WELSH BOXING Business Continuity Plan Aim To prepare Welsh Boxing to deal with the effects of an emergency, ensuring business continuity. Business Continuity Plan (BCP) Objectives To define and prioritise the critical functions of the business To analyse the emergency risks to the business To document the procedure for responding to an emergency To identify key personnel to contact in event of an emergency To ensure that all key personnel are trained and understand how to deliver the required response to an emergency 1. BCP Objective 1 - Critical Functions of the Business 1.1 Financial systems – Welsh Boxing is absolutely dependant upon the robustness and sustainability of its financial systems. This area is a high risk to business continuity and requires effective planning to protect systems and critical and sensitive information. 1.2 Information Technology – Welsh Boxing strives to reduce its carbon footprint wherever possible. In line with this principle, Welsh Boxing relies heavily on an information technology system supported by Sport Wales which provides 24 hour (office/remote) access to information. This area is a high risk to business continuity and requires effective planning to protect system and critical and sensitive information. 1.3 Staff Welfare – Welsh Boxing recognise that its staff is its single biggest asset. As such it has a responsibility to ensure that effective plans are in place to protect its staff in the event of an emergency. This aspect of the business is viewed as a high risk to continuity and requires effective planning to protect staff. 1.4 Athlete Welfare – Welsh Boxing is responsible for the safety and welfare of athletes, both in the UK and overseas. Safety is of paramount importance and as such robust plans need to be in place for every occasion when Welsh Boxing has a ‘duty of care’ over its athletes. This area is a high risk to business continuity and requires effective planning to protect the welfare of athletes. 1 Welsh Boxing BCP May 2015 1.5 Event and Participant Welfare – Welsh Boxing is, either wholly or in part, responsible for the safety and welfare of participants in grass roots programmes and/or at events organised either through it own actions or through association with partners. This area is viewed as a high risk to business continuity due to negative impact on business brand and profile and thereby requires effective planning to protect the welfare of participants and signature events. 1.6 Premises – Welsh Boxing operates from 1 designated office space, this being the Welsh Boxing Office, Sport Wales National Centre. All business sensitive information is kept at this location. This is viewed as high priority. 1.7 Company Funding – Welsh Boxing is absolutely dependant upon its funding relationship with the Welsh Government and Sport Wales. This area is viewed as being of a critical priority to the ongoing business continuity of Welsh Boxing. 1.8 Key Documentation – Welsh Boxing carries ‘hard copy’ documentation on company sensitive matters. The protection of this information is considered significant in business continuity terms and is deemed of medium priority. 2. BCP Objective 2 – Analysis of Emergency Risks Glossary of Terms ERC – Emergency Response Co-ordinator Ch - Chair of the Board OL - Office Lead PM - Performance Lead AO - Administration Officer 2.1 Premises: Head Office based at Sport Wales Risk Impact 2.1.1 2.1.2 2.1.3 2.1.4 2.1.5 Risk Risk Risk Risk Risk high high low high high 2.2 Internet Security 2.4.1 2.4.2 2.4.3 Risk of internet theft Risk of hacking Risk of catastrophic server failure 2.3 Athlete Welfare 2.5.1 2.5.2 2.5.3 2.5.4 Risk of personal harm Risk of overseas related issues Risk of abuse e.g.physical,emotional Risk of death - of of of of of Flooding Fire theft terrorism eviction - low low high low low - medium low medium 2 low medium medium low medium medium high high high high high ERC OL OL Ch / OL OL Ch OL OL OL PL PL PL PL Welsh Boxing BCP May 2015 2.6 Finance 2.6.1 2.6.2 2.6.3 2.6.4 2.6.5 Risk Risk Risk Risk Risk 2.7 Media 2.7.1 Negative Media coverage 2.8. Staffing 2.8.1 2.8.2 2.8.3 2.8.4 2.8.5 Risk Risk Risk Risk Risk 2.9 Participant / Event 2.9.1 2.9.2 Risk of physical harm / abuse Risk of catastrophic event incident of of of of of of of of of of theft of cash from premises internet theft theft of cash outside premisestheft of cash overseas significant funding cuts - - physical harm / abuse illness across all staff mass staff departure death lack of staff succession plan - - low medium low medium low low high low high high OL OL OL PL Ch medium medium Ch low low low low low high medium high high low Ch Ch Ch Ch Ch medium low high high Ch / PL Ch / PL 3. BCP Objective 3 Emergency Response Procedure 3.1 For all emergency response situations please: 3.1.1 Keep a log of immediate actions taken 3.1.2 Contact the emergency services (if required and in line with common practice) 3.1.3 Contact the Emergency Response Co-ordinator (ERC) identified for that situation (see above for ERC against analysis of emergency risks) 3.2 The ERC will then: 3.2.1 Keep a log of actions taken 3.2.2 Convene / contact the Emergency response team (ERT= Chair/OL/PL for defined risk area) 3.2.3 Identify functions disrupted 3.2.4 IF SAFE TO DO SO identify damage 3.2.5 Provide information to Board / staff 3.2.6 Agree a course of action with ERT 3.2.7 Communicate decisions to staff and relevant partner organisations 3.2.8 Provide information to the public to maintain reputation and business 3.2.9 Arrange response review / debrief 3 Welsh Boxing BCP May 2015 3.3 Post emergency to Review / amend Business Continuity Plan IF AN EMERGENCY OCCURS AFFECTING THE WELSH BOXING OFFICE THEN PLEASE FOLLOW THE BUILDING HEALTH AND SAFETY / EVACUATION PROCEDURES. THESE SHOULD BE DISPLAYED IN ALL OFFICE AREAS. ALL PREMISES MUST BE RISK ASSESSED ANNUALLY AND PROVISION MADE FOR OFFICE ELECTRICAL EQUIPMENT TO BE PAT (portable appliance tested) TESTED BY SUITABLY QUALIFIED PERSON AGAINST AN AGREED SCHEDULE. 