Update from the Business Continuity Working Group
|
|
- Randolph Garrison
- 8 years ago
- Views:
Transcription
1 23 June 2014 Performance and Resources Board 19 To note Update from the Business Continuity Working Group Issue 1 The Business Continuity Working Group oversees the development, maintenance and improvement of our business continuity plans and the associated business continuity management system. We continue to work to align these plans with the relevant standard ISO 22301: The Business Continuity Management Policy document has been reviewed and updated to reflect the Corporate Strategy for , and the Business Continuity Policy Summary statement has also been amended to reflect these changes Recommendations 3 Performance and Resources Board is asked to: a Note the work of the Business Continuity Working Group. b Note the updated Business Continuity Management Policy and Business Continuity Policy Summary statement.
2 Update from the Business Continuity Working Group Issue Background 4 The Business Continuity Working Group (BCWG) is responsible for providing management direction and support during the creation of the Business Continuity Management System (BCMS) and its subsequent development and maintenance. This work is necessary to ensure that we can respond effectively in the event of a disruption to normal operations. 5 The Business Continuity Management Policy sets out the scope and wider framework within which we develop our existing plans and align them to the ISO 22301:2012 standard. It affirms our commitment to continual improvement of the BCMS and in its summary form is available to any external interested parties. The work of the BCWG 6 The BCWG meets bi-monthly and over the last 12 months has overseen a programme of work to improve the existing plans, enhance response strategies by reviewing past incidents, raise awareness of business continuity across the organisation and further develop a business continuity management system to align with the ISO standard. We have business continuity and pandemic plans in place which have both been updated and approved by the BCWG twice in the last twelve months. 7 As plans are created or updated they are tested. Scenario based exercises and workshops facilitated by external consultants Glen Abbot are run annually. These exercises provide an opportunity for training and form part of the checking process that documentation is fit for purpose. 8 In November and December 2013 exercises were held to test the Emergency Response Plans that were developed for the 3 Hardman Street in Manchester and 350 Euston Road in London sites. These plans provide detailed guidance for front line staff and managers in the event of a significant building evacuation. This guidance for St James s Buildings is also an integral part of the Medical Practitioners Tribunal Service (MPTS) Business Continuity Plan. These three plans were published on the intranet in December On 6 June 2014 we held a planned offsite recovery test with selected Contact Centre advisers. This proved that the Contact Centre lines can be switched to the Phoenix recovery site and that the staff can relocate to take calls from there, and carry out any necessary actions on GMC systems. 10 This year, we also plan to prepare a comparison matrix setting out the availability of the GMC applications, call handling systems and management 2
3 information between Hardman Street, London office, the recovery site and other potential recovery locations for various incident scenarios. 11 The Group is planning, as part of its work programme this year, using the BCMS approach, to achieve a higher level of integration into the business at all levels and will be encouraging departments to review their Business Impact Assessments (BIA). These will then be used as the basis for the departmental plans which should document how local teams will respond if a significant incident seriously affects how we normally do business. 12 The Director of Resources and Quality Assurance, as Chair of the Group, has ed all Assistant Directors and Heads of Section to set out our objectives for this year and ask for their support in making progress across the whole organisation. The Group will promote and monitor this as part of their work programme for We are also taking this opportunity to explain to staff at all levels that we will be creating plans at local level. We have reminded them in an Inside Info article of mechanisms we have put in place to communicate with them in the event of an incident, and sources of information. We have in place: a A major incident line where staff can access recorded messages. b A system for sending a text message to all staff from a central point. c A printed leaflet about business continuity planning at the GMC with a pull off reference card which has recently been revised and is due to be reissued to all staff. HR also issues this to all new starters. d Intranet pages which contain links to our central plans and provide general information about our business continuity planning. 14 The Group identifies and reviews any external risks with the potential to disrupt operational activity or affect staff wellbeing. Where necessary actions to reduce any impact are implemented. Examples since the last update to the Performance and Resources Board at its meeting on 26 June 2013 have included: a A lightning strike on 3 Hardman St causing a power loss to part of the building, and subsequent lightning strikes in Manchester disrupting rail services. b Severe water damage at St James s Buildings following sprinkler system leak caused by contractors in another tenant s area. c Fire alarm system activations at 3 Hardman Street. 3
4 d Severe weather warnings both nationally and locally. e Suspect package in Euston Road underpass causing London office to be cordoned off by the Police. f Tube strikes. g Water supply issues for the London office following a water main burst on Euston Road. 15 The BCWG also has a standing agenda item where any incident that has, or could have, interrupted our business, or affected staff welfare is reviewed to see whether there are any lessons to be learned for future planning. 16 The group has noted that the widespread introduction of Scheduled Home Working and Ultrabooks has significantly enhanced the resilience we have in the event of such incidents. The post-incident reviews have enabled us to incorporate such changes in working practice to enhance our response strategies. Business Continuity Management Policy and policy summary statement 17 The Business Continuity Management Policy and policy summary statement, updated and approved by the Board in June 2013, has since been reviewed by the BCWG to take account of the current Corporate Strategy for and the current 2014 Business Plan. 18 The most significant changes to the policy document have been made in the sections Organisational Objectives and Obligations of the GMC and Legal and Statutory Obligations where the policy referred to the strategic aims for These sections now reflect the new Corporate Strategy and the 2014 Business Plan. 19 This document and the associated BC policy summary statement have been agreed by the BCWG under the terms of reference agreed by the Board at its meeting on 26 June The revised Business Continuity Management Policy is at Annex A, and the policy summary statement is at Annex B. The signed the policy summary statement can be issued to any external interested party. 20 These changes to documentation will not impact on the resource requirements. The Business Continuity Management Policy includes specific reference to our strategic aims, our legal and statutory obligations and ensuring that the interests of key stakeholders are supported. 4
