the data centers and other critical systems will be supported with uninterrupted power sources and have access to emergency generator power by engineering. D.3. The data centers power requirements will be identified, documented, monitored and appropriately maintained by Engineering. DS4.1 - Ensure Continuous Service IT Continuity Framework. DS4.4 - Ensure Continuous Service Maintenance of the IT Continuity Plan. DS4.6 - Ensure Continuous Service IT Continuity Plan Training DS4.7 - Ensure Continuous Service IT Distribution of the IT Continuity Plan DS4.9 - Ensure Continuous Service Offsite Backup Storage 1. Assess whether MHS has developed an overall strategy for managing recovery of technology and systems. This includes: a. Existence of a written plan explaining the recovery strategy and actions to restore systems critical to patient care. b. Required procedures for IS systems (data back-up, emergency mode operations, recovery, testing, etc). c. Updates to the written plan when operations change. d. Training on plan components with key staff. e. Distribution of plan to key persons, and ensuring the plan is accessible under each disaster scenario. 2. Assess the process for managing the data centers and recovering servers during an emergency. Verify that: a. Processes exist to identify, prioritize and restore critical servers. b. Uninterruptible power sources are maintained and tested. c. Data center power requirements are identified, documented and monitored by Engineering. 3. Assess the adequacy of recovery processes for non-is managed systems. Business Impact Analysis (10 hours) To validate that MHS Policy - Technology: Disaster Recovery, Section 1a MHS has assessed Information Services will: Develop, monitor and maintain a disaster operations and recovery plan for Information Services systems that include: a aligned system Business Impact Analysis, Data Back-up Procedures, Emergency recovery plans with Mode Operations Procedures, Recovery Procedures, Testing & current business Revision Procedures needs for critical 1. Obtain a copy of the Business Impact Analysis (BIA). Assess for the following attributes: a. Reflects the current and complete MHS environment. b. Is current (within past 12 months). c. Documents the risks (qualitative/quantitative) and outcomes (opportunities/threats) for each department/ business process. 1

2 operations. 2. Validate there is a process in place to update the BIA when DS4.3 - Ensure Continuous Service Critical IT Resources changes to the MHS environment occurs. Recovery Objectives (10 hours) To verify there is a prioritization process to maximize critical resources and align business expectations with recovery objectives. MHS Policy - Technology: Disaster Recovery, Procedure I. E. Information Services and separate Information Systems Disaster Recovery Plans will be tested once a year on our Tier 1 production systems, either in response to an actual emergency or in planned drills. DS4.3 - Ensure Continuous Service Critical IT Resources 1. Assess whether IS has defined the ranges of recovery timelines for system downtime and lost data, based on process criticality. 2. Assess whether recovery time objectives (RTOs) and recovery point objectives (RPOs) have been assigned to system applications. Confirm the assigned objectives align to the Business Impact Analysis results. 3. Assess whether there is a process to communicate these objectives to the corresponding business entities/business owners. Test Plans and Schedules (30 hours) To validate that disaster recovery plans have been developed and tests have been scheduled to prepared for potential declared events. MHS Policy - Technology: Disaster Recovery, Section 1a Information Services will: Develop, monitor and maintain a disaster recovery plan for Information Services systems that include: a Business Impact Analysis, data backup procedures, emergency mode operation procedures, recovery procedures, and testing and revision procedures for Tier 1 production systems. MHS Policy - Technology: Disaster Recovery, Procedure I. E. Information Services and separate Information Systems Disaster Recovery Plans will be tested once a year on our Tier 1 production systems, either in response to an actual emergency or in planned drills. DS4.2 - Ensure Continuous Service IT Continuity Plans DS4.4 - Ensure Continuous Service Maintenance of the IT Continuity Plan DS4.5 - Ensure Continuous Service Testing of the IT Continuity Plan DS4.8 Ensure Continuous Service IT Services Recovery and Resumption 1. Verify that a schedule of tests and exercise activities have been created according to the Disaster Recovery plan. 2. Assess the process to document, update, store and collect/distribute test plans. 3. Obtain the Tier list of applications/systems used by Information Services. Assess the process for generating the list and verify the list is current (within the past year or since any major system change). 4. Select a sample of Tier 1 systems/applications and test for the following: a. Test plan has been created and is available b. Test plan is current c. Test plan identifies key personnel/responsibilities d. Test plan identifies primary actions to be performed for resumption, including data inputs/reports, other needed resources. Test Results and Remediation (20 hours) To validate that MHS Policy - Technology: Disaster Recovery, Procedure I. E. 1. Select a sample of Tier 1 applications and test for the 2

3 disaster recovery plans are effective to resume operations within expected recovery objectives and that test plans are updated based on identified improvements. Information Services and separate Information Systems Disaster Recovery Plans will be tested once a year on our Tier 1 production systems, either in response to an actual emergency or in planned drills. DS4.5 - Ensure Continuous Service Testing of the IT Continuity Plan DS Ensure Continuous Service Post-resumption Review following: a. System has been tested within the past year, either through a simulated test or an actual declared event b. Test results were documented c. A post-exercise review occurred, with recommendations to improve continuity identified 3

