1. Business Continuity Planning MIKE FAITHFULL MBCI Corporate Continuity Manager Information Management Division

3. a-choo! yeah, very funny Dave.

4. Business Continuity Service Delivery Emergency Planning Emergency Response Risk Management Strategic Objectives The overlap Martin Barnard – Hammersmith & Fulham

5. EMERGENCY MANAGEMENT IT DISASTER RECOVERY FACILITIES MANAGEMENT HUMAN RESOURCES SECURITY ETC … KNOWLEDGE MANAGEMENT HEALTH & SAFETY RISK MANAGEMENT ENVIRONMENTAL MANAGEMENT SUPPLY CHAIN MANAGEMENT Business Continuity QUALITY MANAGEMENT

6. What is (a) risk? How do we measure it? How do we manage it?

7. RISK is … the possibility of more than one outcome occurring HM Treasury “Green Book” sensitivity to things you cannot control Prof.John Gordon – University of Hertfordshire the chance of something happening that will have an impact upon objectives. AS/NZS 4360 a function of probability and impact BCI et al the combination of the probability of an event and its consequences AIRMIC/ALARM Risk Management Standard uncertainty of outcome, whether positive opportunity or negative threat, of actions and events HM Treasury “Orange Book”

8. (hint: go here and hope it works) Pragmatic definition for BC planning …

9. THREAT VULNERABILITY EXPOSURE “At Risk”

10. Threats Countermeasures Risk analysis Risk management Risks Vulnerabilities Assets

11. What is (a) risk? How do we measure it? How do we manage it?

12. CCA Guidance notes – Annex 4f

13. Assessing risk Assessing risks Likelihood of Occurrence HighMediumLow Critical Significant Noticeable Risk Assessment Matrix Impact

14. (have another go) Pragmatic way to measure, with signposts to mitigation …

15. Seriousness Probability 110 1 Errors 10,1 Flood 1,10 Fire 6,6 INSURE (Contingent) INSURE (Contingent) PREVENT CONTROL AND CONTAIN CONTROL AND CONTAIN ACCEPT THE RISK ACCEPT THE RISK ?

16. Probability Impact / Seriousness

17. Not ‘black and white’, but many shades of gr.. er Probability Impact / Seriousness

18. Seriousness Probability 110 1 PREVENTIVE ACTION CONTROL AND CONTAIN CONTROL AND CONTAIN ACCEPT THE RISK ACCEPT THE RISK CONTINGENT ACTION CONTINGENT ACTION Probability Impact / Seriousness

19. Time ! What could a ‘disaster’ cost me …? £ Loss of business Cost of protection

20. Time-related costs Incident cost What could a ‘disaster’ cost me …? £ Time

21. Threat Fire “An ounce of prevention …” Likely cause Preventive action Contingent action Smoking Electrical faults Arson Install alarms Provide extinguishers Provide emergency exits Call Fire Service Purchase insurance... Ban it Regular maintenance Effective security measures

22. FunctionEmergency Planning Business Continuity Risk Management Crisis management Emergency plans Advice to business Disaster avoidance BIA Coordination of corporate services Service Risk Mgt / risk workshops Operational Risk Management