BUSINESS CONTINUITY PLAN



Similar documents
BUSINESS CONTINUITY PLAN 1 DRAFTED BY: INTEGRATED GOVERNANCE MANAGER 2 ACCOUNTABLE DIRECTOR: DIRECTOR OF QUALITY AND SAFETY 3 APPLIES TO: ALL STAFF

BUSINESS CONTINUITY PLAN

2.1 To define the backup strategy for systems and data within the Cape Winelands District Municipality (CWDM).

BUSINESS CONTINUITY PLAN

Business Continuity Plans

BUSINESS CONTINUITY STRATEGY

Business Continuity Plan Guidance and Template to support Small Businesses

Business Continuity Policy & Plans

Continuity Planning and Disaster Recovery

Business Continuity Management For Small to Medium-Sized Businesses

London Borough of Merton

NETWORK SERVICES WITH SOME CREDIT UNIONS PROCESSING 800,000 TRANSACTIONS ANNUALLY AND MOVING OVER 500 MILLION, SYSTEM UPTIME IS CRITICAL.

This policy is not designed to use systems backup for the following purposes:

Disaster Recovery Checklist Disaster Recovery Plan for <System One>

Secondary School 1/04/2015. ICT Service Specification by: Andrea Warburton ONE IT SERVICES AND SOLUTIONS

Business Continuity Plan

How To Manage A Business Continuity Strategy

BUSINESS CONTINUITY MANAGEMENT PLAN

ABERDARE COMMUNITY SCHOOL

How To Audit Health And Care Professions Council Security Arrangements

Education and Workforce Development Cabinet POLICY/PROCEDURE. Policy Number: EDU-06 Effective Date: April 15, 2006 Revision Date: December 20, 2012

Business continuity plan

Policy Document. IT Infrastructure Security Policy

BUSINESS CONTINUITY PLAN

Resource Ordering and Status System. User Business Resumption Plan

The Council is invited to note the methods used to develop the business continuity plan

FAYETTEVILLE STATE UNIVERSITY POLICY ON INFORMATION SECURITY

Online Backup Solution with Disaster Recovery

BRENTWOOD BOROUGH COUNCIL BUSINESS CONTINUITY SERVICE RECOVERY PLAN FOR...

Clinic Business Continuity Plan Guidelines

ISS Student Data Storage Policy Security: Internal Only

POLICIES AND ASSOCIATED PROCEDURES

Modification after decommission of AX100 SAN (RVN00-FILEDR) /3/2009 Deputy IT Operations Manager

Joint Audit Report for South Lakeland District Council. & Eden District Council

Business Continuity Plan. MakeStuff Ltd

Remote Access and Home Working Policy London Borough of Barnet

itg CloudBase is a suite of fully managed Hybrid & Private Cloud Services ready to support your business onwards and upwards into the future.

MANAGEMENT AUDIT REPORT SECURING CRITICAL DATA CITYWIDE REPORT NO City of Albuquerque Office of Internal Audit and Investigations

BARRAMUNDI L IMITED RISK MANAGEMENT POLICY

How to Build a Comprehensive Business Continuity Plan

Policy Document. Communications and Operation Management Policy

Business Continuity Management Policy and Plan

AMERICAN INVESTORS GROUP, INC. BUSINESS CONTINUITY PLAN (BCP)

POLICY AND PROCEDURE. Business Continuity Plan. SoLO Life Opportunities

PARKES SHIRE COUNCIL BUSINESS CONTINUITY POLICY

South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy

Virginia Commonwealth University School of Medicine Information Security Standard

BUSINESS CONTINUITY PLAN (BCP)

How To Manage A Disruption Event

Enterprise South Liverpool Academy

Hong Kong Baptist University

How to Prepare for an Emergency: A Disaster and Business Recovery Plan

UMHLABUYALINGANA MUNICIPALITY

Disaster Recovery Plan

HIPAA Security COMPLIANCE Checklist For Employers

BUSINESS CONTINUITY POLICY

BUSINESS CONTINUITY PLAN (TEMPLATE)

Clovis Municipal School District Information Technology (IT) Disaster Recovery Plan

BUSINESS CONTINUITY PLANNING

Clinic Business Continuity Plan Guidelines

Information Technology Services Core Services SLA

CCTV Monitoring - Terms and conditions, scope of work

WEST LOTHIAN COUNCIL INFORMATION SECURITY POLICY

39 GB Guidance for the Development of Business Continuity Plans

Information Technology Campus Closure Business Continuity Plan v1.0 November 5, 2009

Unit Guide to Business Continuity/Resumption Planning

BACKUP STRATEGY AND DISASTER RECOVERY POLICY STATEMENT

GLASGOW KELVIN COLLEGE BOARD OF MANAGEMENT LEARNING AND TEACHING COMMITTEE ICT PROJECTS PROGRESS REPORT. Report by ICT Technical Manager 19/02/15

BUSINESS CONTINUITY PLAN

Method 1 of 4: Understanding What Makes a Good Business Continuity Plan

Disaster Recovery for Small Businesses

ISS Student Data Storage Policy Security: Internal Only

Our Colorado region is offering a FREE Disaster Recovery Review promotional through June 30, 2009!

