London Metropolitan London Metropolitan UniversityUniversity

Business Continuity Management Business Continuity Management Seminar Friday June 27Seminar Friday June 27thth 2008 2008

The Henry Thomas RoomThe Henry Thomas Room

LUNCHLUNCH

Business Continuity Business Continuity Management Seminar Management Seminar Friday 27Friday 27thth June 2008 June 2008 Introduction to London Metropolitan Introduction to London Metropolitan

University Business Continuity Plan University Business Continuity Plan (John Friary)(John Friary)

The New Standard for Business The New Standard for Business Continuity Management – BS25999 Continuity Management – BS25999 (John Sharp FBCI(Hons) FCMI MCIM)(John Sharp FBCI(Hons) FCMI MCIM)

The Next Steps – Review,Departmental The Next Steps – Review,Departmental Plans and Desk Top Exercise(John Plans and Desk Top Exercise(John Friary)Friary)

Business ContinuityBusiness Continuity

Major Incident PlanningMajor Incident Planning Disaster PlanningDisaster Planning Emergency PlanningEmergency Planning Disaster Recovery and Business Disaster Recovery and Business

Continuity PlanningContinuity Planning

City University Fire May 2001

STUDENTSUNIONEND OFTERM PARTYFLYER !

THE NEXT MORNING

GABLE WALL

LATER THATDAY –GABLE WALL COLLAPSED

Southampton University Fire October 2005

Southampton University Fire October 2005

Westminster University Fire July 2007

Delft University Fire May 2008

Delft University Fire May 2008

Delft University Fire May 2008

London Metropolitan University Arcade Hall of Residence Fire 2004

London Metropolitan University Commercial Road Fire 25th June 2008 – Scaffolding ablaze

London Metropolitan University Commercial Road Fire 25th June 2008 – Scaffolding ablaze

London Metropolitan University Commercial Road Fire 25th June 2008 – Fire Fighters put out fire

London Metropolitan University Commercial Road Fire 25th June 2008 -Fire Fighters put out fire

London Metropolitan University Commercial Road Fire 25th June 2008 – 4 Fire Engines, Police and ambulance arrive on scene

London Metropolitan University Commercial Road Fire 25th June 2008 – Fire put out

London Metropolitan University Commercial Road Fire 25th June 2008 – Fire Investigations Team arrive

London Metropolitan University Commercial Road Fire 25th June 2008 – Building closed!

Why Plan? Why Plan? UnacceptableUnacceptable

The event

Crunch point

Recovery

Why Plan? ObjectiveWhy Plan? Objective

The event

Crunch point

Recovery

Pre-event

Expecting the Expecting the UnexpectedUnexpected

Business Continuity in an uncertain world Business Continuity in an uncertain world (BCI/ACPO/London First 2003)(BCI/ACPO/London First 2003)

Key Steps in developing business continuity Key Steps in developing business continuity management :management :

Analyse your businessAnalyse your business Assess the risksAssess the risks Develop your strategy Develop your strategy Develop your planDevelop your plan Rehearse your planRehearse your plan

Business ContinuityBusiness Continuity

London Metropolitan University is a member London Metropolitan University is a member of the HIGHER EDUCATION BUSINESS of the HIGHER EDUCATION BUSINESS CONTINUITY NETWORK (HEBCoN) :CONTINUITY NETWORK (HEBCoN) :

- Attended first National Conference in Attended first National Conference in University of Birmingham April 2008University of Birmingham April 2008

- Attended National meeting on Pandemic Attended National meeting on Pandemic Influenza May 2008Influenza May 2008

- Attends HEBCoN London Regional Group Attends HEBCoN London Regional Group meetingsmeetings

London Metropolitan London Metropolitan UniversityUniversity

Estates Emergency Response Estates Emergency Response Plan and Business Continuity PlanPlan and Business Continuity Plan

Management framework for responding to Management framework for responding to a major incidenta major incident

Estates Emergency Estates Emergency Response PlanResponse Plan

The The Emergency Response PlanEmergency Response Plan is a management tool to is a management tool to aid the aid the Estates DepartmentEstates Department in the overall management in the overall management of the University’s of the University’s first response to an emergencyfirst response to an emergency that that impacts on the operational use of its buildings. All other impacts on the operational use of its buildings. All other business continuity matters are subordinate to the business continuity matters are subordinate to the Emergency Response Team (ERT)Emergency Response Team (ERT) until the initial until the initial emergency period has passed.emergency period has passed.

The plan focuses on the emergency response to incidents The plan focuses on the emergency response to incidents that occur during normal and out of normal working hours that occur during normal and out of normal working hours of the University. Normal hours are defined as 09:00 – of the University. Normal hours are defined as 09:00 – 17:00hrs Monday to Friday. Out of ours defined as 17:00 17:00hrs Monday to Friday. Out of ours defined as 17:00 – 09:00hrs 7 days a week including national holidays. – 09:00hrs 7 days a week including national holidays.

Business Continuity Business Continuity PlanPlan

The The Business Continuity PlanBusiness Continuity Plan establishes an establishes an Emergency Emergency Committee(ECOM)Committee(ECOM) that manages response strategies that manages response strategies and allocates resources to ensure a major incident has and allocates resources to ensure a major incident has minimal impact on the University's business operation.minimal impact on the University's business operation.