4 B.2 BUSINESS CONTINUITY Continuity Strategy (30 hours) To confirm that MHS has developed an overall strategy to ensure continuous operations and has implemented critical preparations in advance. Standard: EM The hospital engages in planning activities prior to developing its written Emergency Operations Plan. Standard: EM As part of its Emergency Operations Plan, the hospital prepares for how it will manage resources and assets during emergencies. Standard: EM As part of its Emergency Operations Plan, the hospital prepares for how it will manage patients during emergencies. Standard: EM The hospital evaluates the effectiveness of its emergency management planning activities. Section III. A. An HVA (Hazards Vulnerability Analysis) is completed to assess the likelihood and impact of emergencies and is used to guide the development of the Emergency Operations Plan (EOP) and Emergency Management Program. The HVA is reviewed and assessed annually to determine if the probability of emergencies has changed with changes annotated and plans revised as needed. Section III. E. The CEMP [comprehensive emergency management plan] clearly defines the process for activation and implementation of the plan. The description includes the command structure (ICS - Incident Command System) for the plan, the conditions requiring activation of the plan, and the individual(s) responsible for implementation of the plan. Washington State Emergency Management Department identifies 9 natural hazards for the state: Avalanche, Drought, Earthquake, Flood, Landslide, Severe Storm, Tsunami, Volcano, and Wildland Fire. The department also identifies 11 technological hazards: Abandoned Underground Mine, Chemical, Civil Disturbance, Dam Failure, Hazardous Material, Local Hazard, Pipeline, Radiological, Terrorism, Transportation, and Urban Fire. 1. Assess whether scenarios or criteria has been established to enact a continuity plan and declare an emergency event. 2. Validate that a comprehensive plan has been established for continuity of operations. This should address: a. Emergency Operations Center /Incident Command Center setup b. Chain of Command / Communications c. Activating and/or cancelling emergency procedures d. Instructions / Procedures to manage through events e. Alternate sites for care/treatment of patients f. Documenting results / reporting of the declared event 3. Assess management s oversight of Emergency Preparedness, including advisory board meetings and other established committees. 4. Verify that a Hazards Vulnerability Analysis (HVA) has been completed for all campuses at MHS. Select a sample of HVAs and review for the following: a. Has been updated within past 12 months b. Assesses all major Washington State hazards c. Assigns ratings and scoring of each hazard d. Has been approved by appropriate level of management 5. Validate that the hospital has prepared for sustaining operations for 96 hours. Verify the plan addresses: a. Medication/supplies management b. Staffing levels c. Food and water supplies d. Patient care 6. Validate that MHS coordinates with local and regional contacts for Emergency Preparedness. 7. Verify that an Inventory Asset Tracking process has been established to manage emergency supplies. Validate that: a. There is a process for updating this spreadsheet annually b. The spreadsheet completes all required fields c. A process is in place to meet the grant requirements for regionally-funded supplies. 8. Validate that MHS has maintains adequate levels of supplies and equipment for emergency use. Validate that supplies are 4

5 tracked and replaced when the shelf-life of perishable supplies has expired. Continuity Plans and Procedures (20 hours) To validate that response plans are successful through the ongoing planning, testing and revising of continuity plans. Standard: EM The hospital has an Emergency Operations Plan. Standard: EM The hospital evaluates the effectiveness of its Emergency Operations Plan. Section III. H. Periodic drills are essential for maintaining staff awareness of emergency procedures and for evaluating the effectiveness of plans. Section III. I. Scheduled drills and community exercises which activate the MHS CEMP provide opportunities to observe staff performance and identify opportunities for improvement. 1. Verify that an Emergency Operations Plan has been established for each hospital and it is current (last 12 months) and approved by the correct level of management/oversight. 2. Validate that a process is in place to create an emergency management plan for all clinic/off-site locations. 3. Select a sample of emergency management plans and review for the following: a. Plan is current b. Plan defines roles/key persons needed to perform the plan c. Plan outlines procedures/actions to be performed d. Plan has associated test results / lessons learned 4. Validate that MHS has developed a schedule for testing each hospital location, twice annually. Verify that MHS includes the following test scenarios in the at least one of the annual tests: a. A simulation of a surge/influx of patients b. The local community is unable to support the hospital c. Includes participation in a community-wide exercise Communications (10 hours) To validate the adequate communications can be maintained during and after a declared event to facilitate continuous operations and support of patient care. Standard: EM As part of its Emergency Operations Plan, the hospital prepares for how it will communicate during emergencies. Standard: EM The hospital evaluates the effectiveness of its Emergency Operations Plan. Section III. E. The CEMP [comprehensive emergency management plan] includes a list of key staff essential for full implementation of the plan and procedures for contacting them. Contact procedures include on-site and remote contact processes for both manual and automated capability. Section III. M. Redundant internal and external communications systems are in place and are interoperable with other healthcare and 1. Review the communication strategy in place, including available tools/channels, roles/responsibilities, and types of messages. 2. Validate processes are in place to maintain current communications information, including updating phone numbers, contact names/departments and other resources. 3. Validate that communications processes are developed for the following audiences during a declared event: a. Notifying staff & personnel b. Notifying patients/families, esp. if relocating patients c. Notifying external authorities d. Notifying media/community e. Notifying vendors/suppliers f. Notifying regional healthcare partners 4. Validate there is a process to monitor the effectiveness of communications (both internal and with external entities) 5

6 first responder agencies. during an emergency response exercise. Training (10 hours) To validate that personnel are prepared to handle a declared event. Standard: EM As part of its Emergency Operations Plan, the hospital prepares for how it will manage staff during an emergency. Standard: EM As part of its Emergency Operations Plan, the hospital prepares for how it will manage security and safety during an emergency. Section III. O. Staff knowledge of their role in CEMP [comprehensive emergency management plan] activation is evaluated annually. Changes in CEMP are incorporated into the annual mandatory education curriculum. Section IV. C. Department leaders are responsible for orienting new personnel to the procedures of the department and, as appropriate, to job and task specific responsibilities for emergency management. Section VII. C. Employees also receive departmental safety orientation at their respective work areas regarding hazards and their responsibilities to patients, visitors and co-workers. In addition, all staff will participate in periodic refresher training relative to the Hospital Command Center (HCC)/Emergency Operations Center (EOC). MHS Policy Emergency Credentialing/Privileging-Licensed Volunteers Washington Industrial Safety and Health Act (WISHA) Washington State RCW - Chapter Validate that MHS has trained staff on their emergency response roles during a declared event. Confirm there is a process to retrain staff periodically. 2. Validate there is a process for training staff on the use of emergency personal protective equipment (PPE), such as decontamination supplies. Confirm there is a process to periodically retrain staff. 3. Confirm there is a process to instruct volunteer licensed independent practitioners regarding their role in an emergency prior to a declared event. Verify there is a process to manage these volunteers during and after a declared event. 6