Corporate Business Continuity Plan

IT Disaster Recovery Plan Template

<Client Name> IT Disaster Recovery Plan Template. By Paul Kirvan, CISA, CISSP, FBCI, CBCP

BUSINESS CONTINUITY PLAN

BUSINESS CONTINUITY PLAN (BCP) Version Revised 10/2013

Ixonos Cloud Solutions - A Review

Our Business Continuity Solutions Ensure Long-Term Success

London Local Authorities Business Continuity Guidance for Suppliers & Contractors

Business Continuity Management. Policy Statement and Strategy

Best Practices for Trialing the Intronis Cloud Backup and Recovery Solution

Audit4 Installation Requirements

Business Continuity Plan

Crisis Management Plan

Kings Worthy Primary School Critical Incident Plan

Business Continuity Management & Disaster Recovery GETTING STARTED Checklist for Local Businesses & Organisations

Business Continuity Planning (BCP) / Disaster Recovery (DR)

Hanh Do, Director, Information System Audit Division, GAA. SUBJECT: Review of HUD s Information Technology Contingency Planning and Preparedness

Disaster Recovery Plan Checklist

It may also include denial of use of property, plant and equipment or the inability of employees to attend their place of work.

Appendix 6c. Final Internal Audit Report Disaster Recovery Planning. June Report 6c Page 1 of 15

April 15, 2016 Presented by David Falldien. Disaster Recovery: For business continuity

BUSINESS CONTINUITY MANAGEMENT POLICY

Business Continuity Plan

Appendix E to DIR Contract Number DIR-TSO-2736 CLOUD SERVICES CONTENT (ENTERPRISE CLOUD & PRIVATE CLOUD)

Safer Communities Overview and Scrutiny Panel 2 September Problem Debts and Loan Sharks Update

NHS Lancashire North CCG Business Continuity Management Policy and Plan

Interim Audit Report. Borough of Broxbourne Audit 2010/11

Transcription:

MIND IN CROYDON BUSINESS CONTINUITY PLAN Mind This document describes the main issues that might affect the provision of Mind in Croydon s services and describes courses of action to mitigate any disruption to our services should such events occur. A more detailed approach to risk management is described in our Risk Management Policy and this Business Continuity Plan should be read taking into account the Risk Management and Health and Safety Policies. All of Mind in Croydon s policies are available on our website at www.mindincroydon.org.uk. ACCOMMODATION Fire, flood or other occurrences Mind in Croydon delivers services from four premises in the London Borough of Croydon. It owns three of these premises and rents one from the London Borough of Croydon. Should any of these premises become unavailable for use, the manager of that building should contact one of the senior management team to discuss a short, medium and long terms plan to allow the continuing delivery of services. Contact details for key staff, trustees and others are included in appendix 1 of this plan. Depending on the nature of the disruption to service (i.e. a building being seriously damaged by fire will require a different response compared to a temporary inability to use the building because of a gas leak etc) a plan will be put in place. It should be noted that all premises have fireproof safes for the safe storage of chequebooks, memory sticks and other important documents. In the short term, services can be continued by staff relocating to another of Mind in Croydon s premises or by working from home (if appropriate) using remote access to Mind in Croydon s I.T. systems via a Virtual Private Network and work mobile phones. Longer term solutions, including the renting of alternative premises or a longer term delivery of service from other premises will be developed within 48 hours of the disruption to service. It should be remembered that during the nine months that one of Mind in Croydon s premises was being extended and refurbished a plan was put in place to deliver services and this plan worked well. INFORMATION TECHNOLOGY Data backup and disaster recovery details. Mind in Croydon expects all staff to save all data either to a file server or to a NAS (network attached storage) where it will be backed up on a daily basis. Files saved to a desktop or to any other location on their PC will not be backed up. The arrangement and locations of the servers are as follows (the schematic in appendix shows a diagrammatic view); 1