5 Supporting Information How this issue relates to the corporate strategy and business plan 21 Core Activity: BAU_RQA_3: Ensure that the GMC can continue to deliver its primary services in the event of a significant disruption to its business. If you have any questions about this paper please contact: Steve Jones, Head of Facilities, sjones1@gmc-uk.org,
6 19 Update from the Business Continuity Working Group Annex A Business Continuity Management Policy Purpose 1 The General Medical Council is committed to developing, maintaining and improving a Business Continuity Management System (BCMS) that enables it to deliver key services to stakeholders in the event of a disruption. This system will be developed with due regard to the GMC business objectives, statutory obligations and levels of risk acceptance. 2 The GMC Business Continuity Management (BCM) Policy sets out the framework within which the GMC develops sustainable business continuity plans and will develop its existing plans to align with the new standard ISO22301:2012. This is achieved through the development of a BCMS involving a process of continual improvement. This planning is necessary to ensure that the GMC can respond effectively in the event of a disruption to normal operations. Scope 3 This policy applies to all GMC and MPTS staff and their activities at the three main GMC sites listed below: a 350 Euston Road, London. b 3 Hardman Street, Manchester. c St James s Buildings, Manchester. 4 This policy also applies to services provided by GMC staff working at the devolved offices or elsewhere but for business continuity planning purposes the premises are excluded and staff will either transfer their work to the one of the larger sites or work from home until alternative premises can be sourced. A1
7 5 This policy provides guidance for the resumption and recovery of time sensitive business operations in accordance with their designated priority as critical activities in support of key services as well as ensuring that adequate plans are in place for the less time sensitive business operations. 6 Business Continuity Management System (BCMS) Objectives 7 The objective of the BCMS is to ensure the GMC s strategic aims are not compromised in the event of disruption. 8 In developing a BCMS the GMC will: Reduce the risks which otherwise could lead to business interruption Develop Business Continuity Plans which enable the GMC to maintain continuity of service following a business interruption and reduce the impact of such a disruption for our stakeholders in accordance with the agreed recovery time set out in business continuity plans. Exercise, maintain, review and improve the Business Continuity Plans to ensure they remain fit for purpose and are appropriate to the current aims and objectives of the GMC Provide the resource needed to establish, operate, maintain and improve the BCMS Business Continuity Requirements 9 The GMC s business continuity management policy provides a framework through which the following BC requirements will be met. A comprehensive Business Continuity Management Systems (BCMS) is established and maintained following the requirements of ISO Business impact analysis and risk assessment will be applied to our key services and their supporting activities systems, process and resources The GMC will maintain a Business Continuity Risk Register (BCRR) in order to reduce the likelihood of a disruption and improve resilience. The Corporate Risk Register and the Information Security Register will be monitored for any business continuity related risks which will be reviewed and if necessary included in the BCRR. Unresolved significant or critical risks will be escalated to the BCWG prior to each meeting. A Business Continuity Strategy will be developed which will determine the most appropriate methods by which to recover the critical activities and resources within the recovery time objectives following a business interruption. Based on the BC Strategy, operational and management plans will be developed that detail how critical activities and their supporting resources will be recovered A2
8 within their recovery time objectives. These plans will also detail how the incident will be managed. Plans are subject to an ongoing exercise programme, continuous review and improvement, so that all stakeholders, including senior managers, can be assured that the BCMS remains up to date relevant and effective. Each department will carry out reviews of their business continuity plans at least annually. This will be facilitated and monitored by the Facilities Manager who has the role of Business Continuity Manager. Contracts with suppliers of critical goods and services to the GMC must include a requirement for the supplier s business continuity process to be approved to the satisfaction of GMC All staff must be made aware of the plans that affect their Directorate or section and their role following a BCP invocation. Organisational Objectives and Obligations of the GMC 10 The strategic aims for the GMC for set out below allow us to enhance and expand our core work: Make the best use of intelligence about doctors and the healthcare environment to ensure good standards and identify risks to patients. Help raise standards in medical education and practice Improve the level of engagement and efficiency in the handling of complaints and concerns about patient safety Work more closely with doctors, medical students and patients on the frontline of care. Work better together to improve our overall effectiveness, or responsiveness and the delivery of our regulatory functions Our continuing core work for 2014 includes: Delivering high quality registration, certification, revalidation and licensing services to our published service targets Dealing effectively and appropriately with concerns raised about doctor s fitness to practise Making sure that medical education and training meets our standards Working with others to develop effective relationships with employers, doctors and patients through our liaison services and with other UK and international organisations. A3
9 Risk Evaluation and Risk Appetite 11 The Business Continuity Risk Management procedure is complementary to the Risk Management Framework set out by the GMC as part of the internal control and corporate governance arrangements. 12 The procedure enables the organisation to understand the threats and vulnerabilities of its critical activities underpinning the key services and the potential impact caused by a business interruption. 13 Risk evaluation establishes whether risks are adequately mitigated and, if not, determines what additional action is required to reduce their impact or likelihood of occurrence. In each case, we define the level of residual risk that is acceptable. 14 Risk appetite is therefore established on a risk-by-risk basis by defining the level of residual risk that is tolerable and justifiable once mitigating action has been taken. 15 Using these factors, we identify risks that are not adequately mitigated and determine what additional measures are required. Where the residual risk is still considered significant or critical, the procedure details an escalation procedure for further evaluation. 16 Legal and Statutory Obligations 17 The GMC is the independent regulator for doctors in the UK We have four main functions. a Keeping up-to-date registers of qualified doctors. b Fostering good medical practice. c Promoting high standards of medical education and training. d Dealing firmly and fairly with doctors whose fitness to practise is in doubt. 18 Our legal purpose is to protect, promote and maintain the health and safety of the public by making sure that doctors meet our standards for good medical practice. 19 We do that by controlling entry to the medical register and setting the standards for medical schools and postgraduate education and training. We also determine the principles and values that underpin good medical practice and we take action when those standards are not met. A4