DISASTER RECOVERY/ BUSINESS CONTINUITY AUDITING: A CASE STUDY

DISASTER RECOVERY/ BUSINESS CONTINUITY AUDITING: A CASE STUDY 1 DISASTER RECOVERY/ BUSINESS CONTINUITY AUDITING: A CASE STUDY WAYNE PURVES DIRECTOR CHRISTA VOIE IT AUDITOR MULTICARE HEALTH SYSTEM TACOMA, WA AHIA 32 nd Annual Conference August 25-28, 2013 Chicago,

More information

Essential Components of Emergency Management Plans at Community Health Centers Crosswalk of Plan Elements

Essential Components of Emergency Management Plans at Community Health Centers Crosswalk of Plan Elements Plan Components Health centers will have an emergency management plan Plan and organization are NIMS compliant Bureau of Primary Health Care Policy Information Notice 2007-15 Plans and procedures for emergency

More information

Appendix I. Joint Commission Emergency Management Standards and Related Elements of Performance

Appendix I. Joint Commission Emergency Management Standards and Related Elements of Performance Appendix I. Joint Commission Emergency Management Standards and Related Elements of Performance 0.0.0 - The hospital engages in planning activities prior to developing its written Emergency Operations

More information

Changes to the 2014 Acute Care Hospital Manual on Emergency Management Compliance. January 30, 2014 Brad Keyes, CHSP

Changes to the 2014 Acute Care Hospital Manual on Emergency Management Compliance. January 30, 2014 Brad Keyes, CHSP Changes to the 2014 Acute Care Hospital Manual on Emergency Management Compliance January 30, 2014 Brad Keyes, CHSP The New Manuals Why did we make changes to the old standards? Corrected some errors Eliminated

More information

Crosswalk for The Joint Commission s Emergency Management Standards 2008 to 2007

Crosswalk for The Joint Commission s Emergency Management Standards 2008 to 2007 Standard EC.4.11 The organization plans for managing the consequences of emergencies. B 1 1. The organization s leaders (HAP: including those of the medical staff) (LTC, LT2: including the administrator,

More information

Hospital Emergency Operations Plan

Hospital Emergency Operations Plan Hospital Emergency Operations Plan I-1 Emergency Management Plan I PURPOSE The mission of University Hospital of Brooklyn (UHB) is to improve the health of the people of Kings County by providing cost-effective,

More information

The Joint Commission Approach to Evaluation of Emergency Management New Standards

The Joint Commission Approach to Evaluation of Emergency Management New Standards The Joint Commission Approach to Evaluation of Emergency Management New Standards (Effective January 1, 2008) EC. 4.11 through EC. 4.18 Revised EC. 4.20 Emergency Management Drill Standard Lewis Soloff

More information

Creating a Business Continuity Plan for your Health Center

Creating a Business Continuity Plan for your Health Center Creating a Business Continuity Plan for your Health Center 1 Page Left Intentionally Blank 2 About This Manual This tool is the result of collaboration between the Primary Care Development Corporation

More information

The Joint Commission s Emergency Management Update - 2009

The Joint Commission s Emergency Management Update - 2009 The Joint Commission s Emergency Management Update - 2009 William M. Wagner, ScD CHCM CHSP CHEP Vice President-Education, Research & Development Safety Management Services, Inc. September 22, 2009 Goals

More information

CCHC Emergency Preparedness Gap Analysis

CCHC Emergency Preparedness Gap Analysis This tool will help clinics and community health centers identify gaps in their planning for disaster response. If further emergency planning support is needed please review the tools and templates available

More information

The Joint Commission s 2012 Emergency Management Standards and HRSA Health Center Emergency Management Program Expectations. NACHC Webex Training

The Joint Commission s 2012 Emergency Management Standards and HRSA Health Center Emergency Management Program Expectations. NACHC Webex Training The Joint Commission s 2012 Emergency Management Standards and HRSA Health Center Emergency Management Program Expectations NACHC Webex Training February 2, 2012 Presented by: Virginia McCollum, MSN, RN

More information

Business Continuity and Disaster Recovery Planning

Business Continuity and Disaster Recovery Planning Business Continuity and Disaster Recovery Planning Jennifer Brandt, CISA A p r i l 16, 2015 HISTORY OF STINNETT & ASSOCIATES Stinnett & Associates (Stinnett) is a professional advisory firm offering services

More information

CONTINUITY OF OPERATIONS PLAN TEMPLATE

CONTINUITY OF OPERATIONS PLAN TEMPLATE CONTINUITY OF OPERATIONS PLAN TEMPLATE For Long-Term Care Facilities CALIFORNIA ASSOCIATION OF HEALTH FACILITIES DISASTER PREPAREDNESS PROGRAM TABLE OF CONTENTS TABLE OF CONTENTS...2 SECTION 1: INTRODUCTION...3

More information

Continuity of Business

Continuity of Business White Paper Continuity of Business SAS Continuity of Business initiative reflects our commitment to our employees, to our customers, and to all of the stakeholders in our global business community to be

More information

South Puget Sound Community College Emergency Operations Plan Annex H RECOVERY

South Puget Sound Community College Emergency Operations Plan Annex H RECOVERY I. PURPOSE South Puget Sound Community College Emergency Operations Plan Annex H RECOVERY The purpose of this annex is to provide a process to facilitate the College s transition from a disaster situation

More information

Hazard Vulnerability Analysis (HVA)

Hazard Vulnerability Analysis (HVA) Hazard Vulnerability Analysis (HVA) Policy: The Community Health Center will conduct an annual HVA. Purpose: To evaluate all hazards, their risk of actual occurrence, and the impact on life, property and

More information

DRAFT Disaster Recovery Policy Template

DRAFT Disaster Recovery Policy Template DRAFT Disaster Recovery Policy Template NOTE: This is a boiler plate template much information is needed from to finalizeconsider this document pre-draft FOREWARD... 3 Policy Overview...