Purley Office: 1 x File and Exchange Server no user data is stored here, however all Purley staff mailboxes reside on this server and are backed up nightly to an external USB hard drive. This drive is one of a group of drives that are rotated regularly with the previous drive in the series taken offsite. 1 x NAS a significant part of the organisations data is stored here. The NAS is backed up nightly in conjunction with the File and Exchange Server above using the same USB hard drives with the same offsite guidelines. 1 x Terminal Server this server is used as a conduit for remote users. No data is stored here. Orchard House: 1 x File and Exchange Server both user data and mailboxes are stored here and both are backed up nightly to an external USB drive. Rotation and offsite guidelines are as above. Fairfield Club: 1 x File and Exchange Server both user data and mailboxes are stored here and both are backed up nightly to an external USB drive. Rotation and offsite guidelines are as above. 1 x Terminal Server This is reserved for members. Each time a member logs on their profile is refreshed and any data saved in previous sessions is deleted. Enterprise House: There are no servers or storage areas here. All users connect via a Virtual Private Network (VPN) to the Purley Terminal Server and save their data to the Purley NAS. To summarise the above, all data and mailboxes are backed up nightly along with the system and active directory settings of each file and exchange server. The NAS is backed up nightly. A complete system image is held for each terminal server and these are updated as necessary. Should a disaster occur to any or all of the above locations it will be possible to restore all or part of the system to its pre disaster state. PROVISION FOR DISRUPTION TO SERVICE CAUSED BY EXTREME WEATHER CONDITIONS Preparation for Extreme Weather A member of the senior management team will aim to inform staff in advance of severe weather warnings for our area so that staff can prepare for potential difficulties. If extreme weather, likely to seriously disrupt travel, is predicted then the following steps should be taken in advance: Line managers should ensure that: All staff that they manage have the home contact number/mobile for their line manager Contact details have been collated for all clients or professionals who have appointments with staff over the next couple of days Discussions have taken place with each staff member that they manage about the potential for working at home (potentially through remote access) if staff are unable to get into work Computers are left on (but logged off) in order to enable remote access 2

Staff should ensure that: They have a discussion with their line manager to cover the issues outlined in above Procedure for Responding to Extreme Weather Extreme weather can have widespread implications for the operation of the agency including potential cancellation of appointments and lack of cover for staff who are able to get into work. Consequently, in these rare circumstances, staff are expected to make themselves available for conversations with their line manager earlier that their normal working hours. The procedure to be followed on a morning affected by extreme weather is: Between 8am 9am all staff who would normally be working on that day must make contact with their line manager to inform them if they are likely to have difficulty getting into work. The line manager is responsible for agreeing whether staff are expected to try and get into work and if this is not deemed practical or safe, then agreeing arrangements for cancelling any appointments and agreeing what work may be undertaken from home. Line managers will make contact with a member of the senior management team, again between 8am and 9am, to inform them of the outcome of discussions with staff so that any decisions can be made about the overall cover in the agency. Staff are able to undertake much of their work from home using laptop computers which can access the Mind in Croydon network via a VPN and mobile telephones which have been issued to staff. This procedure should be repeated for any subsequent day affected by extreme weather. In the case of the counselling service it is expected that the Counselling Manager, in conjunction with the senior management team, will make the decision about whether volunteer counsellors should or shouldn t be expected to try and get into the agency. If it is agreed that counselling appointments should be cancelled, then the Counselling Manager will make contact with the relevant counsellors and will check if any of their clients have particular needs that require a personalised response to cancelling their appointment. The Counselling Manager will then take responsibility for cancelling appointments with clients. It is generally expected that staff will make reasonable efforts to get into the agency whenever it is practical and safe to do so. This includes exploring alternative routes or methods of travel including public transport or walking for those within 2 miles of the office. As a service working directly with vulnerable people, it is important that we seek to keep the service operating whenever possible. However staff are not expected to take any undue risks in order to get into work. If staff do manage to get into work, it is at the discretion of the line manager to agree whether it may be appropriate to close the service early in order to ensure that staff are able to safely travel home. Review of the plan This plan will be reviewed annually be the Risk Management Committee and Board of Mind in Croydon Reviewed and Updated by the Board of Mind in Croydon August 2014 3

MIND IN CROYDON Appendix 1 Key contact details: Position/Service Named contact Emergency contact details Chair Peter Beckett 020 8668 4772 Vice Chair Jo Leck 020 8668 2534 Hon Treasurer Tony Horton 07956 953574 Chief Executive Richard Pacitti 07703 196073 Business Development & Service Delivery Manager Emma Turner 07541 006 973 H.R. & Office Manager Cara Scott 07590 056864 Finance and I.T. Officer (also prime contact for insurance issues) Mike Owen 07841 066121 I.T Support Symac Ltd (Chris Carr or Richard Swann 07841 066117 07841 066118 Telephone Systems Global 4 0870 458 2910 01403 272 910 Insurance Insurance Giles (David Williams) Public & Employee Liability Weald (Herman) Premises & Contents 0121 200 4938 01959 56 5678 4

Appendix 2 5