10 20 We have strong and effective legal powers designed to maintain the standards that the public have a right to expect from doctors. We are not here to protect the medical profession their interests are protected by others. Our job is to protect patients. 21 When any doctor fails to meet our standards, we will act to protect patients from harm if necessary we will remove the doctor from our register and remove their right to practise medicine. 22 We aim to secure a regulatory system that is independent and accountable and we: Put patient safety first. Support good medical practice. Promote fairness and equality and value diversity. Respect the principles of good regulation: proportionality, accountability, consistency, transparency and targeting. 23 The GMC was established under the Medical Act 1858 and over time legislation has been introduced that defines our powers and responsibilities in the various areas of our work. The GMC is a registered charity in England and Scotland and our governing body, the Council, makes sure that we fulfil our charitable purpose and statutory role. 24 The GMC is also committed to ensuring that it meets all the other legal obligations placed upon any business and employer for example in relation to health and safety, employment, data protection, equal opportunity legislation. 25 The GMC will use its usual communication channels to inform employees and other interested parties of any new or changed legal and regulatory requirements. Stakeholders 26 The interests of key stakeholders are supported by the BCM Policy. Stakeholders are defined as: Patients and public. Doctors. Educators. Medical Students. Other Regulators. Employers. Government A5
11 Employees Key Services 27 In the event of an incident which prevents us from fulfilling our full range of statutory functions we consider being available to the public and profession to advise, confirm registration status and receive any complaints as a key service and will recover the Contact Centre and GMC website as a priority. 28 We will also ensure that the registration of doctors, and where necessary their removal from the register where they are found unfit to practise, will continue. We will therefore restore the registration enquiry service, investigations function and the running of FTP review and IOP hearings as a priority. Management Commitment and Allocation of Responsibilities 29 The Director of Resources and Quality Assurance is responsible for Business Continuity and will be assisted in this role by the Business Continuity Working Group (BCWG). The BCWG is accountable to the Performance and Resources Board and the Director will refer matters as necessary. This board comprises the Chief Operating Officer, Directors and representative Assistant Directors. 30 The role and responsibilities of the BCWG are set out in the Business Continuity Working Group Terms of Reference document. 31 The role and responsibilities for the management of business continuity across the GMC are set out in the Business Continuity Roles and Responsibilities Document. Policy Review Date 32 This policy will be reviewed annually from the date of approval. Related Documents Business Continuity Working Group Terms of Reference. Business Continuity Roles and Responsibilities document. BC Risk Management Procedure. GMC Risk Management Framework. GMC Business Plan GMC Corporate Strategy A6
12 Document Management Document storage, access and security 33 All documents comprising the BCMS will be stored securely and centrally on Livelink which is part of the electronic document management system of the GMC. Access to specific documents, ownership and version control will be applied as appropriate to each document. This system is compliant with the ISO27001 standard and managed in accordance with the GMC Information Security Policy. The BCM Policy should not be distributed or transmitted to any other parties without the express permission of the Business Continuity Manager Preservation 34 If the document is out of date (i.e. past its review date) it should be destroyed by secure shredding for paper versions and electronic versions should be deleted. Retrieval and Use 35 This Policy provides the framework and guidance for the Business Continuity Management System and can only be retrieved from Livelink by the Business Continuity Manager, Director of Resources and Quality Assurance or the BCWG. A pdf version is available to staff on the intranet. Control of Changes 36 Uncontrolled modification and revision of content is prohibited and revision procedures should be followed at all times. No changes should be made to the Policy without the agreement from the Business Continuity Manager either as part of the maintenance programme or during an incident. 37 When major revisions are made the document should be saved as the next version number. For minor revisions the version number should be updated by 0.1. Preservation of Legibility 38 The document should be legible at all times and company guidelines for the use of style templates should be followed. Prevention of the Unintended Use of Obsolete Information 39 The Policy should be published with the date on the front page and in the header. It should never be more than 12months old. Retention and Disposal A7
13 40 Old electronic versions of the BCM Policy should be retained for 3 years in Livelink. After this it should be deleted. Paper versions of the BCM Policy should always be current. Old versions should be securely shredded. Document Control Version History Revision Status* Author Reason for Issue Drafts for S Tuffrey Creation and comment review by BCWG 1.0 Agreed S Tuffrey Final agreed version from BCWG 1.1 Draft STuffrey For review by BCWG/ Performance and Resources Board STuffrey 1.2 Issued see below Changes proposed by BCWG/AD R&QA 1.3 Agreed Stuffrey Updated to reflect GMC Corporate strategy * e.g. Draft, for Comment, Agreed Date 7 March 2011to 15 April May 2011 April/May May June 2014 Review and Sign Off By Method Signature BCWG On circulation Sign off by Chair post circ Maintenance and Review Date of Review Action Required Year from approval Review content for consistency and currency in particular business objectives and management arrangements. Responsible Person STuffrey Distribution List Version Name Position/Organisation 1.3 All members of BCWG GMC staff members Method of Issue Livelink link by A8
