Continuity Forum - creating Continuity

BRITISH STANDARD 25999 Consultation documents

Mon, 09 Oct 2006 11:08:14 +0200

Category Business Continuity Management BCM - Standards - BCM BS25999

Public Consultation begins for British Standard for BCM - BS25999
--------------------------------------------------------------------------------

On the 3rd July the BSI is due to commence the public consultation on BS25999, the long awaited British Standard for Business Continuity.

The Consultation will run for 60 days .

The final standard will hopefully be published during November and we’d encourage all those interested to submit their thoughts and suggestions on the Standard.

The web address for the download of the public consultation documents is http://www.bsi-global.com/bs25999.

100's of critical sites vulnerable to flooding

Wed, 07 May 2008 10:31:35 +0200

UK Flooding Risk and BCM

Category Business Continuity Management Briefing BCM - BCM & Risk Management - news - General

Serious concerns over the flooding risk of hundreds of critical sites

Hundreds of UK power substations and water treatment plants are potentially at risk from flooding, a confidential government study suggests.

The BBC has reported that it has seen the conclusions of research commissioned after the devastating floods of 2007.

Business Continuity Management' Survey Finds Firms Over-optimistic

Tue, 01 Apr 2008 15:08:19 +0200

Marsh Report 2008 Business Continuity Research

Category Business Continuity Management Briefing BCM - BCM & Risk Management - Research - General

Organisations misleading themselves over effectiveness of BCM planning

April 1, 2008

A new survey from Marsh has determined that "many European firms are failing to overcome a 'perception gap' in their approach to business continuity management (BCM).

Marsh's latest research, The Upside to Business Continuity, examines the views and perceptions of Business Continuity and Risk Managers from organizations across Europe on issues relating to BCM. The survey consulted professionals from delegates attending the Business Continuity Expo, which is being held on the 2, 3 April at the ExCel Centre, clients of the British Standards Institute and members of London First.

New volunteer system to support local response against threats

Tue, 01 Apr 2008 11:55:40 +0200

BCM Security and Resilience new volunteer initiative

Category Business Continuity Management Briefing BCM - BCM & Risk Management - news - General - Continuity Forum

Government plans for new volunteer Army

21/03/2008

Gordon Brown wants tens of thousands of Britons to join a new volunteer force to help the Government respond and help tackle boost resources in handling threats to our communities from flooding right through to terrorism.

Serious Crime Chief warns of Cyber crime threat

Thu, 20 Mar 2008 14:01:04 +0100

Category Business Continuity Management BCM - Security - Cyber Crime - Advice - risk Management - Corporate Governance - Continuity Forum

Soca e-crime chief wants closer realtionship with business to combat cyber threat

14 March 2008

Serious Organised Crime Agency (Soca) Head of e-crime, Sharon Lemon, is warning that cyber crime is so widespread it features in nearly every criminal investigation. The Continuity Forum and City Police just a week ago broadcast the same warnings at the IT security threat briefing held in conjunction with IBM.

Government announce new Security and Resilience Strategy

Thu, 20 Mar 2008 13:56:31 +0100

BCM Security and Resilience new initiative

Category Business Continuity Management Briefing BCM - BCM & Risk Management - news - General

Government lays out plans to address national risks

Wednesday, 19 March 2008

Today Gordon Brown has set out plans to deal with national emergencies such as terror, disease pandemics and flooding.

In his statement to the House of Commons Mr Brown said the threats to Britain had "changed out of all recognition" in recent years and that strategy had to change accordingly.

Emergency Planning Conference Torquay 16/17 June

Wed, 07 May 2008 10:18:00 +0200

Emergency Planning Society Conference

Category Business Continuity Management Briefing BCM - BCM & Risk Management - news - General

EPS Conference to Address Climate Change

Creating Continuity ... Building Resilience ...

Wide-area flooding is now considered to be in the ‘premier league’ of risks the UK and Ireland currently face and, in the future, such events are likely to become more commonplace and severe.

Risky business: BCM 2008 report exposes vulnerability of organisations across the UK

Tue, 11 Mar 2008 09:41:26 +0100

BCM Report 2008 Business Continuity Research

Category Business Continuity Management Briefing BCM - BCM & Risk Management - Research - General

Risky business: report exposes vulnerability of organisations across the UK

UK plc failing to protect their people, property and data

The threat of disaster continues to hang over organisations across the UK, as many fail to provide adequate protection for their key assets. The latest annual report publised by the CMI and supported by the Cabinet Office and the Continuity Forum reveals that organisations recognise a need to guard against disruption and face increasing pressure to do so. However, attempts to protect ‘business operations’ are often haphazard and untested.