  The emergency responses are guided by London The emergency responses are guided by London

Metropolitan University's overriding emergency goals of:Metropolitan University's overriding emergency goals of:                  Protecting lifeProtecting life                Securing the critical infrastructure and facilitiesSecuring the critical infrastructure and facilities                Resuming the teaching and research programResuming the teaching and research program

Scope of the planScope of the plan

The plan will be involved when:The plan will be involved when:

Access to any University building is denied due Access to any University building is denied due to any incidentto any incident

The University’s business systems are The University’s business systems are interruptedinterrupted

A Health & Safety incident affects staff, students A Health & Safety incident affects staff, students and/or local community/environmentand/or local community/environment

Stages of ActivationStages of Activation

BronzeBronze - No immediate threat to safety - No immediate threat to safety and/or property but emergency situation and/or property but emergency situation has an impact on the operation of the has an impact on the operation of the building(s) that may eventually lead to building(s) that may eventually lead to closure or limited occupancy/operation of closure or limited occupancy/operation of building. This will be activated by a level 1 building. This will be activated by a level 1 response (see below).response (see below).

    

Stages of ActivationStages of Activation

    Level 1Level 1 - Business interruption affecting - Business interruption affecting

one or more departments and/or function one or more departments and/or function an example of such an incident could be an example of such an incident could be localised flooding or temporary loss of localised flooding or temporary loss of building services. Members of the EMT building services. Members of the EMT will be placed on alert by the ERT in will be placed on alert by the ERT in preparedness should the incident preparedness should the incident escalate. escalate.

Stages of ActivationStages of Activation

  SilverSilver - Threat to safety and/or property identified - Threat to safety and/or property identified but not immediate. Has a severe impact on the but not immediate. Has a severe impact on the operation of the building(s) that could result in operation of the building(s) that could result in closure of the building. Staff to evacuate when closure of the building. Staff to evacuate when ordered to do so by ERT or police/authorities. ordered to do so by ERT or police/authorities. This will be activated by a level 2 response (see This will be activated by a level 2 response (see below).below).

  

Stages of ActivationStages of Activation

Level 2 - Level 2 - Business interruption affecting one or more Business interruption affecting one or more buildings resulting in short term closure of the buildings resulting in short term closure of the building e.g. up to and including two working days building e.g. up to and including two working days and will be overcome by the relevant department(s) and will be overcome by the relevant department(s) implementing their own departmental emergency implementing their own departmental emergency response plan supported by the Estates Team. An response plan supported by the Estates Team. An example of such an incident could be total loss of example of such an incident could be total loss of building services to one or more buildings. Members building services to one or more buildings. Members of the ECOM will be notified.of the ECOM will be notified.

    

Stages of ActivationStages of Activation

  GoldGold - Immediate threat to safety and/or property - Immediate threat to safety and/or property requiring controlled evacuation and closure of requiring controlled evacuation and closure of the building(s) ordered either by the ERT or the the building(s) ordered either by the ERT or the police/authorities. Immediate activation of the police/authorities. Immediate activation of the business continuity plan and notification of business continuity plan and notification of members of the EMT and resources to be members of the EMT and resources to be mobilised. This will be activated by a level 3 mobilised. This will be activated by a level 3 response (see below) response (see below)

  

Stages of ActivationStages of Activation

  Level 3Level 3 - Business interruption affecting the operation - Business interruption affecting the operation of the University. An incident of this nature will of the University. An incident of this nature will invoke immediate activation of the University invoke immediate activation of the University Business Continuity Plan. An example of such an Business Continuity Plan. An example of such an incident could be a terrorist attack on infrastructure incident could be a terrorist attack on infrastructure of the University or surrounding buildings, gas leak, of the University or surrounding buildings, gas leak, major fire or other infrastructure problems. Members major fire or other infrastructure problems. Members of the ECOM will be notified.of the ECOM will be notified.

  

Key ResponsibilitiesKey Responsibilities

Life PreservationLife Preservation MediaMedia Learning resources; Library, Media, student IT Learning resources; Library, Media, student IT

facilitiesfacilities TeachingTeaching OperationsOperations RecoveryRecovery

Business Continuity Business Continuity Management Seminar Management Seminar Friday June 27Friday June 27thth 2008 2008

… … and now over to John!and now over to John!

Departmental Plans Departmental Plans and Risk assessmentsand Risk assessments

Some Departmental Plans very detailed:Some Departmental Plans very detailed:

Systems and Services IT and Libraries Systems and Services IT and Libraries (M25)(M25)

For most Departments best approach is For most Departments best approach is based on Risk Assessment, iebased on Risk Assessment, ie

- Critical activitiesCritical activities- Critical locationsCritical locations- Critical dates and timesCritical dates and times

Departmental Departmental Emergency Plans Emergency Plans

  Department:Department: Critical function:Critical function:Effect on the Department:Effect on the Department:Effect on the University:Effect on the University:Recovery timescale:Recovery timescale:Contact Information:Contact Information:Special Instructions:Special Instructions:

QUESTIONSQUESTIONS

  

John Friary, Health & Safety AdviserJohn Friary, Health & Safety Adviser

Steve Taylor, Head of FacilitiesSteve Taylor, Head of Facilities

Helen Kruczkowska, Insurance ManagerHelen Kruczkowska, Insurance Manager

John Sharpe, Kiln House Associated Ltd.John Sharpe, Kiln House Associated Ltd.

The Next StepsThe Next Steps

  1. Departmental Business Continuity Plans 1. Departmental Business Continuity Plans (Risk Assessments) to be completed by End (Risk Assessments) to be completed by End of July 2008of July 2008

2. Desk Top Exercise with Emergency 2. Desk Top Exercise with Emergency Management Team (EMR) and Emergency Management Team (EMR) and Emergency Response Team (ERT) September 2008Response Team (ERT) September 2008

3. Review of Estates Emergency Response 3. Review of Estates Emergency Response Plan and Business Continuity Plan in 2009 Plan and Business Continuity Plan in 2009 with Desk Top Exercises (Talk Through and with Desk Top Exercises (Talk Through and Walk Through)Walk Through)