14 Notes All personnel listed above receive copies, or are notified, of updated versions of the document..any other copies provided to third parties are not subject to automatic update. Glossary British Standard Definitions BCMS: Business Continuity Management System is one that establishes, implements, operates, monitors, reviews, maintains and improves business continuity. BCP: Business Continuity Plan is a documented set of procedures and information that is developed, compiled and maintained in readiness for use in an incident to enable an organisation to continue to deliver its critical activities at an acceptable predefined level. BCM Policy: The Business Continuity Management Policy sets out the GMC management s commitment to BC including the organisations objectives and BC Strategy is the approach by an organisation that will ensure its recovery and continuity in the face of a disaster or other major incident or business disruption. Recovery Time Objective is the target time set for the resumption of the service, or resumption of performance of an activity, or recovery of an IT system or application after an incident. (Note: The recovery time objective has to be less than the maximum tolerable period of disruption) Maximum tolerable period of disruption is the duration after which an organisation s viability will be irrevocably threatened if a service or activity cannot be resumed Other Abbreviations BCWG: Business Continuity Working Group this GMC group is responsible for the management direction and approval of the BCMS during development phase and subsequent management review once in place. See also terms of reference documentation for further detail. A9
15 19 Update From the Business Continuity Working Group Annex B Business Continuity Policy Summary Statement 1 The GMC exists to protect, promote and maintain the health and safety of the public by making sure that doctors meet our standards for good medical practice. 2 As an independent regulator for doctors in the UK our job is to ensure patients have confidence in doctors. In order to continue to provide the services which our key interest groups value we have identified the activities which support those services as a priority for recovery in the event of any business disruption. 3 The GMC s Business Continuity policy provides the framework within which we can assure the public that the management procedures in place ensure that we have effective plans which both ensure the safety and welfare of our staff in the event of an incident and that key services are recovered to an acceptable standard as a priority. 4 We consider being available to the public and profession to advise, confirm registration status and receive any complaints as a key service and will recover the Contact Centre and GMC website as a priority. 5 We will also ensure that the registration of doctors, and where necessary their removal from the register where they are found unfit to practise, will continue. We will therefore restore the registration enquiry service, investigations function and the running of FTP review and IOP hearings as a priority. 6 The plans will contain a clear incident management structure and escalation process for the invocation of the plan. 7 There will be a requirement within the plans that communication with key interest groups and staff, is centrally managed to ensure it is factual, appropriate and timely. 8 All members of staff who have a role in recovering critical business activities or management of the incident receive regular and appropriate training. B1
16 9 The plans which all form part of the overall BCP are exercised regularly to ensure they are fit for purpose and up to date. 10 Accountability for Business Continuity resides with the Business Continuity Working Group, comprising GMC senior management. 11 The BCMS is being developed, implemented, reviewed and maintained with the aim of alignment with the ISO 22301:2012 standard. Signed: Niall Dickson Chief Executive Date: 4 June 2014 B 2
Update from the Business Continuity Working Group
18 June 2015 Performance and Resources Board 14 To note Update from the Business Continuity Working Group Issue 1 The Business Continuity Working Group oversees the development, maintenance and improvement
More informationBusiness Continuity Management Policy
Business Continuity Management Policy Business Continuity Policy Version 1.0 1 Version control Version Date Changes Author 0.1 April 13 1 st draft PH 0.2 June 13 Amendments in line with guidance PH 0.3
More information1.0 Policy Statement / Intentions (FOIA - Open)
Force Policy & Procedure Reference Number Business Continuity Management D269 Policy Version Date 23 July 2015 Review Date 23 July 2016 Policy Ownership Portfolio Holder Links or overlaps with other policies
More informationBusiness Continuity Policy and Business Continuity Management System
Business Continuity Policy and Business Continuity Management System Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain
More informationNHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY
NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY AUTHOR/ APPROVAL DETAILS Document Author Written By: Human Resources Authorised Signature Authorised By: Helen Shields Date: 20
More informationNORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00)
NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) Subject and version number of document: Serial Number: Business Continuity Management Policy
More informationBirmingham CrossCity Clinical Commissioning Group. Business Continuity Management Policy
Birmingham CrossCity Clinical Commissioning Group Business Continuity Management Policy Version V1.0 Ratified by Operational Development Group Date ratified 6 th November 2014 Name of originator / author
More informationBusiness Continuity Management
Business Continuity Management Standard Operating Procedure Notice: This document has been made available through the Police Service of Scotland Freedom of Information Publication Scheme. It should not
More informationCouncil Policy Business Continuity Management
Policy Name: Business Continuity Management Council Policy Business Continuity Management ADOPTED BY COUNCIL: 19 th April 2016 DATE OF NEXT REVIEW: 18 th April 2020 RESPONSIBLE OFFICER: REFERENCES: Chief
More informationProposal for Business Continuity Plan and Management Review 6 August 2008
Proposal for Business Continuity Plan and Management Review 6 August 2008 2008/8/6 Contents About Newton IT / Quality of our services. BCM & BS25999 Overview 2. BCM Development in line with BS25999 3.
More informationBUSINESS CONTINUITY POLICY
BUSINESS CONTINUITY POLICY Document Type Corporate Policy Unique Identifier CO-038 Document Purpose To provide a structure through which: i. A comprehensive business continuity management system (BCMS)
More informationBUSINESS CONTINUITY MANAGEMENT POLICY
BUSINESS CONTINUITY MANAGEMENT POLICY AUTHORISED BY: DATE: Andy Buck Chief Executive March 2011 Ratifying Committee: NHS Rotherham Board Date Agreed: Issue No: NEXT REVIEW DATE: 2013 1 Lead Director John
More informationBusiness Continuity Management
Business Continuity Management Version 1 approved by SMG December 2013 Business Continuity Policy Version 1 1 of 9 Business Continuity Management Summary description: This document provides the rationale
More informationBUSINESS CONTINUITY MANAGEMENT FRAMEWORK
BUSINESS CONTINUITY MANAGEMENT FRAMEWORK Document Author: Civil Contingencies Service - Authorised by the CCS Joint Management Board - Version 1.0. Issued December 2012 Page 1 FRAMEWORK STATEMENT Business
More informationBUSINESS CONTINUITY POLICY
BUSINESS CONTINUITY POLICY Last Review Date Approving Body n/a Audit Committee Date of Approval 9 th January 2014 Date of Implementation 1 st February 2014 Next Review Date February 2017 Review Responsibility
More informationPrinciples for BCM requirements for the Dutch financial sector and its providers.
