Are you ready for the floods?

Jeremy Wong Senior Vice President

BCM Institute

Jeremy Wong

• Senior Vice President – Business Continuity Management (BCM) Institute – jeremy@bcm-institute.org – www.bcm-institute.org

• Senior Vice President – GMH Continuity Architects – Asia Pacific BCM Consulting Firm – www.GMHasia.com

• Prior Appointments

– Regional Head of BCM, Nomura – Global Head of BCM, UOB – Senior IT Manager, Bax Global – J P Morgan – Andersen Consulting (Accenture)

BCM Institute Profile

• We are a global convergence of thought leadership in Business Continuity, Disaster Recovery and Crisis Management

• Global Professional Development and Qualification developed by Technical Experts and Thought Leaders

• Largest Continuity Training and Certification Organization in Asia Pacific

• Governed by Education, Examination and Certification Committees

• Delivered by Industry Practitioners, Professionals and Peers

• Learned by Professionals, Practitioners, Consultants, Auditors, Officials from all industry sectors of over 850 Organisations and Multi National Corporations (MNC) across 40 countries

Education

Certification & Professional Development

Thought Leadership

Conduct and administer courses and examinations.

Provide a career path and a common body of knowledge for business continuity and disaster

recovery professionals

Organize conferences and seminar events. Publish

technical and research papers

www.bcm-institute.org

Agenda

• Introduction

• Recent Floods and their Impacts

• Planning for Floods

Types of Floods

• Flash Floods

• Urban Floods

• Coastal Floods

• River (Fluvial) Floods

• Ponding (Pluvial) Floods

Recent Flood Occurrences

Thailand (2011)

• Worst flood in 50 years.

• 3 million people affected

• Death toll > 500

• Major flooding began in Northern Thailand flowing southwards through Bangkok to the Gulf of Thailand

• Unusually heavy and prolonged rainfall due to La Nina

• Major damage to homes, agriculture land and industrial areas

Recent Flood Occurrences

Singapore (2010)

• Flooding on Orchard Road after two rainstorms in close succession

• Cause was attributed to clogged drainage system

• Extensive damaged to retail outlets

• Damage to cars in basement car parks

• Building damage – Water pumps damaged resulting in

limited water supply to buildings – Telephone system down – Air-conditioning down due to lack of

water

Flooding vs. Urban Development

90% drop in flood prone areas from 1989 to 2010 - SG, PUB,

2011

Impacts of Major Floods

• Loss of lives

• Damage to homes and property

• Disease

• Electrocution

• Dangerous animals

Impacts of Major Floods

• School closure

• Panic buying

• Supply chain disruptions

• Unemployment

• Disruptions to Operations/IT

Data Center Flooding Video

Supply Chain Impacts

• Thailand example

• Production disruption of – Automobiles (Honda, Toyota, Nissan) – Electronic components (Fabrinet, Digi, JDS) – Semiconductors (Emcore, LSI) – Hard disk drives (Seagate, Western Digital, Emulex)

• Indirect impact on production of other devices – Notebook PCs (Apple, Lenovo) – Memory chips – Set-top boxes

• Worst-impacted country: Japan

Why Plan?

• Enable rapid response

• Identify information requirements

• Ensure clear roles & responsibilities

• Identify resources and training needs

• Recognise preparation

CRISIS IT

RECOVERY SECURITY

BUSINESS CONTINUITY

Business Continuity Management

BCM Planning Methodology

Plan

SPECIFIC CRISIS MANAGEMENT PLAN

IT DR PLAN SPECIFIC PLANS

SECURITY PLAN BC PLAN

Incidents, Emergencies,

Events, Disasters

Business Continuity Management

BCM Planning Methodology

Flood Risk Assessment

Potential impacts of flooding Impact Level

(High / Medium / Low)

Peoples health and safety are compromised

Property is damaged or destroyed

Profits are lost or service provision stopped

Paperwork and records are ruined

Annual Probability Recurrence interval

1 Annual

0.5 2-year

0.2 5-year

0.1 10-year

0.02 50-year

0.01 100-year

0.002 500-year

IMPACTS

LIKELIHOOD

Critical Business Functions

• Identify all business functions in your organisation

• Assess loss potentials over time determines what systems need to be recovered and how quickly

• Assess what data needs to be recovered and how current the data must be determines backup and restore strategy

Business

Function

Function

Code

Impact Over Time

RTO RPO MTPD

*

Vulnerable

Periods 4

hrs

8

hrs

12

hrs

1

day

2

days

3

days

5

days

7

days

10

days

14

days

21

days

30

days

60

days

(a) (b) (c) (d) (e) (f) (g)

Strategy Development

• Continuity Strategy for Plan Development – Explore strategic options for recovery of critical

business functions and IT systems

– Examines: • Skills & knowledge

• Facilities

• Technology

• Data

• Processes

• Suppliers

Planning for Floods

• BCM Areas

• Issues associated with safety of people as well as knowledge & training

PEOPLE

• Issues associated with facilities, technology and equipment

INFRASTRUCTURE

• Issues around ensuring profitability, ability to operate and reputation

BUSINESS

Planning for Floods

• Planning Stages

• Before the flood REDUCTION

• During the flood RESPONSE

• After the flood RECOVERY

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Create, update and review a Business Continuity Plan (BCP)

• Prepare an Emergency Kit which includes a battery powered radio, spare batteries, torch, first aid kit, emergency contact numbers, a copy of your BCP and any other emergency items relevant to your business

• Keep a BCP at your business premises and keep copies of your plan off-site (and out of the flood area) and in your Emergency Kit

• Know evacuation routes and communicate to staff

• Encourage staff to participate in the development of the BCP

• Have flood insurance

• Avoid storing valuable unused equipment in basements

• Maintain an up-to-date list of emergency contact numbers for staff and services.

