ACRP
Airport Cooperative Research Program
Operational and Business Continuity Planning for
Prolonged Airport Disruptions
AGTA Meeting
Round II Workshop – 3:00 PM
Michael J. Corby, CISSP, CCP, PMP
Principal Investigator
September 14, 2010

–
–
–
–
–
–
–
2

Traditional Business Continuity Planning Process
APPROACH
Project
Management
Business
Impact
Analysis
Gap Analysis &
Strategy
Plan
Development
& Integration
Testing &
Maintenance
ACTIONS
Establish steering committee
Identify roles and responsibilities
Develop project plan
Customize status reporting tools
Prepare kickoff presentation
Conduct BIA interviews/ workshops
Distribute and complete BIA questionnaires
Review BIAs and conduct follow-up interviews
Identify and document resource requirements based on BIAs
Conduct gap analysis
Prepare strategy options presentation
Conduct Manual
Workaround and
Data Restoration workshop
Complete
Business
Relocation Plan
Prepare plan model with completed BCP
Plan and conduct structured walkthrough/ tabletop exercise
Prepare maintenance and testing procedures
RESULTS
Kickoff
Presentation
BIA
Questionnaire
Periodic Status
Reports
BIA Workshops
Business
Requirements
Summary
Gap Analysis and
Strategy Options presentation
Strategy
Development workshop
Business
Relocation Plans
Manual workarounds
Data restoration plans
Walkthrough testing
Maintenance and testing procedures
3


ACRP is authorized by Congress and funded as part of the annual FAA appropriation process.

Project 3-18 is a fifteen month project to:
– survey, research, review and analyze the current practice of business and operational continuity at US airports of all kinds (approach, status, strengths, weaknesses, successes, failures),
– create a best practices Guidebook, Interactive Tool, and
Critical Path Flowchart for use by ALL types of airports, and
– outreach and presentations to the industry to help promote understanding, adoption and use.
4


Research project, not a commercial project

Very precise project management and reporting process
– Program Officer – Theresia “Sia” Schatz
– Project Panel comprised of airport industry experts
 we deal with each of their issues, comments, input monthly
– Monthly formal written reports:

Cover letter
- Complete accounting of work completed
- Outline of work to be done next month
- Any problems encountered, recommended fixes (or statement of none)
5


–
–
–
–
Principal Investigator
–
–
Drives substance of data collection, analysis, document review
Interfaces with BCP standards, guidance bodies
Speaks at targeted events
Hands-on BCP work – airport facing
Heavy documentation
Drives approach and content of deliverables

–
–
–
Senior Business Continuity Planners
– Owns the BCAP process execution – business-facing
– Owns the pro forma BCP implementations
Speaks at targeted events
Heavy documentation
Core contributors of content for deliverables

Technical Writer
–
–
–
Technical project management and ProjectManager.com
Schedule coordination
Direct reporting – format
6





Business and operational continuity for prolonged airport disruptions
Effects of disruptions, NOT their causes (so NOT emergency management or crisis management or safety/security oriented)
Scope is
–
– horizontal - across the entire airport operation, from the municipalities, counties and authorities <and private companies> that own/operate airports, including offsite systems in play vertical – addressing all airport-sited, airport-affected, airportproximate organizations that can be affected by prolonged disruptions and are in the “airport economic footprint”

Car rental, restaurants, hotels, extra-modal transportation, Hudson
News, TSA, General Aviation commercial ops (FBO’s, SASO’s) and non-commercial ops (corporate flight departments), FAA, and all landside and airside operations of all kinds
Deliverables must be highly practical, useable, applicable, and implementable by non-BCP personnel
7


Primary
– Large Hub
–
–
Medium Hub
Small Hub
– Non-hub

Non-primary commercial
 Cargo

Reliever

General Aviation



Airside Entities, for example:
– Fuel
–
–
Maintenance
Airlines Operations
Groundside Entities, for example:
–
–
–
Security
Baggage Handling
Ticketing
Government Entities
–
–
–
TSA
FAA
CBP
–
–
ICE
Military Air Operations
8







Airport Administration – General
Manager
Airport Facility Maintenance
Air Traffic Control
Commercial Establishments of all types – restaurants, news/books, car rental operations, and all airside third party operators
Emergency Services (Law
Enforcement, Security, Fire,
Medical, ARFF, Office of
Emergency Management)
General Aviation – commercial entities, operators, businesses
(FBO’s, SASO’s) and noncommercial entities like corporate flight departments

FAA Facility Management

FAA Facility Maintenance

Facility Engineering

Finance/Administration

Legal

Organization and Procedures
 Other Modal Departments (Sea,
Road, Rail)
 Personnel

Planning

Properties and Development

Public Relations
9

Landside Operations




Access Management
Air Traffic Control
Baggage
Cargo, Mail















Concessionaires
Curbside Management
Ground handlers
Ground Transportation
Leasing companies
Local authorities and municipalities
Meteorology
Parking lots and parking technology
Passenger processing (ticketing, security, screening)
Passenger services
Public transportation
Roads
Suppliers
Utilities
Waste Management
Airside Operations




