Coverage Introduction for BCP services
description
Transcript of Coverage Introduction for BCP services
![Page 1: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/1.jpg)
COVERAGE INTRODUCTIONThai Transport Human Pandemic Planning
May 2009
![Page 2: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/2.jpg)
Summary ….
![Page 3: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/3.jpg)
THE PROPOSED PRODUCT….
1. Develop Internal Plans (recommended)1. GCMP 2. Pandemic Control (Phase 5)3. Pandemic Crisis (Phase 6)
2. Develop External Plans (with Thai Transport management assistance)
1. GCMP2. Pandemic Control (Phase 5 Local)3. Pandemic Introduction Control (Phase 6
International)4. Pandemic Crisis Control (Phase 6 Locally)
3. Training for 2000 Thai Transport staff4. TTX for Thai Transport staff
![Page 4: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/4.jpg)
THE PROPOSED PLANS WILL INCLUDE….
1. Notification and Activation system2. Crisis Organisation Structure3. Role and Responsibilities4. Planning system5. Forms and Templates6. Terms and Definitions7. Training and Testing Plan
And can be prepared within 3-6 months (training and testing rolled out over 2 years)
![Page 5: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/5.jpg)
HOW THE PRODUCT WILL HELP….
Assist Thai Transport to operate if Pandemic hits staff and partners and speed recovery
Assist Thai Transport provide services to citizens if Pandemic hits Thailand Lower disruption to Thai business and society Lower loss to economy
Provide confidence for Thai Transport staff and partners
Provide confidence for Thailand Help Foreign Investment Assist Tourism/Export confidence
Prepare Thai Transport for any other disasters in future
![Page 6: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/6.jpg)
WHY IS IT GOOD FOR THAI TRANSPORT….
Low cost method to protect staff and operations
Low cost method to provide confidence to Thai government and population
Can be adapted to easily make plans for any future disasters such as: Major storms Floods Fires/Bombs/Terrorist Attacks IT Disasters
Can be linked to other department plans Can be used to assist others make plans
![Page 7: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/7.jpg)
REFERENCES…. Risk Management and BCP professional since 1998
Member of the Business Continuity Institute (www.thebci.org) since 2003
International Federation of the Red Cross, Geneva – Created GCMP and Pandemic Plan in 2009
International Federation of the Red Cross, West Central African Zone – Created GCMP and Pandemic Plan in 2008, trained all management and staff
Siam Ocean World, Bangkok – Created GCMP, trained all management staff and conducted TTX’s 2007-2009
Meinhardts Engineering, Bangkok – Created GCMP, trained all management staff and conducted TTX 2008
Siam City Cement, Bangkok – Revised Crisis Management system and conducted TTX 2008
Medibank Private, Melbourne – Created GCMP, IT Disaster Plan, trained all management staff, conducted TTX 2000-2001
Mayne Nickless Express, Melbourne – Created GCMP and Y2K plan, trained all management staff, conducted TTX 1999
ADPC/Red Cross/UN Avian Influenza working group – 2007-2009
Consulted and advised ASEAN Transport ministers on Avian Influenza issues - 2008
Multiple seminars and business forums – BCP, Human Pandemic guest speaker – 2007-2009
Quoted and Interviewed for various publications such as Bangkok Post – 2008-2009
Developed fully integrated and component based BCP system - 2003
![Page 8: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/8.jpg)
WHY COVERAGE…. Only company in Thailand to have provided Human
Pandemic Plans for many different companies across 4 continents
Only consulting company in Thailand to be qualified by the BCP Organisation in the UK
Only company in Thailand to provide a unique integrated component based BCP system to handle any and all risks
Most experienced BCP provider in Thailand Low prices compared to International providers Trained Thai staff Assisting NESDB to create new Thai BCP standards Able to test and audit BCP’s and provide training and
TTX’s as required
![Page 9: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/9.jpg)
Introduction/Background …..
![Page 10: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/10.jpg)
COVERAGE….
Thai company Started operations in 2003 Employed over 100 Thais since starting Profitable Growing 3 main business activities:
Software sales Outsourcing Business Continuity Planning and Risk
Management
![Page 11: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/11.jpg)
BCP AND RISK MANAGEMENT
Prepare customers for Disasters: Bird Flu Bombs Fires IT Failures etc
Conduct Risk Assessments Provide Auditing:
SOX Major Customers:
Red Cross, Hutch, Siam Ocean World, Meinhardts, SCCC, Nestle, DTac
![Page 12: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/12.jpg)
ANDREW …. More than 20 years in IT and Consulting, supporting
industries: Telcos - Telstra, Hutch, Dtac Logistics – Mayne Nickless, Infocomm Software Finance – Medibank Private, Kbank Others – Manufacturing, NGO’s, Engineering, Tourism and
Entertainment Owner of:
Coverage and Infocomm Software President of Australian Chamber of Commerce Thailand Director of Board of Trade Thailand MBCI (master of Business Continuity Planning) Developed complete BCP system Consultant to Red Cross and UN for Pandemic Planning 1 daughter (11) attending school in Bangkok
![Page 13: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/13.jpg)
Influenza Update
![Page 14: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/14.jpg)
SWINE FLU ….