4.0 BCP Objective 4 – Identification of Key Personnel Key Personnel required to respond to emergency situations are identified in point 2.0 above. In the event of an emergency occurring either identified within this document or deemed to be significant by the ERC then the Chairman of the Board (Ch) must be contacted immediately. The Treasurer should be made aware of any finance related emergency. 5.0 BCP Objective 5 – Training of Staff in Emergency Response All staff will be trained and re-trained every year to ensure they are aware of emergency response procedures. 4 Welsh Boxing BCP May 2015 Risk Matrix 1 = Little or none 2 = low Scenario 3 = medium 4 = high Power failure Risk to Business 3 Probability of occurring 2 Building fire 4 2 Unable to access / leave building Loss of telecommunications 2 2 1 3 Building flood 4 2 Evicted from building Theft of equipment/money 3 1 2 2 Terrorism 1 1 Staff unable to get to work All staff sickness 4 2 3 2 2 1 Risk of Staff harm 4 1 Staff Succession planning 1 1 Emergency affecting board members Death Staff mass departure 1 1 4 4 1 1 5 Action Immediate evacuation - staff are mobile and can work from alternative premises Immediate evacuation - staff to follow building Health and Safety procedures. All staff/visitors to be roll called by OL. Staff to work from home Await instructions from Building Manager All staff have access to mobile phones and can work remotely Immediate evacuation - staff to follow building Health and Safety procedures. All staff/visitors to be roll called by OL. Staff to work from home Staff to temporarily work remotely from home Security measures in place never to leave doors unlocked during daytime. Risk surrounding out of hours access to office for cleaners etc. Concern to be expressed to SW management. All equipment insured. Office carries significant cash in the Safe and small amounts of petty cash. Staff to follow building health and safety procedures Overseas squads – follow advice of host country security services/ UK Foreign and Commonwealth Office. Crisis management plan to be applied. Staff all able to work remotely and access IT Inform Chair – communicate to key partners temporary disruption Impact on staff morale. Low probability. Staff to report any incidences of harm to Chair or if in immediate danger to emergency services. Officers are able to multi-task and cross over into other work areas until post replaced. Board are able to multi-task and cross over into other work areas until post replaced. Impact on staff morale. Low probability if at all. Board emergency meeting Welsh Boxing BCP May 2015 IT system failure 4 3 IT internet theft – electronic banking 4 3 IT Hacking 3 1 Athlete harm 4 1 Athlete abuse 4 3 Theft of cash outside of office 1 2 Catastrophic funding cuts 4 2 Negative media coverage 3 3 Catastrophic event 4 2 Risk of participant harm/abuse 4 2 Server checked daily under contract – currently no back up to server. Financial information held separately by Treasurer and updated monthly. All staff carry laptops with information stored remotely from office. Apply guidance from Company bankers. No response to unsolicited requests over internet regarding account information. All staff to advise Chair prior to purchase of services over internet Risk of confidential materials being accessed contrary to Data Protection Act. Action to mitigate risk to company/brand reputation and individual information held on net. Little or no probability of occurrence but high impact in terms of athlete/s morale, brand/company reputation. Practise safe sport through qualified sessions led by appropriate staff, athlete/staff code of conduct, fair play principles, overseas codes, competition protocols Always potential for sport to be targeted. Welfare policies applied, DBS, training, safeguarding sport flowchart application. High impact on athlete/s, company/brand reputation. Staff do carry cash. No regular routines for carrying cash – e.g. weekly timetables. Cash for travelling squads ‘split’ between staff or where possible travellers cheques. Daily monitoring sheets used for cash handling Board to approve reserve policy to provide for redundancy payments Potential to damage company/brand reputation. Board to co-opt Marketing expert to mitigate against risk and respond to emergencies Welsh Boxing deliver National Championships. Ensure event organiser has undertaken risk assessment to mitigate against risk. Company /brand reputation at risk. Ensure event organiser has undertaken risk assessment to mitigate against risk. Company /brand reputation at risk. 6 Welsh Boxing BCP May 2015 Key Personnel Contact information Emergency Response Coordinator Organisation Name Name: Staff Mobile Alternate mobile Office E mail IT Electric Phone Insurance Effective Communication 7 Welsh Boxing BCP May 2015