Complacency not caution

The survey, now in its ninth year, shows that only 47 per cent of organisations across the UK have a business continuity plan (BCP) – a figure that has barely changed since 2002 (45 per cent). Major differences also exist between organisation types, with BCPs most apparent in the public sector (62 per cent) and amongst listed companies (55 per cent), compared to only 40 per cent of private and voluntary organisations.

The low level of protection is surprising and suggests organisations are still only paying lip service to contingency planning. It comes, despite a significant majority of managers (76 per cent) reporting that business continuity is ‘important’ or ‘very important’ to their employer, with 66 per cent claiming responsibility for implementation rests at senior management level.

Pressure to protect

The study indicates, however, that employers are coming under increasing pressure to develop BCPs. Asked to identify what influenced the adoption of a business continuity management strategy, most respondents with a plan cited corporate governance as the key driver (60 per cent). Amongst PLCs, this figure rises to 76 per cent and is 69 per cent in the public sector.

Central Government was listed as the second highest driver (33 per cent) followed by customer demand (32 per cent). The results also show that calls for contingency planning are increasing from auditors (30 per cent, up from 24 per cent in 2007) and insurers (30 per cent, up from 28 per cent in 2007).

Bitter experience is also becoming a solid driver for business continuity planning. The survey indicates that 94 per cent of organisations which had invoked their plan in the past 12 months felt that it had been effective in reducing disruption.

Haphazard and untried

Yet, despite the obvious benefits, even those organisations adopting BCPs are haphazard in their approach. For example, only 29 per cent address the potential loss of people, but 35 per cent experienced disruption as a result of this in the past year. And, despite 73 per cent suggesting that ‘IT downtime’ would have a significant impact on costs and revenue, only 39 per cent of organisations focus on loss of technology.

Russell Price, chairman of the Continuity Forum says that "Whilst the benefits of BCM are very clear this research shows that far too few orgainsiations have really addressed the issue effectively and are facing much greater risks as a result. Continuing he states "Organisations without effective BCM procedures in place are exposing their investors, employees and customers to a lot of unneccessary risk and need to take a long look at themselves and their management values. In 21st century business these attitudes just are not acceptable."

Jo Causon, director, marketing and corporate affairs at the Chartered Management Institute, says: “Some hard questions need to be asked about why the mismatch between planning and protection is allowed to exist. It doesn’t matter whether the turbulent times we face are caused by economic or security concerns; the simple fact is that failing to provide safeguards for business operations does not make sense. The ability to manage risk is a critical skill and unless it is taken seriously businesses and jobs will remain at risk.”

Although there is some improvement, 33 per cent of organisations with a BCP still do not undertake any form of exercise to test their plan (down from 37 per cent, last year). A high proportion (78 per cent) of those who do exercise at least once each year said shortcomings had been revealed, enabling them to make improvements. However, 9 per cent admitted that no steps were taken to address the weaknesses that had been uncovered.

The evidence also suggests that staff training relating to BCPs remains limited. Among those with a BCP, 35 per cent include BCP training on induction courses (rising from 30 per cent in 2007). However, with an annual staff turnover rate of 12.9 per cent* there is a clear need for increased levels of training to build resilience.

Bruce Mann, Director of Civil Contingencies at the Cabinet Office, says: “Whilst this year’s survey shows organisations taking steps to improve their business continuity arrangements it also shows, starkly, that there is much more to be done. Too many organisations still do not have effective business continuity arrangements in place. This view is echoed by the findings from Sir Michael Pitt’s review of the 2007 floods. It is bad news for employees, shareholders, customers and communities. Lessons need to be learnt, and acted upon, to strengthen business and national resilience, as a whole.”

To download the Findings please click here

To download the Report in full please click HERE

INDEPENDENT REVIEW ISSUES CALL TO ACTION ON FLOOD RISK

Wed, 20 Feb 2008 09:27:40 +0100

Bird Flu

Category Business Continuity Management Briefing BCM - BCM & Risk Management - H5N1 - Pandemic - General

>“Despite the impressive efforts of emergency responders, much work needs to be done to avoid emergencies of the scale we witnessed this summer happening again.

The summer floods were a “wake-up call” for the country, says the interim report of the Independent Review commissioned by the Government to learn lessons from the events. It urges immediate action in a number of areas by government departments and agencies, local authorities and other stakeholders, as well as members of the public, to ensure we are not caught out again by events like the flooding of June and July.

The author of the independent Review, Sir Michael Pitt, one of the country’s most respected and experienced figures in local public service, was asked by Ministers in August to identify the lessons to be learned from the emergencies and to make recommendations that would help the country adapt and deal more effectively with flooding on the unprecedented level of last summer.

