Resilience Business Continuity Dispelling the Myths KAREN STEPHENS 13 February 2010

Resilience But first……

Resilience Why business continuity make sense We have a responsibility to our patients, staff, communities and the Government Recognised as an element of good risk management practices It’s health and safety for our business, and ….. Its not rocket science

Resilience So why don’t we do it?

Resilience Myth 1 – It will never happen Telecom XT outage, December 2009 Telecom XT outage, January 2010 Wellington office block flooding, December 2009 Penrose fire and asbestos risk, January 2010 Waikato DHB – Convicker virus attack, December 2009

Resilience Myth 2 – We have business interruption insurance Covers actual loss/replacement of assets Covers loss of income After the fact payments (if you can prove the loss) Does not provide alternate workplace or other resources If you can demonstrate business continuity capability – it may reduce your premium

Resilience Myth 3 – It’s too complicated, only specialists can do it Common sense approach Don’t over complicate what’s needed Use specialist guidance Diabetes - analogy

Resilience Definition Business continuity is the ability of the business to continue to provide minimum service to customers during and following any event which decreases the normal capacity and capability of the business to deliver normal processes and services

Resilience What is business continuity? Capacity & capability Demand Normal V High V Low Business as usual Business Continuity Earthquake Pandemic Tsunami Volcanic eruption Mass casualty Severe flu season Disease outbreak

Resilience How do we get started? WHAT are the most important things to be done –What is needed to do them Facilities Resources (equipment, documentation etc) Technology & communications WHO do we need to do the work and who do we communicate with WHERE do we work from HOW do we work

Resilience What should be in a business continuity plan? Critical activities to be continued –What –Who –Where –How Contact details for staff and other key contacts Communication guidelines –Patients –Communities –Suppliers –Government

Resilience Maintenance & testing ‘prescription’ Six monthly check up –Contact details –Changes to processes / services Twelve monthly ‘physical’ test –Scenario exercise to check the what, who, where and how Back up data storage (at least weekly)

Resilience Karen Stephens