Principles for BCM requirements for the Dutch financial sector and its providers. Platform Business Continuity Vitale Infrastructuur Financiële sector (BC VIF) Werkgroep BCM requirements 21 September 2011
More informationBusiness Continuity (Policy & Procedure)
Business Continuity (Policy & Procedure) Publication Scheme Y/N Can be published on Force Website Department of Origin Force Operations Policy Holder Ch Supt Head of Force Ops Author Business Continuity
More informationInformation Security Policy. Chapter 11. Business Continuity
Information Security Policy Chapter 11 Business Continuity Author: Policy & Strategy Team Version: 0.5 Date: July 2008 Version 0.5 Page 1 of 6 Document Control Information Document ID Document title Sefton
More informationSolihull Clinical Commissioning Group
Solihull Clinical Commissioning Group Business Continuity Policy Version v1 Ratified by SMT Date ratified 24 February 2014 Name of originator / author CSU Corporate Services Review date Annual Target audience
More informationNOT PROTECTIVELY MARKED BUSINESS CONTINUITY. Specialist Operations Contingency Planning Business Continuity Manager 17.09.12
POLICY BUSINESS CONTINUITY Policy owners Policy holder Author Head of Services Specialist Operations Contingency Planning Business Continuity Manager Policy No. 132 Approved by Legal Services 17.09.12
More informationBusiness Continuity Policy
Business Continuity Policy St Mary Magdalene Academy V1.0 / September 2014 Document Control Document Details Document Title Document Type Business Continuity Policy Policy Version 2.0 Effective From 1st
More informationNHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy. Version 1.0
NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy Version 1.0 Document Control Title: Status: Version: 1.0 Issue date: May 2014 Document owner: (Name,
More informationHow To Manage A Disruption Event
BUSINESS CONTINUITY FRAMEWORK DOCUMENT INFORMATION DOCUMENT TYPE: DOCUMENT STATUS: POLICY OWNER POSITION: INTERNAL COMMITTEE ENDORSEMENT: APPROVED BY: Strategic document Approved Manager Organisational
More informationBusiness Continuity Management
Business Continuity Management Policy Statement & Strategy July 2009 Basildon District Council Business Continuity Management Policy Statement The Council is committed to ensuring robust and effective
More informationInstitute for Business Continuity Training 1623 Military Road, # 377 Niagara Falls, NY 14304-1745
ECP - 601: Effective Business Continuity Management: ISO 22301 This 3-day course provides an intensive, hands-on workshop covering all major aspects for the design of an effective Business Continuity Plan
More informationRisk Management Framework
4 November 2013 Performance and Resources Board 15 To consider Risk Management Framework Issue 1 To consider a draft revised Risk Management Framework as requested by Council at its meeting on 7 February
More informationBCS Practitioner Certificate in Business Continuity Management Syllabus
BCS Practitioner Certificate in Business Continuity Management Syllabus Version 4.3 March 2015 Contents Change History... 4 Introduction... 5 Objectives... 5 Entry Criteria... 5 Examination Format and
More informationBusiness Continuity Policy
Business Continuity Policy Reference Number: 243 Author & Title: Siân Dyson Resilience Manager Responsible Director: Chief Operating Officer Review Date: 29 May 2018 Ratified by: Francesca Thompson Chief
More informationBusiness Continuity Policy
Business Continuity Policy Page 1 of 15 Business Continuity Policy First published: Amendment record Version Date Reviewer Comment 1.0 07/01/2014 Debbie Campbell 2.0 11/07/14 Vicky Ryan Updated to include
More informationLondon Borough of Bromley. Executive & Resources PDS Committee. Disaster Recovery Plans for London Borough of Bromley
Report No. DRR12/041 London Borough of Bromley PART 1 - PUBLIC Decision Maker: Executive & Resources PDS Committee Date: 4 th April 2012 Decision Type: Non-Urgent Non-Executive Non-Key Title: Disaster
More informationCompany Management System. Business Continuity in SIA
Company Management System Business Continuity in SIA Document code: Classification: Company Project/Service Year Document No. Version Public INDEX 1. INTRODUCTION... 3 2. SIA S BUSINESS CONTINUITY MANAGEMENT
More informationBusiness Continuity Management Policy
Governance: Business Committee Policy Owner: Chief Superintendent, Corporate Services Department: Corporate Services Policy Number: 002 Version: 3.0 Policy Writer: Business Continuity Co-ordinator Effective
More informationEssex Clinical Commissioning Groups. Business Continuity Management System. Scope and Policy
Essex Clinical Commissioning Groups Essex Clinical Commissioning Groups Business Continuity Management System Scope and Policy Policy Author: Daniel Hale - Head of Emergency Planning Version: 1.0 Date
More informationBUSINESS CONTINUITY POLICY RM03
BUSINESS CONTINUITY POLICY RM03 Applies to: All NHS LA employees, contractors, secondees and consultants, contractors and/or any other parties who will carry out duties on behalf of the NHS LA Version:
More informationAppendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015. Business Continuity Policy Statement 2015
Appendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015 Business Continuity Policy Statement 2015 This Policy sets the direction for Business Continuity
More informationWILTSHIRE POLICE FORCE POLICY
Template v4 WILTSHIRE POLICE FORCE POLICY BUSINESS CONTINUITY MANAGEMENT SYSTEMS (BCMS) Effective from: July 2013 Version: 2.0 Next Review Date: July 2015 POLICY STATEMENT Wiltshire Police has a statutory
More informationBusiness Continuity Policy
Business Continuity Policy Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain its essential business functions during
More informationBusiness Continuity Policy
Business Continuity Policy 1 NHS England INFORMATION READER BOX Directorate Medical Commissioning Operations Patients and Information Nursing Trans. & Corp. Ops. Commissioning Strategy Finance Publications
