Business Continuity and the Flu Pandemic DISCLAIMER “This template is provided as a guide only and intended to supply general information about carrying out a Business Continuity Plan Exercise. It is not intended to replace detailed guidance and planning specific to you and your business/organisation. If have any questions regarding the use of this document you should obtain professional legal advice. To the extent permitted by law, Manchester City Council and Manchester Business Continuity Forum exclude liability for any loss or damage arising directly or indirectly from the possession, publication, use of, or reliance on this document." Business Continuity Exercise Today’s agenda: – Walk through the various Business Continuity Plans and procedures to help you deal with a loss of staff – Prepare responses and take action against pandemic flu – Identify any weaknesses and improvements for your Business Continuity Plan – Agree future actions What is Business Continuity? Business continuity processes are designed: To minimise any risk of disruption to services, by building resilience into internal structures and processes To ensure we can maintain our essential services during disruptions with different levels of severity To assist staff in the event of an incident and to ensure staff are able to cope with the disruption To ensure that if a disruption does occur, the main priority will be the recovery of key services within agreed timeframes Business Continuity Processes 1. Conduct a ‘Business Impact Analysis’ (BIA) 2. Produce a Business Continuity Plan (BCP) 3. Test and validate the BCP 4. Evaluate the effectiveness of the BCP and amend as appropriate 5. Review and maintain the BCP on a regular basis Definitions There are three stages to Business Continuity: 1. Risk Reduction 2. Incident E.g. Producing a Business Continuity Plan E.g. Activating the Business Continuity Plan 3. Recovery E.g. Using and closing down the Business Continuity Plan Why Bother with Business Continuity? Incidents do happen! Examples of some recent Business Continuity Incidents: • BT Tunnel Fire • The terrorist incident at Glasgow Airport etc [Include examples relevant to your organisation] Effective Business Continuity Effective Business Continuity is built on seven P’s… 1. Programme – proactively managing the process 2. People – roles & responsibilities, awareness & education 3. Processes – all organisational processes, including ICT 4. Premises – buildings & facilities 5. Providers – supply chain, including outsourcing 6. Profile – brand, image, reputation 7. Performance – benchmarking, evaluation & audit Source: Business Continuity Institute, 2003 Business Continuity Plan Test Scenario… Flu Pandemic Business Continuity Plan Testing Phase… Effective Business Continuity Management should improve the overall general running of an organisation. Business Continuity processes require careful analysis and understanding of different services and encourages the identification of alternative working practices. A Business Continuity Plan cannot be considered reliable until it has been exercised and has proved workable. The exercise is not designed to catch you out, we are testing the plan procedures, not your individual performance. This exercise is designed to help you feel more prepared and comfortable in your Business Continuity role. Ground Rules • The scenario has been designed as a learning exercise, all participants should take it seriously and participate as if it were a real life incident. • The exercise should be viewed as an opportunity to rehearse responses to problems- and potentially make mistakes- in a safe environment, without an actual business impact. • All the information that you will receive will be either from the PowerPoint presentation or from… [PLEASE INSERT CONTACT NAME/TEAM]– you must not make assumptions and you will need to ask questions. • Outside of the exercise, no communication should be required and must be avoided to prevent any false alarms. • Any comments, problems, issues or other contributions made by any participant should be positive and may be made without criticism from any other participant. • Constructive feedback is welcomed and needs to be captured. ‘Walkthrough’ Objectives: To prove your BC Plan To understand the impact pandemic flu or other cause of a reduction in staff may have on your service/organisation [amend as appropriate] Validate the actions list and all sections of your BC Plan To understand what you could do to help prepare in advance of pandemic flu To confirm the actions detailed in the BCP are complete and achievable, given the circumstances at the time To give you practice in carrying out your role on a Business Continuity Plan To test procedures outlined in the Business Continuity Plan and explore any potential areas for improvement Assumptions • All people are in contact as you are now, either physically or via telephone, etc. • We are starting from a blank piece of paper • You have just found out about the crisis and are the first to respond, no assumptions are to be made about any action (s) that may have taken place already in response to the scenario The Flu Pandemic Scenario… It has been reported on television that the pandemic flu has reached the UK. The Manchester Evening News are reporting high levels of sickness throughout the city. Week 1 Today You have just been informed by your admin person that staff absenteeism is noticeably higher than normal. Week 1 Today Several members of your team are coughing and wheezing and complaining of feeling ill… Initial Reactions… • What staff issues are there? • What are the implications? • Can any of the staff work from home? What would need to change to make this happen? • Who will you communicate with? • Any other issues? Week 2 Staff absence is now approximately 20% higher than is normal for this time of the year. A key supplier rings to tell you that they will not be operating for the foreseeable future because of the pandemic. Actions of on-site team? • • • • • Who do you communicate with? Is your contact list up-to-date? Do you have a communication cascade tree? What are the priorities? What will be the implication of losing a key supplier for the service? • Do any members of the team have unique skills or knowledge? What are the implications of this? How can we reduce this risk? • Anything else? Week 2 The Department of Education has decided to close all schools in the area due to staff shortages and also to limit spread of the pandemic. 50% of your staff who are carers have phoned in to say that they will not be attending work this week as they will be staying at home to look after their children or dependants. Questions… • What issues does this raise? • How will you deal with staff who don’t attend work to look after their children/dependants? • How will you deal with the work load? • Who will you communicate with? Week 3 Following further staff absences, the number of staff in work has dropped to 20%. You have just been informed that a member of your team has died in hospital. A Manchester Evening News reporter has asked for your response on this and the effects of the pandemic. Actions of on-site team? • Who do you communicate with? • How will you manage your resources, and your workload, with only 20% of staff attending work? • What are the implications for the team of a death of a colleague? • How will the media enquiry be dealt with? • Anything else? Actions of on-site team? • You have managed to locate additional staff through an agency/another team, which areas of work would be your priority for these extra staff? • Do you work with any vulnerable groups? If yes, what are the implications of this group? How can you minimise the impact on this group? What plans, if any, are currently in place? Week 8 • Now the pandemic has eased, are there any issues that you would need to address? • Are there any questions this scenario has raised that you will now look into? • Are there any plans you’d now put in place before the 2nd wave hits? • What lessons have been learned? How can this knowledge be used to improve your Business Continuity Plans? Remember…. “Always plan ahead. It wasn't raining when Noah built the ark.” Richard C. Cushing Review Procedures & Evaluation • • • • What went well? What did not go so well? Comments and issues on the process What was the effectiveness of information gathering and decision making? • Exercise Report Summary Business Continuity is concerned with: People Assets Process Feedback Forms Please! Next Steps in Business Continuity Management [Insert detail, as appropriate to your organisation] Thank you for your time!