Outbreak probably due to Swine flu mutation Highly contagious (maybe 30%) Now more than 15000 cases Spread to 40 countries in less than two
weeks Death rate 1% (3% in Mexico) In Thailand and China Both have Avian Influenza (highly
pathogenic) Similar pattern to 1918 – all basic ingredients
in place for major problem in December and January
![Page 15: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/15.jpg)
RESPONSES TO DATE….
WHO raised pandemic status to 4 then 5 Now considering 6 Thailand should now implement plans Mexico shut down country for 5 days US have shut down a number of schools Hong Kong quarantined a major Hotel China closed borders to Mexican citizens
(even if they haven’t been in Mexico for 2 years!)
Many updating their plans now
![Page 16: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/16.jpg)
THINGS TO CONSIDER
Provide normal Transport services, monitoring and control for Thailand (external)
Other risks, problems and disasters won’t stop Protect internal capability to provide services Local v Regional v International Pandemic Development time and Effectiveness of Vaccine
unknown (6 months +) Actions of other departments unknown Effect of actions on public panic, business,
tourism and Thai image
![Page 17: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/17.jpg)
Key Questions
![Page 18: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/18.jpg)
SCOPE ….
Thai Transport departments? Staff numbers in each department? Pandemic Planning required by when? Links with other groups?
Airport Police/Military Customs Education TAT BOI Commerce Health
![Page 19: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/19.jpg)
Proposed Solution….
![Page 20: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/20.jpg)
PLANS ….
Need Internal Plan And External Plan ASAP! Need to train and test both
![Page 21: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/21.jpg)
INTERNAL PLAN ….
Aim - Plan to allow Thai Transport to keep operating
Need 2 Plans Prevent infection of staff (Phase 5 – locally) Minimise disruption to operations (Phase 6 –
locally) Need to make some assumptions Need to develop plan with key functions Need to train and test
What if Pandemic doesn’t go to plan? What if another disease or problem hits first?
![Page 22: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/22.jpg)
INTERNAL PLAN SOLUTION ….
1. Develop a Generic Crisis Management Plan first
2. Use key components:1. NAS2. Organisation Structure3. Roles and Responsibilities4. Planning system5. Training/Testing6. Forms and Templates7. Terms and Definitions
3. Develop a Pandemic Plan using these components and training
![Page 23: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/23.jpg)
EXTERNAL PLAN ….
Aim – to minimise disruption of transport services to Thailand
Need 2 Plans: Limit infection (Phase 5 locally and Phase 6
International) Minimise disruption (Phase 6 – locally)
Need to make some assumptions about Flu What will other groups do? Need to train and test – but how to get others
to participate? What if Pandemic doesn’t go to plan? What if others don’t respond how we think?
![Page 24: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/24.jpg)
EXTERNAL PLAN SOLUTION ….
1. Develop a Generic Crisis Management Plan for any Transport disaster first
2. Use key components:1. NAS2. Organisation Structure3. Roles and Responsibilities4. Planning system5. Training/Testing6. Forms and Templates7. Terms and Definitions
3. Develop a Pandemic Plan using these components and training
4. Co-ordinate with other groups!!
![Page 25: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/25.jpg)
PROPOSAL OPTIONS ….
1. Develop Internal Plans (recommended)1. GCMP 2. Pandemic Control (Phase 5)3. Pandemic Crisis (Phase 6)
2. Develop External Plans 1. GCMP2. Pandemic Control (Phase 5 Local and Phase 6
International)3. Pandemic Crisis Control (Phase 6 Locally)
3. Operate 2.2 and 2.3 (Undertake controls)4. Operate 1.2 and 1.3 (Run Crisis)
![Page 26: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/26.jpg)
OPTION 1 PLAN Meet with senior department managers to determine
best system and requirements Develop 3 Internal Plans for Thai Transport (3 months) Train 2000-3000 Transport Staff and selected others =
2 days per person TTX 1 (simple) GCMP Training HCPC Training TTX 2 (Pandemic Scenario)
Use Thai Transport locations to minimise cost Thai language training and material
![Page 27: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/27.jpg)
SUMMARY
![Page 28: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/28.jpg)
RATES…
3 Components Licence Fee for each plan Daily rate to develop plans Daily rate for Training and Testing
Can provide ongoing testing and auditing Can provide some operational activities Can provide actual crisis management
services
![Page 29: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/29.jpg)
What can Coverage provide
Planning system for managers Training for all levels of staff in Thai and English Documentation to support audits and reviews Exercises to review performance and problems Ongoing support for other plans and training
![Page 30: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/30.jpg)
GCMP AND HPCP KEY COMPONENTS
![Page 31: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/31.jpg)
Levels, Terms, Definitions
Organisation Structure
Notification and Activation System
Planning Processes
Forms and Documentation
Training
Roles and Responsibilities
GCM Components
IT Disaster
Brand Damage
Fire/Flood
Currency Crisis
Other CP’s