Aircraft Operators
Aircraft maintenance
Baggage
Catering/duty free












Cleaning
Customs/Immigration
De-icing
Fuel supplies and fueling
Gates
Ground Support Equipment
Noise monitoring
Push back/Towing
Runways, Taxiways, Ramps
Sanitary services
Waste Management
Wildlife Control
10

Ongoing Project Management and Reporting
Stage 1 – Research &
Document Review
Task 1
Review & analyze available standards, guidelines, industry and extraindustry best practices, literature, case studies, and plans.
Submit
Amplified
Research
Plan.
Task 2
Develop & submit a multi-point data collection plan across representative airport types, sizes, ownership, mission, security category and
EM/Rescue index.
Stage 2 – Implementation Stage 3 - Development
Task 3
Implement the data collection plan through focus groups at industry conferences, personal interviews, online surveys and via a custom designed data collection tool.
Task 4
Prepare and submit an interim report identifying current practices, including a draft outline of the
Guidebook with a framework, templates findings and recommendations.
Task 5
Through standard BIA process, develop guidelines for restoration of operations in all areas of airport and contiguous operations that have economic impact.
Task 6
Develop and submit a comprehensive critical path framework, risk matrix, response templates and a business continuity plan development too based on best practices and relevant standards.
Stage 4 - Completion
Task 7
Prepare the draft
Guidebook with detailed recovery priorities based on a critical impact framework.
Task 8
Submit the completed
Guidebook, interactive business continuity planning tool, final report and documentation.
We are here
11









Aviation
–
AGTA (ground transportation), ACI-NA (airport owner/operators),
AAAE (airport executives), NBAA (national business aviation association),
AFFRWG (aircraft rescue firefighting working group), ALEAN (airport law enforcement agencies network), ALPA (airline pilots association), IAASP
(international association of airport and seaport police), NATCA (national air traffic controllers association), CAP (Civil Air patrol), ICAO (international civil aviation organization)
Government
– FAA, TSA, NTSB, Immigration & Customs Enforcement, HLS
(PS-
Prep), US Air Force, CBP, CFR’s
BCP Credentialing Bodies
– DRII, BCI
Risk Management – Willis Aviation Practice, Key Airport Underwriters
Consulting Firms – Professional Services Firms with Aviation, Airport,
Aerospace Practices/Clients
Standards Bodies
– ISO, NFPA, BSI, ANSI, ASIS, NIST…..
Airports – Branson, Buffalo, Denver, LaGuardia, JFK……
Credentialing letter from TRB for enhanced access?
12



Document, standards, guidance review, analysis and documentation.
–
–
–
BCAP style Q&A (paper to database, Bold Systems tool…..IF we get credible access to email lists) re: a) knowledge, capacity and practice; b) “strategic BIA”
– Attendance at key industry conferences:


AGTA, ACI-NA, AAAE, Hub Operations, Facilities
Management, Regional's, Leasing Policies/Minimum
Standards, Gen’l Aviation Issues, Small Airports, Airport Law
Workshop, Essentials of Airport Business Management,
National Airports, Airports and Car Rental Workshop, Parking and Landside Management Workshop, Airport Concessions,
Airport Economic Forum….may add vertical industry group conferences (e.g. airport lessees) via sponsored focus group, session, presentation
GoToMeetings/GoToWebinars sponsored by industry groups
One-on-One interviews with representative airport executives
Use of “airport” team members to gain trusted access
13




Meetings with key governmental agencies in DC (HLS, FAA, TSA,
NTSB, etc.), Industry associations (AGTA, ACI-NA, AAAE, NBAA)
Meetings with key verticals –
–
–
–
–
–
General Aviation organizations
Car rentals
Hotels
– i.e. Hertz and Avis
– i.e. Marriot, Sheraton
Retailers – i.e. Hudson News, PGA, McDonalds
Airlines – i.e. Continental, Delta
Meetings with key labor:
–
–
–
–
Pilots
Flight attendants
Airline workers
Baggage handlers
– ATC
14


3-5 Pro Forma BCP Implementations at representative airport types
15

Project Plan Project Organizational Chart
Crisis Management Team (CMT)
Mark Baydarian , Lee Raynor
Business Continuity
Manager/Leader (Lee
Raynor)
Bold names are primary respondents
Crisis Management Team
Information Technology ( Robert MacTaggart; Tim Flick)
Human Resources ( Mark Fogel , Kim Shepard)
Finance ( Mark Baydarian; Michael Dang)
Legal ( Don Richenthal , Meir Blonder)
Security ( Diana Alexander; Fred Schaefer)
Corporate Communications ( Joe Zaccaria; Pam Winikoff)
Logistics ( Hank Franzone; Phil Clouden)
Manufacturing ( Ed Plaia , Hakki Tansi)
Customer Service ( Dianne Corso ; Randi Gilday)
El Paso
Primary Recovery Team Leader
Alternate Recovery Team Leader
Spanish Springs
Primary Recovery Team Leader
Alternate Recovery Team Leader:
Recovery Organization
Executive Dashboards
BIA Questionnaire BIA Summary Reports Dependency Mapping
16

Recovery Strategy Options
Summary
High-Level Cost Estimate BR and DR Roadmaps
Manual Workaround
Procedures
Incident Management Model Plan Documents
17

Tabletop Scenario Maintenance Checklist Maintenance Dashboard
18

19

20