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Keep listening to the local radio station for information, updates and advice

• Move valuables to higher floors

• Evacuate all employees and customers if instructed to via safe evacuation routes, before the premises are affected by flooding.

• When evacuating, take your Emergency Kit and turn off electricity, gas and water at the mains. Lock the premises and notify security

• Stay away from downed power lines

• Do not eat food that has come in contact with floodwater

• Keep in contact with staff and keep them updated on the situation

• Never drive, ride or walk through floodwater

• Beware of dangerous animals

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Never drive, ride or walk through floodwater

• Keep listening to the local radio station for information, updates and advice

• Before re-occupying the premises undertake make sure building is safe

• Wear protective clothing including enclosed, waterproof, puncture-resistant gloves, sturdy shoes and long pants

• Ensure you wash properly after cleaning flood damaged premises

• Review your flood actions & revise your BCP

• Have utilities professionally checked

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Check the quantity of stock, plant, equipment, furniture and fittings that

would need to be moved

• Check the availability of staff and resources to move stock, plant, equipment, furniture and fittings as required

• Install electrical outlets above flood level

• Ensure any flood-proofing devices are ready for use

• Install non-return valves on toilets and drains

• Relocate chemicals and waste containers well above the maximum flood level

• Secure any objects that are likely to float

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Install flood-proofing devices, block toilets, sinks and floor drains with

sandbags

• Relocate chemicals and waste containers well above the maximum flood level

• Secure any objects that are likely to float

• Mobilise staff and resources to move stock, plant, equipment, furniture and fittings

• Move as much stock, plant, equipment, furniture and fittings as practical above the likely flood level

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Kick off the Disaster Recovery Plan

• Move tapes & drives to a safe location

• Remove debris and clean, repair and disinfect premises. Expert help required.

• Replace essential plant, equipment and stock as soon as possible with flood-resistant products

• Replace lost furniture, floor coverings and fittings with more flood resistant products

• Salvage, clean and dry as much as possible

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Identify an alternative business location and have call diversion

arrangements to allow the continuation of business operations off-site.

• Have alternative supply arrangements.

• Have reciprocal help agreements with similar businesses in areas that are unlikely to flood at the same time.

• Have strategies for re-stocking

• Identify ways to win back customers.

• Identify critical functions to be maintained during and after flooding eg. payroll

• Backup important computer files each time they are updated and store those backups off-site and out of the floodplain

• Store critical archival paper-based records off-site and out of the flood area

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Maintain critical business functions e.g. payroll

• Postpone supply deliveries

• Divert business calls to an alternative phone

• Notify customers or clients of alternative business arrangement if necessary

• If practical, make arrangements to temporarily continue business operation from other premises

• Take computers, cash and critical records to a flood-free Location

INFRA.

BUSINESS

Planning Matrix

REDUCTION RESPONSE RECOVERY

PEOPLE

• Notify customers or clients as soon as you resume Trading

• Maintain critical business functions e.g. payroll

• Re-stock and increase staff if your business will be critical to the communities flood recovery work

• Implement any reciprocal help arrangements

• Implement incentives to stimulate trade if you experience a down-turn

• Restore critical records, cash, computer equipment and files

• Evaluate storage procedures after flood event

INFRA.

BUSINESS

Planning for Floods

• Detailed Plans (example) During a Flood

Triggers

The NEA issuing a Flood Warning

The NEA Issuing a Severe Weather Warning or Severe Thunderstorm

Warning indicating a likelihood of flash flooding

Announcements through local media

Actions How do I?

Action How to do it Who will do

it?

What you

will need

Est. time

needed

Completed

( √ )

Key Considerations

• Review Business Continuity Plans and activate if necessary – staff safety first

• Install flood protection measures if time allows

• Align plan triggers to government’s

• Monitor local government or media news broadcasts

• Consider interdependencies with suppliers and customers

• Consider placement of critical / sensitive equipment

• Stock up on emergency water (and food) supplies

Additional Considerations for DC’s

• Carefully selected location for data centre

• Fuel storage for standby power generators

• Cooling options for data centres

• Surface water pumping stations

Example

• Major Bank in Thailand

• Considerations as flood waters were beginning to close in on Bangkok.

– Power & communications

– Branches & ATM’s

– Cash in ATM’s

– Prepare for the aftermath

BCM Planning Methodology

Thank You

www.bcm-institute.org