“The country was fortunate that the impact was not much more severe.”
Sir Michael Pitt, December 2007

The publication of the Review’s interim findings has three main objectives:

• To identify issues requiring urgent action;
• To set out the direction for the remainder of the Review; and
• To provide a document for consultation prior to publication of the final report next summer.

The Review makes 15 “urgent recommendations” to be implemented as soon as possible to reduce the impact of any flooding that might occur in the near future. These cover the areas of managing flood risk, groundwater monitoring, local and national planning and response, public information, and public preparedness.

Additionally, the Review draws 72 interim conclusions, awaiting further information and evidence before being put forward in firm recommendations next summer.

The report is written from the standpoint of flood victims, highlighting the devastation to lives and livelihoods and the necessity for the authorities to reduce the risk and impact of future events. It includes contributions from affected communities and businesses, and key stakeholders, such as the emergency services, local authorities, and public and regulatory bodies.

Sir Michael personally visited many of the flooded areas – including Doncaster and Sheffield, Hull and East Riding, Barnsley and Rotherham, and Gloucester and Tewkesbury – meeting members of the public affected by the emergencies, as well as representatives from the emergency services, local authorities and other local organisations.
The floods were the result of the wettest summer since records began, and were of a different scale and type to previous events – the majority being due to surface water flooding, for which no warning system was in place – with drainage systems being overwhelmed.

It could have been even worse. “The country was fortunate that the impact of the emergencies were not much more severe,” says Sir Michael. Several major disasters were only narrowly averted. For example, had Walham electricity switching station near Gloucester failed, 500,000 people would have been without power. Better protection for critical infrastructure and national communications installations is among the Review’s key interim recommendations.

Overall, the Review finds that the Government responded well to the emergencies, with effective collaboration between departments and agencies. However, Sir Michael concludes that the country was not as well prepared as it should have been. He warns that “flood risk is here to stay,” and the signs are that similar extreme events are likely, underlining the need for better preparation.

Flooding is a national issue, and the Review says the Government must take the lead in making the case for adapting to climate change, particularly in reducing the potential impacts on communities. A clear strategy and action plan should be developed to deliver the provisions of the Climate Change Bill and support adaptation to more frequent extremes of weather. Flood legislation should be streamlined and updated to clarify responsibilities, address all sources of flooding, and reflect the modern, risk-management approach.

With around two-thirds of the floods caused by surface water, there needs to be a new emphasis on guarding against this type of flooding. Sir Michael says the Environment Agency is best placed to develop a national approach to managing surface water flood risk, including development of surface water mapping and warning tools; and it should no longer be a right of householders and businesses to lay impermeable surfaces as they wish.

Sir Michael also calls for stronger local leadership and forward planning. He found there was no clear allocation of responsibilities at the local level for assessing the possible impact of severe weather or for triggering the appropriate multi-agency response. He recommends that “upper-tier” local authorities lead the planning for weather emergencies, and that the police be responsible for co-ordinating the emergency response.

The interim report makes the following “urgent recommendations”:

REC 1 – The Review recommends that more frequent and systematic monitoring of groundwater levels at times of high risk should be undertaken by the Environment Agency, which should begin as soon as possible to predict and mitigate further serious ground water flooding from this winter onwards.

REC 2 – The Review recommends that the Environment Agency, supported by local authorities and water companies, should urgently identify areas at highest risk from
surface water flooding where known, inform Local Resilience Forums and take steps to identify remaining high risk areas over the coming months.

REC 3 – The Review recommends that the Environment Agency should urgently develop and implement a clear policy on the use of temporary and demountable defences.

REC 4 – The Review recommends that all Local Resilience Forums urgently review their current local arrangements for water rescue to consider whether they are adequate in light of the summer’s events and their local community risk registers.

REC 5 – The Review recommends that all Local Resilience Forums should undertake an urgent review of designated rest centres and other major facilities to ensure either that they have the necessary levels of resilience to enable them to be used in the response to flooding and other major emergencies, or that alternative arrangements are put in place.

REC 6 – The Review recommends that the Cabinet Office, with other departments, should urgently consider the costs, benefits and feasibility of establishing arrangements for the urgent acquisition of supplies during a major emergency, including the use of call-off contracts or the creation of national or regional stockpiles of equipment and consumables.

REC 7 – The Review recommends that Department of Health guidance clarifying the role and accountabilities of organisations involved in providing scientific and technical advice during a major incident should be implemented as soon as possible and understood by Gold Commanders.

REC 8 – The Review recommends that the guidance currently under preparation by Cabinet Office to provide local responders with advice on the definition and identification of vulnerable people and on planning to support them in an emergency should be issued urgently.

REC 9 – The review recommends that, in order to effectively fulfil its Lead Department role for flood risk management and emergency response, Defra needs to urgently develop and share a national flood emergency framework.