More informationWEST YORKSHIRE FIRE & RESCUE SERVICE. Business Continuity Management Strategy
WEST YORKSHIRE FIRE & RESCUE SERVICE Business Continuity Management Strategy Date Issued: 12 November 2012 Review Date: 12 November 2015 Version Control Version Number Date Author Comment 0.1 June 2011
More informationBusiness Continuity Policy
Page 1 of 16 Business Continuity Policy Issue Date: Aug 2013 Document Number: 00241 Prepared by: Business Management and Continuity Senior Manager Next Review Date: April 2014 Page 2 of 16 NHS England
More informationEmergency Response and Business Continuity Management Policy
Emergency Response and Business Continuity Management Policy Owner: John Duffy, Registrar & Secretary Last updated: September 2012 Version: 04 Document control Date Version Author Changes To be populated
More informationSouth Norfolk Council Business Continuity Policy
South Norfolk Council Business Continuity Policy 1 Title: Business Continuity Policy Date of Publication: TBC Version: 2 Published by: Emergency Planning Team Review date: April 2014 Document Owner: Document
More informationCoping with a major business disruption. Some practical advice
Coping with a major business disruption Some practical advice Coping with a major business disruption What is business continuity? Business continuity planning (BCP) is a management process that helps
More informationBusiness Continuity Management Framework 2014 2017
Business Continuity Management Framework 2014 2017 Blackpool Council Business Continuity Framework V3.0 Page 1 of 13 CONTENTS 1.0 Forward 03 2.0 Administration 04 3.0 Policy 05 4.0 Business Continuity
More informationBy. Mr. Chomnaphas Tangsook Business Director BSI Group ( Thailand) Co., Ltd
BS 25999 Business Continuity Management By. Mr. Chomnaphas Tangsook Business Director BSI Group ( Thailand) Co., Ltd 1 Contents slide BSI British Standards 2006 BS 25999(Business Continuity) 2002 BS 15000
More informationPAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA
1 Chapter-4: Business Continuity Planning and Disaster Recovery Planning PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA Learning Objectives 2 To understand the concept of Business Continuity Management To understand
More informationBusiness Continuity Business Continuity Management Policy
Business Continuity Business Continuity Management Policy : Date of Issue: 28 January 2009 Version no: 1.1 Review Date: January 2010 Document Owner: Patricia Hughes Document Authoriser: Tony Curtis 1 Version
More informationBusiness Continuity Management Framework
Business Continuity Management Framework Date of Issue: November 2013 Review Date: November 2014 Written by: Jackie Orchard Risk & Business Continuity Manager Authorised by: Signed off by: DCC Francis
More informationNHS Hardwick Clinical Commissioning Group. Business Continuity Policy
NHS Hardwick Clinical Commissioning Group Business Continuity Policy Version Date: 26 January 2016 Version Number: 2.0 Status: Approved Next Revision Due: January 2017 Gordon Stevens MBCI Corporate Assurance
More informationBusiness Continuity Management Policy and Framework
Management Policy and Framework Version: Produced by: Date Produced: Approved by: Updated: 7 University Manager with the assistance of the Operational Group 11 th March 2010 Steering Group (14 December
More informationBusiness Continuity Plan Toolkit
Business Continuity Plan Toolkit March 2015 1 Contents The Template instructions for use... 2 Introduction... 3 What is the purpose of this toolkit?... 3 Why do you need a Business Continuity Plan?...
More informationBUSINESS CONTINUITY PLAN
BUSINESS CONTINUITY PLAN [Name of Team/Service/Organisation] [Insert Building Name and Address] [Insert date] Detailing arrangements for: Incident Management Business Continuity Recovery and Resumption
More informationSouth West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy
South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy Reference No: CG 01 Version: Version 1 Approval date 18 December 2013 Date ratified: 18 December 2013 Name of Author
More informationNHS Durham Dales, Easington and Sedgefield Clinical Commissioning Group. Business Continuity Plan
NHS Durham Dales, Easington and Sedgefield Clinical Commissioning Group Business Continuity Plan Page 1 Review To be done annually Author Chief Operating Officer Reviewer Head of Corporate Services Version
More informationBUSINESS CONTINUITY STRATEGY 2014-2017
BUSINESS CONTINUITY STRATEGY 2014-2017 This strategy covers the period 01 April 2014 31 March 2017 and was approved by the Major Incident Working Group 19.03.2014 Caroline Rushmer Major Incident and Business
More informationBusiness Continuity Planning
Business Continuity Planning Public Entities Risk Management Forum 5 th July 2012 Presented by Mark Penberthy FBCI Overcoming Practical Challenges Business Continuity Management (BCM) AGENDA 1. What is
More informationBusiness Continuity Management For Small to Medium-Sized Businesses
Business Continuity Management For Small to Medium-Sized Businesses Produced by NORMIT and Norfolk County Council Resilience Team For an electronic copy of this document visit www.normit.org Telephone
More informationAppendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016
Appendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016 Policy Statement - 2016 This Policy sets the direction for Business Continuity Management at Leicester
More informationInformation governance strategy 2014-16
Information Commissioner s Office Information governance strategy 2014-16 Page 1 of 16 Contents 1.0 Executive summary 2.0 Introduction 3.0 ICO s corporate plan 2014-17 4.0 Regulatory environment 5.0 Scope
More informationRISK MANAGEMENT FRAMEWORK. 2 RESPONSIBLE PERSON: Sarah Price, Chief Officer
RISK MANAGEMENT FRAMEWORK 1 SUMMARY The Risk Management Framework consists of the following: Risk Management policy Risk Management strategy Risk Management accountability Risk Management framework structure.