More information

Accreditation Program: Hospital. Emergency Management

Accreditation Program: Hospital. Emergency Management ccreditation Program: Hospital Emergency Management ccreditation of Healthcare Organizations ccreditation Program: Hospital Chapter: Emergency Management Standard EM.01.01.01 The [organization] engages

More information

4 Insurance 5 Availability of alternate sources for critical supplies/services

4 Insurance 5 Availability of alternate sources for critical supplies/services Hazard and Vulnerability Analysis Hazard and Vulnerability Analysis This document is a sample Hazard Vulnerability Analysis tool. It is not a substitute for a comprehensive emergency preparedness program.

More information

Business Unit CONTINGENCY PLAN

Business Unit CONTINGENCY PLAN Contingency Plan Template Business Unit CONTINGENCY PLAN Version 1.0 (Date submitted) Submitted By: Business Unit Date Version 1.0 Page 1 1 Plan Review and Updates... 3 2 Introduction... 3 2.1 Purpose...

More information

Pilot Nursing Home Emergency Management Assessment Tool

Pilot Nursing Home Emergency Management Assessment Tool Pilot Nursing Home Emergency Management Assessment Tool Introduction The Pilot Nursing Home Emergency Management Project (NHEMP) Assessment Tool, developed by the Primary Care Development Corporation (PCDC),

More information

Continuity Plan Testing Flowchart

Continuity Plan Testing Flowchart Building an effective Tabletop Exercise Presented by: Ken M. Shaurette, CISSP, CISA, CISM, CRISC FIPCO Director IT Services 3/26/2013 #1 Continuity Plan Testing Flowchart 3/26/2013 #2 1 Ongoing Multi-Year

More information

Business Continuity Planning for Schools, Departments & Support Units

Business Continuity Planning for Schools, Departments & Support Units Business Continuity Planning for Schools, Departments & Support Units 1 What is Business Continuity Planning? Examples Planning for an adverse, major or catastrophic event that would cause a disruption

More information

Business Continuity Planning and Disaster Recovery Planning. Ed Crowley IAM/IEM

Business Continuity Planning and Disaster Recovery Planning. Ed Crowley IAM/IEM Business Continuity Planning and Disaster Recovery Planning Ed Crowley IAM/IEM 1 Goals Compare and contrast aspects of business continuity Execute disaster recovery plans and procedures 2 Topics Business

More information

Business Continuity & Recovery Plan Summary

Business Continuity & Recovery Plan Summary Introduction An organization s ability to survive a significant business interruption is determined by the company s ability to develop, implement, and maintain viable recovery and business continuity

More information

Business Continuity & Recovery Plan Summary

Business Continuity & Recovery Plan Summary Introduction An organization s ability to survive a significant business interruption is determined by the company s ability to develop, implement, and maintain viable recovery and business continuity

More information

Comparison of Joint Commission and Healthcare Facilities Accreditation Program (HFAP) Emergency-Related Standards for Hospitals.

Comparison of Joint Commission and Healthcare Facilities Accreditation Program (HFAP) Emergency-Related Standards for Hospitals. Comparison of Joint Commission and Healthcare Facilities Accreditation Program (HFAP) Emergency-Related Standards for Hospitals Planning Activities Emergency Plan Joint Commission The hospital must engage

More information

BUSINESS CONTINUITY PLAN OVERVIEW

BUSINESS CONTINUITY PLAN OVERVIEW BUSINESS CONTINUITY PLAN OVERVIEW INTRODUCTION The purpose of this document is to provide Loomis customers with an overview of the company s Business Continuity Plan (BCP). Because of the specific and

More information

Business Continuity Planning and Disaster Recovery Planning

Business Continuity Planning and Disaster Recovery Planning Business Continuity Planning and Disaster Recovery Planning Ed Crowley IAM/IEM 1 ISC 2 Key Areas of Knowledge Understand business continuity requirements 1. Develop and document project scope and plan

More information

Health Care Emergency Management: Preparing for All Hazards

Health Care Emergency Management: Preparing for All Hazards December 2014 Health Care Emergency Management: Preparing for All Hazards By Jonathan Hart Copyright 2014 National Fire Protection Association. All rights reserved. Intro Emergencies occur in health care

More information

SAMPLE IT CONTINGENCY PLAN FORMAT

SAMPLE IT CONTINGENCY PLAN FORMAT SAMPLE IT CONTINGENCY PLAN FORMAT This sample format provides a template for preparing an information technology (IT) contingency plan. The template is intended to be used as a guide, and the Contingency

More information

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT JANUARY 2008 GUIDELINE ON BUSINESS CONTINUITY GUIDELINE CBK/PG/14

More information

Applied Incident Command for Public Health Unit 3. Michigan s Emergency Management and Homeland Security Training Center Michigan State Police

Applied Incident Command for Public Health Unit 3. Michigan s Emergency Management and Homeland Security Training Center Michigan State Police Applied Incident Command for Public Health Unit 3 Michigan s Emergency Management and Homeland Security Training Center Michigan State Police 1 National Incident Management System 2 Unit 3 Objectives Upon

More information

Business Continuity and Emergency Preparedness Planning. Vandita Zachariah, MA, MBA, CIA HHSC Internal Audit Division May 21, 2010

