1 Business Continuity Planning - A Look at Texas A&M University s Approach to Continuity Planning Monica Weintraub Emergency Management Coordinator Office of Safety & Security Texas A&M University
Objectives 2 Discuss the background of continuity planning at the university Review they key components of the University s Institutional Continuity Plan Identify resources available for departmental level continuity plans
Background Information 3
Background Mid 2000s 4 TAC 202.24 Information Security Standards State agencies shall maintain written Business Continuity Plans that address information resources so that the effects of a disaster will be minimized, and the state agency will be able either to maintain or quickly resume mission-critical functions.
Background Mid 2000s (continued) 5 Pandemic Flu (H1N5 Avian Flu) Planning Focused on workforce reduction Departments started independent plans Reoccurring questions What is the University s Plan? How will the University deal with working from home, etc?
Internal Audit - 2008 6 Findings Departments had individual plans Lacked coordination among plans Needed a university-wide program to implement and manage continuity planning
Initial Steps 7 Training IS-546: COOP Awareness Course FEMA COOP Program Manager s Train-the- Trainer Course Proposal Defined program elements Identified implementation strategy/timeline
Continuity Framework 8
Definition of COOP 9 Continuity Planning is an effort to assure that the capability exists to continue essential functions across a wide range of potential emergencies.
Essential Functions 10 Critical Infrastructure (CI) Uninterrupted or resumed within a few hours A special subset of essential functions with universitywide implications that address: Emergency Response Services Utilities, to include electricity, water, and reasonable climate control Communications with internal and external audiences to include students, faculty, staff and media. Internet, authentication, and voice communications Hazardous materials spill response and control, to include safety handling and proper disposal of toxic substances, biologically hazardous materials, and radioactive materials.
Define Essential Functions (continued) 11 Tier I: 0-12 Hours Must be restored to minimum level of service within 12 hours of incident Functions with direct and immediate effect on the jurisdiction to preserve life, safety and protect property Functions that preserve the University through command and control
Essential Functions (continued) 12 Tier II: 12 hours to Two Weeks Must reach an operations status within 12 hours to two weeks of activation Must sustain operations for a minimum of 30 days Tier III: Two Weeks to 30 Days Functions that support Tier I and Tier II Do not need to reach full operation within the first two weeks following an incident
Departments responsible for Critical Infrastructure 13 Examples Facilities Services Information Technology Environmental Health and Safety University Police University EMS Division of Finance Payroll, HR, Contracting and Procurement, Controller Transportation Services
Planning Scenarios 14 Single or Multiple Facilities Affected Fire, loss of utilities, explosion, & severe weather Loss of Personnel Infectious disease outbreak Loss of IT or Data Power outage or equipment failure
Continuity and Recovery Group 15 President Provost and Executive Vice President for Academic Affairs Vice President for Research Vice President for Administration Vice President for Marketing & Communications Vice President for Finance Vice President for Information Technology Vice President for Student Affairs
The Plan 16 Includes the continuity framework Outlines roles and responsibilities of CRG Guidance document for university departments
Review and Approval 17 Sent through chain of command for approval Signed by the President Available online at www.tamu.edu/emergency
Departmental Plans 18
Departmental Template 19 Based off of the Institutional Plan Includes Excel worksheets Essential Functions Recovery Time Objectives Responsible Parties Alternate Facility Requirements Etc
Worksheet Examples 20
Worksheet Examples 21
Worksheet Examples 22
Worksheet Examples 23
Worksheet Examples 24
Worksheet Examples 25
Worksheet Examples 26
Worksheet Examples 27
Worksheet Examples 28
Worksheet Examples 29
Worksheet Examples 30
Departmental Workshops 31 4-5 hour training Review the Institutional Plan Introduce COOP Planning Concepts Includes activities to walk departments through planning process Plans submitted to SASE within 60 days of the workshop
FEMA Resources - http://training.fema.gov/is/crslist.asp 32 IS-520 Introduction to Continuity of Operations Planning for Pandemic Influenzas IS-522 Exercising Continuity Plans for Pandemics IS-546.12 Continuity of Operations Awareness Course IS-547.a Introduction to Continuity of Operations IS-548 Continuity of Operations (COOP) Program Manager
Questions? 33 Monica Weintraub (979) 821-1041 mweintraub@tamu.edu