More informationTitle: Rio Tinto management system
Standard Rio Tinto management system December 2014 Group Title: Rio Tinto management system Document No: HSEC-B-01 Standard Function: Health, Safety, Environment and Communities (HSEC) No. of pages: 23
More informationCorporate Business Continuity Plan
Corporate Business Continuity Plan Prepared and Emergency Resilience Team Version: 5.0 issued by: Date: June 2015 Review Date: April 2018 CONTENTS Page No Foreword 3 Distribution 4 Revision History 5 Record
More informationBUSINESS CONTINUITY MANAGEMENT POLICY
This document is uncontrolled once printed. Please check on the CCG s Intranet site for the most up to date version BUSINESS CONTINUITY MANAGEMENT POLICY DOCUMENT CONTROL Type of Document Document Title
More informationBSO Board Director of Human Resources & Corporate Services Business Continuity Policy. 28 February 2012
To: From: Subject: Status: Date of Meeting: BSO Board Director of Human Resources & Corporate Services Business Continuity Policy For Approval 28 February 2012 The Board is asked to agree the attached
More informationBusiness Continuity Management Policy
Governance 1 Purpose The purpose of this policy is to communicate Business Continuity Management (BCM) framework, responsibilities and guiding principles for Victoria to effectively prepare for and achieve
More informationCITY UNIVERSITY OF HONG KONG Business Continuity Management Standard
PUBLIC Version: 1.0 CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard (Approved by the Information Strategy and Governance Committee in December 2013; revision 1.1 approved by Chief
More informationThe PNC Financial Services Group, Inc. Business Continuity Program
The PNC Financial Services Group, Inc. Business Continuity Program subsidiaries) 1 Content Overview A. Introduction Page 3 B. Governance Model Page 4 C. Program Components Page 4 Business Impact Analysis
More informationI attach the following documents in response:
London Fire Brigade Headquarters 169 Union Street London SE1 0LL T 020 8555 1200 F 020 7960 3602 Minicom 020 7960 3629 www.london-fire.gov.uk Freedom of Information request reference number: FOIA608.1
More informationBusiness Continuity Planning Manual. Version 1
Business Continuity Planning Manual Version 1 Business Continuity Planning for NHS Organisations Business Continuity Planning Manual CONTENTS INTRODUCTION... 1 BACKGROUND... 3 1. SCOPE, AIMS AND OBJECTIVES...
More informationCENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT
CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT JANUARY 2008 GUIDELINE ON BUSINESS CONTINUITY GUIDELINE CBK/PG/14
More informationEMERGENCY PREPAREDNESS POLICY
EMERGENCY PREPAREDNESS POLICY CONTROLLED DOCUMENT CATEGORY: CLASSIFICATION: Policy Emergency Planning PURPOSE This document sets out the strategic framework for the management of emergency preparedness
More informationThe Performance Review Standards
The Performance Review Standards Standards of Good Regulation June 2010 The Professional Standards Authority The Professional Standards Authority for Health and Social Care is the new name for the Council
More informationBusiness continuity plan
Business continuity plan Business continuity plan for Author:. (Position..) Date: This plan is reviewed annually Please populate the blue areas in this document with the information you collected in the
More informationDEPARTMENT FOR TRANSPORT BUSINESS CONTINUITY MANAGEMENT POLICY
DEPARTMENT FOR TRANSPORT BUSINESS CONTINUITY MANAGEMENT POLICY Introduction 1. This policy is a key part of the Department for Transport s internal control framework and specifically covers the Department
More informationReport of the Audit and Risk Committee
10 December 2014 Council 7 To consider Report of the Audit and Risk Committee Issue 1 Twice a year the Audit and Risk Committee prepares a report for Council which details the work it has undertaken since
More informationwww.td.com.au Business Continuity - IT Disaster Recovery Discussion Paper - - Commercial in Confidence Version V2.0R Wednesday, 5 September 2012
Business Continuity - IT Disaster Recovery Discussion Paper - - Version V2.0R Wednesday, 5 September 2012 Commercial in Confidence Melbourne Sydney 79-81 Coppin St Level 2 Richmond VIC 3121 414 Kent St
More informationBUSINESS CONTINUITY MANAGEMENT POLICY. October 2012
BUSINESS CONTINUITY MANAGEMENT POLICY October 2012 1 Policy Statement 1.1 PHSO s Business Continuity Management (BCM) arrangements aim to provide a mechanism for ensuring that any incidents affecting the
More informationRisk Management & Business Continuity Manual 2011-2014
ANNEX C Risk Management & Business Continuity Manual 2011-2014 Produced by the Risk Produced and by the Business Risk and Business Continuity Continuity Team Team February 2011 April 2011 Draft V.10 Page
More informationBCP and DR. P K Patel AGM, MoF
BCP and DR P K Patel AGM, MoF Key difference between BS 25999 and ISO 22301 ISO 22301 puts a much greater emphasis on setting the objectives, monitoring performance and metrics aligning BC to top management
More informationGROUP BUSINESS CONTINUITY MANAGEMENT POLICY
GROUP BUSINESS CONTINUITY MANAGEMENT POLICY POLICY IMPLEMENTATION CHECKLIST Policy Guardian: Business Services Director Author: Business Services Director Version number: 1 Approved by Chief Executive
More informationBusiness Continuity Management (BCM) Policy
Business Continuity Management (BCM) Policy Reference number: Corporate 042 Title: Business Continuity Management (BCM) Policy Version number: Version 2 Policy Approved by: LLR PCT Cluster Board Date of
More informationEPRR: Toolkit Facilitator Guide
NHS England Business Continuity Management EPRR: Toolkit Facilitator Guide APPENDIX 1 1 [Intentionally Blank] INTRODUCTION The document has been designed to assist you to deliver the outcomes of the workshop
More informationStaying In Business. A Business Continuity White Paper by. Paul O Brien and Gerard Joyce. LinkResQ Limited
Staying In Business A Business Continuity White Paper by Paul O Brien and Gerard Joyce LinkResQ Limited Contents: Introduction. 2 What is Business Continuity? 2 Loss Events = Opportunities for Disaster..