Business Continuity and Emergency Preparedness Planning. Vandita Zachariah, MA, MBA, CIA HHSC Internal Audit Division May 21, 2010 Business Continuity and Emergency Preparedness Planning Vandita Zachariah, MA, MBA, CIA HHSC Internal Audit Division May 21, 2010 Overview Define key terms and list essential elements of business continuity

More information

Boston College. Departmental Business Continuity Planning

Boston College. Departmental Business Continuity Planning Boston College Departmental Business Continuity Planning Spring 2013 1 BUSINESS CONTINUITY PROGRAM GOAL The goal of the Boston College Business Continuity Program is to ensure that all departments and

More information

By: Tracy Hall. Community Bank Auditors Group Taking Your Business Continuity Plan To The Next Level. June 9, 2015

By: Tracy Hall. Community Bank Auditors Group Taking Your Business Continuity Plan To The Next Level. June 9, 2015 Community Bank Auditors Group Taking Your Business Continuity Plan To The Next Level June 9, 2015 By: Tracy Hall MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2015 Wolf & Company,

More information

William Rider Manager Disaster Recovery & Data Security The Johns Hopkins Health System & University

William Rider Manager Disaster Recovery & Data Security The Johns Hopkins Health System & University William Rider Manager Disaster Recovery & Data Security The Johns Hopkins Health System & University Competitive Leadership- Twelve Principles For Success Brian Billick Chapter 3 Be Be Prepared The time

More information

Business Continuity Plan

Business Continuity Plan Business Continuity Plan October 2007 Agenda Business continuity plan definition Evolution of the business continuity plan Business continuity plan life cycle FFIEC & Business continuity plan Questions

More information

D2-02_01 Disaster Recovery in the modern EPU

D2-02_01 Disaster Recovery in the modern EPU CONSEIL INTERNATIONAL DES GRANDS RESEAUX ELECTRIQUES INTERNATIONAL COUNCIL ON LARGE ELECTRIC SYSTEMS http:d2cigre.org STUDY COMMITTEE D2 INFORMATION SYSTEMS AND TELECOMMUNICATION 2015 Colloquium October

More information

EMERGENCY PREPAREDNESS PLAN Business Continuity Plan

EMERGENCY PREPAREDNESS PLAN Business Continuity Plan EMERGENCY PREPAREDNESS PLAN Business Continuity Plan GIS Bankers Insurance Group Powered by DISASTER PREPAREDNESS Implementation Small Business Guide to Business Continuity Planning Surviving a Catastrophic

More information

Emergency Management Program

Emergency Management Program Emergency Management Program The Emergency Management and Civil Protection Act, R.S.O. 1990,c.E.9 and its associated regulations and standards, requires all Ontario Municipalities to implement a mandatory

More information

PBSi Business Continuity Planning

PBSi Business Continuity Planning Business Continuity Planning Definition Business Continuity planning is a planning process designed to reduce the risk that disruptive failures or events could seriously harm your business. It is designed

More information

Ohio Supercomputer Center

Ohio Supercomputer Center Ohio Supercomputer Center IT Business Continuity Planning No: Effective: OSC-13 06/02/2009 Issued By: Kevin Wohlever Director of Supercomputer Operations Published By: Ohio Supercomputer Center Original

More information

Emergency Management Plan 2 0 1 3-2 0 1 4

Emergency Management Plan 2 0 1 3-2 0 1 4 Emergency Management Plan 2 0 1 3-2 0 1 4 Bedford Campus Lowell Campus Emergency Management Plan 1 Table of Contents Emergency Management Planning................................2 Emergency Management

More information

STEP-BY-STEP BUSINESS CONTINUITY AND EMERGENCY PLANNING MAY 27 2015

STEP-BY-STEP BUSINESS CONTINUITY AND EMERGENCY PLANNING MAY 27 2015 STEP-BY-STEP BUSINESS CONTINUITY AND EMERGENCY PLANNING MAY 27 2015 AGENDA: Emergency Management Business Continuity Planning Q & A MONTH DAY, YEAR TITLE OF THE PRESENTATION 2 CANADIAN RED CROSS Disaster

More information

B U S I N E S S C O N T I N U I T Y P L A N

B U S I N E S S C O N T I N U I T Y P L A N B U S I N E S S C O N T I N U I T Y P L A N 1 Last Review / Update: December 9, 2015 Table of Contents Purpose...3 Background...3 Books and Records Back-up and Recovery...4 Mission Critical Systems...

More information

Our Colorado region is offering a FREE Disaster Recovery Review promotional through June 30, 2009!

Our Colorado region is offering a FREE Disaster Recovery Review promotional through June 30, 2009! Disaster Recovery Review FREE Promotional Offer Our Colorado region is offering a FREE Disaster Recovery Review promotional through June 30, 2009! This review is designed to help the small business better

More information

Maricopa County Emergency Management

Maricopa County Emergency Management Maricopa County Emergency Management Mission Provide community-wide education, planning, coordination, and continuity of government for the people of Maricopa County in order to protect lives, property

More information

Assessing Your Disaster. Andrews Hooper Pavlik PLC. Andrews Hooper Pavlik PLC

Assessing Your Disaster. Andrews Hooper Pavlik PLC. Andrews Hooper Pavlik PLC Assessing Your Disaster Recovery Plans Gregory H. Soule, CPA, CISA, CISSP, CFE Andrews Hooper Pavlik PLC Andrews Hooper Pavlik PLC Agenda Business Continuity Concepts Impact Analysis Risk Assessment Risk

More information

Emergency Management

Emergency Management Update on The Joint Commission Emergency Management Standards John D. Maurer, SASHE, CHFM, CHSP Department of Engineering The Joint Commission Emergency Management Department of Engineering 2015-2 1 OBJECTIVES

More information

Disaster Recovery Plan Checklist

Disaster Recovery Plan Checklist Disaster Recovery Plan Checklist Your guide for setting up or updating a Disaster Recovery Plan for your business. ArcSource Disaster Recovery Plan Checklist 1. Compile Your Internal Contacts Information

More information

HOSPITALS STATUTE RULE CRITERIA. Current until changed by State Legislature or AHCA

HOSPITALS STATUTE RULE CRITERIA. Current until changed by State Legislature or AHCA HOSPITALS STATUTE RULE CRITERIA Current until changed by State Legislature or AHCA Hospitals and Ambulatory Surgical Centers Statutory Reference' 395.1055 (1)(c), Florida Statutes Rules and Enforcement.