Plug in and re-
use
Plug in and re-
use
![Page 32: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/32.jpg)
Event Occurs
ReviewRisks
Notification
Business as Usual
Activation
Get Organised
Take Action
Make Plans
Train
PrepareFix process
Prevent
Test
BCP BUSINESS CYCLE
![Page 33: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/33.jpg)
Notification
Event OccursSeen by someone
Tell theBoss
Tell theBoss
Tell theBoss
![Page 34: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/34.jpg)
Activation
Event OccursSeen by someone
MiddleManager
SeniorManager
Geneva
IncidentManager
CrisisManager
SiteManager
Tell the Boss
Tell the Boss
Tell the Boss
![Page 35: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/35.jpg)
NAS
Site Manager
Incident Manager
Crisis ManagerSenior
Manager
Middle Manager
Event Spotter
1
2A
3B
2B
4
3C
Owners/Directors
3A
Notification Process
Activation Process
5
Level 3 - Crisis
Level 2 - Incident
1 = Tell Boss about Event
2A = Tell the Boss (Boss confirms declaration and any appointments made)
2B = Declare Incident (Level 2) and Appoint Incident Manager
3A = Tell the Boss (Boss confirms declaration and any appointments made
3B = Declare Crisis (Level 3) and Appoint Crisis Manager
3C = Incident Manager Appoints Site Managers and necessary
4 = Crisis Manager Informs/Replaces Incident Manager
5 = Owner or Director Confirms Crisis Manager and Crisis (Level 3)
![Page 36: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/36.jpg)
GENEVACM & IMTEAM
![Page 37: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/37.jpg)
ZONECM & IMTEAM
![Page 38: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/38.jpg)
LINKEDCM & IMTEAMS
![Page 39: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/39.jpg)
HELPFUL DEFINITIONS► Emergency (Immediate) Actions (IA)
► Actions to be taken quickly when a trigger event occurs – normally to save lives
► EG = If fire starts - Evacuate► Doesn’t help us operate the business
► Contingency Plans (CP)► Plans that show how to do something in a different way if
something goes wrong = “Plan B”► EG = If car breaks down - catch the train or taxi► Doesn’t help us recover to where we were before
► Disaster Recovery Plans (DRP)► Plans that show how to restore an activity that breaks to its
original status► EG = if computer breaks, use back-up tape to restore the
files► Takes a long time and doesn’t help us operate while we
implement the plan
![Page 40: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/40.jpg)
HELPFUL DEFINITIONS► BCP = Combination of:
► Immediate Actions (IA)► Contingency Plans (CP), and► Disaster Recovery Plans (DRP)
► BCI Definition from BS25999 - Holistic management process that identifies potential threats and provides a framework for building resilience and a process for enabling response that safeguards the interests of stakeholders
► Caution! – Following the BS25999 will require you to have a BCP (IA, CP, DRP) for every risk
![Page 41: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/41.jpg)
PLANNING PROCESS
Make an “Appreciation of the Situation” Make the plan “Effective” Implement the plan
41
![Page 42: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/42.jpg)
PLANNING PROCESS
Make an “Appreciation of the Situation” Assess the situation Choose the right aim Identify all the factors affecting your aim Identify all the courses open for achieving your aim Decide your plan
42
![Page 43: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/43.jpg)
PLANNING PROCESS
Make Your Plan Effective Complete your plan in detail Test your plan against the Principles of Operations Test your plan against the Principles of
Administration Document and communicate your plans under
standard headings
43
![Page 44: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/44.jpg)
PLANNING PROCESS
Implement Your Plans Preparations Managing the Execution of a Plan Reviewing and Updating the Plan
44
![Page 45: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/45.jpg)
SIMPLE CONTINGENCY PLAN
MCA = WCAZ Office support functionRisk = WHO Phase 6 declaration
1-2hrs 2-8hrs 8-24hrs 24-72hrs 72hrs +
DM
IT
Finance
??
??
45
![Page 46: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/46.jpg)
ASNZ 4360:2008
![Page 47: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/47.jpg)
RISK MANAGEMENT
When we treat risks we basically try and address:Probability, or Impact, orBoth
Impact/Consequence
Pro
babi
lity/
Like
lihoo
d
Risk “X”
![Page 48: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/48.jpg)
OPTIONS TO REDUCE RISKS
1. Tolerated2. Terminated3. Transferred until
tolerable4. Trimmed until tolerable
Trimming means: Reducing probability Reducing consequence
(one method is to develop a contingency plans)
Tolerated Risks
Operate your
business
Understand your Mission
Critical Activities
Determine the risks to the MCA’s
Treat Every Risk
Terminated Risks
Transferred Risks
Trimmed Risks
Develop CP’s
![Page 49: Coverage Introduction for BCP services](https://reader033.fdocuments.us/reader033/viewer/2022061218/54821eccb4af9fa00d8b46f9/html5/thumbnails/49.jpg)
What can Coverage provide
Generic Crisis Management Plan (GCMP) Used for any risk or disaster Component based so can be linked or updated Simple and fast to develop Easy to learn and fast to implement Complies with International Standards
Human Pandemic Crisis Plan Used for Thailand based problems (Minimising loss)
internally Used for Pandemic outside of Thailand (defence) Links with other plans Links with government departments Flexible Planning for any events