More informationBUSINESS CONTINUITY MANAGEMENT POLICY
BUSINESS CONTINUITY MANAGEMENT POLICY Version No: 1 Issue Status: awaiting Trust Board approval Date of Ratification: 11th April 2012 Ratified by: Risk Management Committee Policy Author(s): Stuart Coalwood
More informationBusiness Continuity Planning and Disaster Recovery Planning
4 Business Continuity Planning and Disaster Recovery Planning Basic Concepts 1. Business Continuity Management: Business Continuity means maintaining the uninterrupted availability of all key business
More informationBusiness Continuity Planning
Business Continuity Planning We believe all organisations recognise the importance of having a Business Continuity Plan, however we understand that it can be difficult to know where to start. That s why
More informationBusiness Continuity Management. Policy Statement and Strategy
Business Continuity Management Policy Statement and Strategy November 2011 Title Business Continuity Management Policy & Strategy Date of Publication: Cabinet Council Published by Borough Council of King
More informationCHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY AND POLICY
Zurich Management Services Limited Registered in England: No 2741053 Registered Office The Zurich Centre, 3000 Parkway Whiteley, Fareham Hampshire, PO15 7JZ CHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY
More informationHSE P0801 HSE Document Control and Records Management Procedure
HSE P0801 HSE Document Control and Records 1. DOCUMENT CONTROL... 2 2. PURPOSE... 4 3. SCOPE... 4 4. DEFINITIONS... 4 5. ROLES AND RESPONSIBILITIES... 5 6. PROCESS DETAILS... 7 6.1 Document Control...
More informationWEST LOTHIAN COUNCIL INFORMATION SECURITY POLICY
WEST LOTHIAN COUNCIL INFORMATION SECURITY POLICY DATA LABEL: PUBLIC INFORMATION SECURITY POLICY CONTENTS 1. INTRODUCTION... 3 2. MAIN OBJECTIVES... 3 3. LEGISLATION... 4 4. SCOPE... 4 5. STANDARDS... 4
More informationThe publication of fitness to practise data by secondary care location in the UK: guide to the data
Appendix B The publication of fitness to practise data by secondary care location in the UK: guide to the data For terminology used in the data and in the memo please see Annex A. Our Role 1. As the regulator
More informationBusiness Continuity: NHS Workshop Appendix 1.1
1 Business Continuity: NHS Workshop Appendix 1.1 2 Housekeeping Fire safety Breaks and refreshments Toilets Mobiles and pagers 3 Introduction Respect each others contributions What is said in the room
More informationBusiness continuity management policy
Business continuity management policy health.wa.gov.au Effective: XXX Title: Business continuity management policy 1. Purpose All public sector bodies are required to establish, maintain and review business
More informationLondon Borough of Merton
London Borough of Merton STRATEGIC BUSINESS CONTINUITY PLAN April 2014 Distribution List: Name Ged Curran Caroline Holland Yvette Stanley Simon Williams Chris Lee Title Chief Executive Director of Corporate
More informationPS 170 Business Continuity Management Policy
PS 170 Business Continuity Management Policy July 2013 Version 2 Statement of legislative compliance This document has been drafted to comply with the general and specific duties in the Equality Act 2010;
More informationState of South Carolina Policy Guidance and Training
State of South Carolina Policy Guidance and Training Policy Workshop All Agencies Business Continuity Management Policy June 2014 Agenda Questions & Follow-Up Policy Workshop Overview & Timeline Policy
More informationThe Business of Continuity
The Business of Continuity The loss of, or serious disruption to, any critical process, function or system can have a significant impact on an organisation; in some cases threatening its very survival.
More informationBusiness Continuity Management
Annex A Business Continuity Management Programme Business Continuity Management Policy 1. Introduction This Business Continuity Management (BCM) Policy defines the scope of the SPCB s ability to maintain
More informationChapter 6 Business continuity management
74 CHAPTER 6 BUSINESS CONTINUITY MANAGEMENT Chapter 6 Business continuity management Summary The Act requires Category 1 responders to maintain plans to ensure that they can continue to exercise their
More informationBusiness Continuity Management Governance. Frank Higgins Abu Dhabi March 2015
Business Continuity Management Governance Frank Higgins Abu Dhabi March 2015 Different Names Same Concept BCM (Business Continuity Management) BSI 25999 IPOCM (Incident Preparedness & Operational Continuity
More information