More information

Risk Assessment Tool for Medical Facilities

Risk Assessment Tool for Medical Facilities Risk Assessment Tool for Medical Facilities This document is a sample Hazard Risk Assessment tool for Medical Facilities. Its purpose is to assist Medical Facilities in identifying hazards or vulnerabilities

More information

NIMS. Introduction and Overview

NIMS. Introduction and Overview NIMS Introduction and Overview An occurrence, natural or manmade, that requires a response to protect life or Property. Incidents can, for example, include major disasters, emergencies, terrorist Attacks,

More information

How to Prepare for an Emergency: A Disaster and Business Recovery Plan

How to Prepare for an Emergency: A Disaster and Business Recovery Plan How to Prepare for an Emergency: A Disaster and Business Recovery Plan Chapter 1: Overview of the Disaster and Business Recovery Plan Purpose: To develop and establish a comprehensive Disaster and Business

More information

Franklin County Emergency Management Department (FCEMD) All County Emergency Response Team (CERT) Agencies. Table of Contents

Franklin County Emergency Management Department (FCEMD) All County Emergency Response Team (CERT) Agencies. Table of Contents Concept of Operations Lead Agency Support Agency Standard Operating Procedures Emergency Operations Center (EOC) Franklin County Emergency Management Department (FCEMD) All County Emergency Response Team

More information

DISASTER STRIKES! CONTINUITY OF BUSINESS OPERATIONS JUNE 25, 2015

DISASTER STRIKES! CONTINUITY OF BUSINESS OPERATIONS JUNE 25, 2015 CONTINUITY OF BUSINESS OPERATIONS JUNE 25, 2015 Leah Tolliver Pharm.D. Kentucky Pharmacists Association Director of Pharmacy Emergency Preparedness 2 OBJECTIVES Describe the benefits for developing a continuity

More information

C. Training, response checklists and other accompanying documents are based on the statements in 2A. & B. of this plan.

C. Training, response checklists and other accompanying documents are based on the statements in 2A. & B. of this plan. 1. PURPOSE The purpose of this plan is to prescribe those activities to be taken by municipal government and other community officials to protect the lives and property of the citizens in the event of

More information

Hospital Emergency Management Plan

Hospital Emergency Management Plan Hospital Emergency Management Plan Title: Purpose: Policy: Hospital Disaster Plan and Disaster Preparedness Committee General Information This policy intends to ensure that all departments are familiar

More information

Hospital Emergency Operations Plan Workshop

Hospital Emergency Operations Plan Workshop Hospital Emergency Operations Plan Workshop Updating the Hospital and Rural Medical Center EOP for the Use of Volunteers in Medical Surge AGENCY LOGO Acknowledgements: This workshop was developed by the

More information

Overview. Emergency Response. Crisis Management

Overview. Emergency Response. Crisis Management Prudential Financial s Preparedness Strategy Overview Emergency Response, Crisis Management, Business Continuation, Technology Disaster Recovery & Health Crisis Preparedness Prudential is committed to

More information

WALLA WALLA COUNTY Comprehensive Emergency Management Plan

WALLA WALLA COUNTY Comprehensive Emergency Management Plan WALLA WALLA COUNTY Comprehensive Emergency Management Plan Walla Walla County CEMP EMERGENCY SUPPORT FUNCTION 12 ENERGY PRIMARY AGENCIES: Public and Private Energy and Utility Providers Walla Walla County

More information

Recommended Disaster Core Competencies For Hospital Personnel

Recommended Disaster Core Competencies For Hospital Personnel Recommended Disaster Core Competencies For Hospital Personnel Revised Spring 2011 Recommended Disaster Core Competencies For Hospital Personnel Revised Spring 2011 Florida Department of Health Bureau of

More information

Disaster and Pandemic Planning for Nonprofits. Continuity and Recovery Plan Template

Disaster and Pandemic Planning for Nonprofits. Continuity and Recovery Plan Template Disaster and Pandemic Planning for Nonprofits Continuity and Recovery Plan Template This publication was supported by Grant Cooperative Agreement number 5U90TP917012-08 from the U.S. Centers for Disease

More information

Business Continuity Planning Toolkit. (For Deployment of BCP to Campus Departments in Phase 2)

Business Continuity Planning Toolkit. (For Deployment of BCP to Campus Departments in Phase 2) Business Continuity Planning Toolkit (For Deployment of BCP to Campus Departments in Phase 2) August 2010 CONTENTS: Background Assumptions Business Impact Analysis Risk (Vulnerabilities) Assessment Backup

More information

Post-Class Quiz: Business Continuity & Disaster Recovery Planning Domain

Post-Class Quiz: Business Continuity & Disaster Recovery Planning Domain 1. What is the most common planned performance duration for a continuity of operations plan (COOP)? A. 30 days B. 60 days C. 90 days D. It depends on the severity of a disaster. 2. What is the business

More information

Table of Contents ESF-12-1 034-00-13

Table of Contents ESF-12-1 034-00-13 Table of Contents Primary Coordinating Agency... 2 Local Supporting Agencies... 2 State, Regional, and Federal Agencies and Organizations... 2 Purpose... 3 Situations and Assumptions... 4 Direction and

More information

CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard

CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard PUBLIC Version: 1.0 CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard (Approved by the Information Strategy and Governance Committee in December 2013; revision 1.1 approved by Chief

More information

Directions Read this entire response guide and review incident management team chart

Directions Read this entire response guide and review incident management team chart Mission: To safely manage the operations of the facility during a power outage and minimize time to restore service. Directions Read this entire response guide and review incident management team chart

More information

Disaster Preparedness & Response

Disaster Preparedness & Response 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 A B C E INTRODUCTION AND PURPOSE REVIEW ELEMENTS ABBREVIATIONS NCUA REFERENCES EXTERNAL REFERENCES Planning - Ensuring

More information

Disaster Recovery Plan (DRP) / Business Continuity Plan (BCP)

Disaster Recovery Plan (DRP) / Business Continuity Plan (BCP) Preface Computer systems are the core tool of today s business and are vital to every business from the smallest to giant organizations. Money transactions, customer service are just simple examples. Despite

More information

All-Hazard Continuity of Operations Plan. [Department/College Name] [Date]

All-Hazard Continuity of Operations Plan. [Department/College Name] [Date] d All-Hazard Continuity of Operations Plan [Department/College Name] [Date] TABLE OF CONTENTS SECTION I: INTRODUCTION... 3 Executive Summary... 3 Introduction... 3 Goal... 4 Purpose... 4 Objectives...

More information

AUDITING A BCP PLAN. Thomas Bronack Auditing a BCP Plan presentation Page: 1

AUDITING A BCP PLAN. Thomas Bronack Auditing a BCP Plan presentation Page: 1 AUDITING A BCP PLAN Thomas Bronack Auditing a BCP Plan presentation Page: 1 What are the Objectives of a Good BCP Plan Protect employees Restore critical business processes or functions to minimize the

More information

Business Continuity / Disaster Recovery Context

Business Continuity / Disaster Recovery Context Capability Business Continuity / Disaster Recovery Context What is Business Continuity? The Business Continuity Program Life Cycle Copyright: Virtual Corporation, 1994 2006 Modified U.S. DoD Graphic Normal

More information

Emergency Preparedness Guidelines

Emergency Preparedness Guidelines DM-PH&SD-P7-TG6 رقم النموذج : I. Introduction This Guideline on supports the national platform for disaster risk reduction. It specifies requirements to enable both the public and private sector to develop

More information

Disaster Recovery Journal Spring World 2014

Disaster Recovery Journal Spring World 2014 Disaster Recovery Journal Spring World 2014 What works: Services and service supply chain business continuity risk management Don Hall, CBCP, Cisco Services Business Continuity Analyst Cisco Systems, Inc.

More information

Training Opportunities

Training Opportunities FEMA Independent Study Courses IS-288.A: The Role of Voluntary Organizations in Emergency Management To complete the above course please visit the FEMA Independent Study Website at: http://training.fema.gov/is

More information

Continuity of Operations Planning. A step by step guide for business

Continuity of Operations Planning. A step by step guide for business What is a COOP? Continuity of Operations Planning A step by step guide for business A Continuity Of Operations Plan (COOP) is a MANAGEMENT APPROVED set of agreed-to preparations and sufficient procedures

More information

This is the third and final presentation on HIPAA Security Administrative Safeguards. This presentation focuses on the last 2 standards under the

This is the third and final presentation on HIPAA Security Administrative Safeguards. This presentation focuses on the last 2 standards under the This is the third and final presentation on HIPAA Security Administrative Safeguards. This presentation focuses on the last 2 standards under the HIPAA Security rule: Contingency planning and evaluation.

More information

TABLE OF CONTENTS 10. ANNEX D... 10-2

TABLE OF CONTENTS 10. ANNEX D... 10-2 TABLE OF CONTENTS 10. ANNEX D... 10-2 10.1 PURPOSE...10-2 10.2 SITUATION AND ASSUMPTIONS...10-2 10.2.1 SITUATION...10-2 10.2.2 ASSUMPTIONS...10-2 10.3 GENERAL PROCEDURES AND RESPONSIBILITIES... 10-3 10.3.1

More information

Institute for Business Continuity Training 1623 Military Road, # 377 Niagara Falls, NY 14304-1745

Institute for Business Continuity Training 1623 Military Road, # 377 Niagara Falls, NY 14304-1745 ECP - 601: Effective Business Continuity Management: ISO 22301 This 3-day course provides an intensive, hands-on workshop covering all major aspects for the design of an effective Business Continuity Plan

More information

Audit, Finance and Legislative Committee Mayor Craig Lowe, Chair Mayor-Commissioner Pro Tem Thomas Hawkins, Member

Audit, Finance and Legislative Committee Mayor Craig Lowe, Chair Mayor-Commissioner Pro Tem Thomas Hawkins, Member City of Gainesville Inter-Office Communication April 3, 2012 TO: FROM: SUBJECT: Audit, Finance and Legislative Committee Mayor Craig Lowe, Chair Mayor-Commissioner Pro Tem Thomas Hawkins, Member Brent

More information

Why Should Companies Take a Closer Look at Business Continuity Planning?

Why Should Companies Take a Closer Look at Business Continuity Planning? whitepaper Why Should Companies Take a Closer Look at Business Continuity Planning? How Datalink s business continuity and disaster recovery solutions can help organizations lessen the impact of disasters

More information

How to Prepare for an Emergency: A Disaster and Business Recovery Plan

How to Prepare for an Emergency: A Disaster and Business Recovery Plan How to Prepare for an Emergency: A Disaster and Business Recovery Plan Chapter 1: Overview of the Disaster and Business Recovery Plan 1.1 Purpose: To develop and establish a comprehensive Disaster and

More information

Protecting your Enterprise

Protecting your Enterprise Understanding Disaster Recovery in California Protecting your Enterprise Session Overview Why do we Prepare What is? How do I analyze (measure) it? What to do with it? How do I communicate it? What does

More information

The Emergency Coordinator: Key Roles in Integrated Response

The Emergency Coordinator: Key Roles in Integrated Response The Emergency Coordinator: Key Roles in Integrated Response Presentation to: Advanced Healthcare Emergency Management Course Objectives Upon lesson completion, you should be able to: Identify important

More information

Continuity of Healthcare Operations 7 Mission Essential Functions

Continuity of Healthcare Operations 7 Mission Essential Functions United States Department of Health & Human Services Office of the Assistant Secretary for Preparedness and Response Continuity of Healthcare Operations 7 Mission Essential Functions Bill Mangieri CBCP,

More information

Emergency Management for Small Community Leaders. Establishing Local Emergency Priorities and Managing the Local Emergency Response

Emergency Management for Small Community Leaders. Establishing Local Emergency Priorities and Managing the Local Emergency Response Emergency Management for Small Community Leaders Establishing Local Emergency Priorities and Managing the Local Emergency Response Unit 1 : All Emergencies Are Local 2 Unit Objectives Establish Local Emergency

More information

ASX CLEAR (FUTURES) OPERATING RULES Guidance Note 10

ASX CLEAR (FUTURES) OPERATING RULES Guidance Note 10 BUSINESS CONTINUITY AND DISASTER RECOVERY The purpose of this Guidance Note The main points it covers To assist participants to understand the disaster recovery and business continuity arrangements they

More information

MANAGEMENT AUDIT REPORT DISASTER RECOVERY PLAN DEPARTMENT OF FINANCE AND ADMINISTRATIVE SERVICES INFORMATION TECHNOLOGY SERVICES DIVISION

MANAGEMENT AUDIT REPORT DISASTER RECOVERY PLAN DEPARTMENT OF FINANCE AND ADMINISTRATIVE SERVICES INFORMATION TECHNOLOGY SERVICES DIVISION MANAGEMENT AUDIT REPORT OF DISASTER RECOVERY PLAN DEPARTMENT OF FINANCE AND ADMINISTRATIVE SERVICES INFORMATION TECHNOLOGY SERVICES DIVISION REPORT NO. 13-101 City of Albuquerque Office of Internal Audit

More information

EMERGENCY MANAGEMENT Disaster Critique

EMERGENCY MANAGEMENT Disaster Critique Department submitting critique: Date: Time: Submitted By: [ ] Haz Mat Incident [ ] Radiation [ ] Infant/Ped. Abduction [ ] Security Breach [ ] Severe Weather [ ] Major Utility Disruption [ ] Mass Casualty

More information

DISASTER RECOVERY AND CONTINGENCY PLANNING CHECKLIST FOR ICT SYSTEMS

DISASTER RECOVERY AND CONTINGENCY PLANNING CHECKLIST FOR ICT SYSTEMS Appendix L DISASTER RECOVERY AND CONTINGENCY PLANNING CHECKLIST FOR ICT SYSTEMS I. GETTING READY A. Obtain written commitment from top management of support for contingency planning objectives. B. Assemble

More information

Disaster Recovery and Business Continuity Plan

Disaster Recovery and Business Continuity Plan Disaster Recovery and Business Continuity Plan Table of Contents 1. Introduction... 3 2. Objectives... 3 3. Risks... 3 4. Steps of Disaster Recovery Plan formulation... 3 5. Audit Procedure.... 5 Appendix

More information

Is your business ready for a disaster? Ten questions to help you determine the answer.

Is your business ready for a disaster? Ten questions to help you determine the answer. Is your business ready for a disaster? Ten questions to help you determine the answer. 1. Does your company have a current emergency preparedness plan that addresses all types of business disruptions?

More information

A Framework to Support Healthcare Continuity of Operations in an Information Technology Failure:

A Framework to Support Healthcare Continuity of Operations in an Information Technology Failure: A Framework to Support Healthcare Continuity of Operations in an Information Technology Failure: Lessons learned from a novel exercise series Jendy Dunlop, MPH, CHEP Paul Biddinger, MD, FACEP http://001yourtranslationservice.com/computer-tips/protecting-your-computer.htm

More information

The goals of the Emergency Management Plan include the following: Identifying procedures to prepare and respond to potential disasters or emergencies

The goals of the Emergency Management Plan include the following: Identifying procedures to prepare and respond to potential disasters or emergencies PAGE: 1 SCOPE OF SERVICES: Solvis Staffing Service s Emergency Management Plan's scope is to provide for a program that ensures effective response to disasters or emergencies that could affect the Agency

More information

EMERGENCY MANAGEMENT PLANNING CRITERIA FOR HOSPITALS

EMERGENCY MANAGEMENT PLANNING CRITERIA FOR HOSPITALS EMERGENCY MANAGEMENT PLANNING CRITERIA FOR HOSPITALS The following minimum criteria are to be used when developing Comprehensive Emergency Management Plans (CEMP) for all hospitals. These criteria will

More information

Michigan Hospital Guide to Emergency Management: Linking the Hospital Preparedness Program with Joint Commission Success

Michigan Hospital Guide to Emergency Management: Linking the Hospital Preparedness Program with Joint Commission Success Michigan Hospital Guide to Emergency Management: Linking the Hospital Preparedness Program with Joint Commission Success Michigan Hospital Guide to Emergency Management: Linking the Hospital Preparedness

More information

Guide to Physical Security Planning & Response

Guide to Physical Security Planning & Response Guide to Physical Security Planning & Response For Hospitals, Medical & Long Term Care Facilities Includes comprehensive section on evacuation best practices All hazards planning & response Templates Best

More information

Emergency Operations California State University Los Angeles

Emergency Operations California State University Los Angeles Business Continuity Plan Emergency Operations California State University Los Angeles 1. Objective & Scope 2. Definition of Disaster 3. Risk and Business Impact Analysis Summary 4. Business Continuity

More information