REC 10 – The Review recommends that Category 1 responders should be urgently provided with a detailed assessment of critical infrastructure in their areas to enable them to assess its vulnerability to flooding.

REC 11 – The Review recommends that the Environment Agency should work urgently with telecommunications companies, consulting the Information Commissioner as necessary to facilitate the roll-out of ‘opt-out’ telephone flood warning schemes to all homes and businesses liable to flooding, including homes with ex-directory numbers.

REC 12 – The Review recommends that Local Resilience Forums urgently develop plans to enhance flood warnings through ‘door-knocking’ by local authorities based on an assessment of the post code areas likely to flood.

REC 13 – The Review recommends that Local Resilience Forums urgently make arrangements to involve local media representatives in the local preparedness and response to support their public information role.

REC 14 – The Review recommends that members of the public make up a flood kit – including key personal documents, insurance policy, emergency contact numbers (including local council, emergency services and Floodline – 0845 988 1188), torch, battery or wind-up radio, mobile phone, rubber gloves, wet wipes or antibacterial hand gel, first aid kit and blankets.

REC 15 – The Review recommends that members of the public increase their
personal state of readiness and resilience to floods by following the Environment Agency’s practical advice, where appropriate, as summarised below:

o Make sure you have adequate insurance. Flood damage is included in most buildings insurance policies but do check your home and contents are covered;

o Access the Environment Agency’s website to check flood risks to property (this can be followed up by advice from the Environment Agency, for example whether the property in question is protected to some degree by physical defences);

o Contact the Environment Agency to be registered on their Flood Warnings Direct scheme (however, it does not apply to surface water or sewerage flooding and people should also make sure they remain alert to weather forecasts);

o Keep vital possessions, such as financial and legal documents and items of sentimental value, upstairs or stored as high as possible in waterproof containers and have plans in place to move items at short notice;

o Make a list of other useful numbers you may need – your local council, the emergency services and your Floodline quick-dial number.

o Make sure you know where to turn off your gas, electricity and water. If you are not sure, ask the person who checks your meter when they next visit. Mark the tap or switch with a sticker to help you remember.

4. The consultation period on the Interim Report recommendations will run from January to March 2008. Consultation activities are likely to include:

• Public meetings in affected areas.
• A call for written submissions from stakeholders
• E-consultation via the Pitt Review web site: http://www.cabinetoffice.gov.uk/thepittreview.aspx
• Practitioner Panels or Industry-Government Forums

To download the interim Findings and recommendations in ful please click here

To download the interim Findings and recommendations in full please click HERE

Lloyd’s underwriters share their views on emerging risk

Wed, 20 Feb 2008 09:11:43 +0100

Risk and Insurance

Category Business Continuity Management Briefing BCM - BCM & Risk Management - General

Corporate liability is a key risk facing the insurance industry

February 2008

The instability of global financial markets is the single factor which will most impact the insurance industry during 2008: this is one of the key findings of the Lloyd’s annual underwriters survey. The survey asked 138 Lloyd’s underwriters questions about working in the Lloyd’s environment, including what emerging risks will most challenge the insurance industry over the coming year.

Bird Flu Continues March 4 Years Later

Thu, 14 Feb 2008 12:57:16 +0100

GP's and Pandemic Flu

Category Business Continuity Management Briefing BCM - BCM & Risk Management - H5N1 - Pandemic - General

Fears of a global bird flu pandemic that once dominated headlines have largely vanished in the West, but four years after the virus began ravaging Asian poultry, it continues to quietly spread.

Most global health officials continue to warn that the virus could morph into a disease as threatening to people as it is to chickens. Although a few are now calling the risk "overestimated," recent developments raise new concerns:

UK 'ill-prepared' against floods says Pitt

Thu, 14 Feb 2008 11:43:47 +0100

BCM Flooding Guide

Category Business Continuity Management Briefing BCM - BCM & Risk Management - Flooding - Guidance - General

Government and Business must do to plan for Flooding events

Feb 2008

The UK's disaster management is woefully inadequate, says the man leading a government review into last summer's flooding.

Sir Michael Pitt told a meeting of the Local Government Association that preparations and warnings for surface water flooding were not in place.

He called for more resources to prevent a similar disaster from recurring. Thousands of homes and businesses were affected by the flooding, generating insurance claims of more than £3bn.
_________________________

“We need to have a much clearer understanding over which streets are likely to be flooded” Sir Michael Pitt
_________________________

Sir Michael said preparations and warnings for surface water flooding were not in place in the same way as for coastal and river flooding.

"We need to invest more in weather forecasting," he said, "so that we can identify not just the county but the town or locality where the flooding is going to take place."

"We need to have a much clearer understanding over which streets are likely to be flooded and therefore what action can be taken," he added.

"It's important to identify and map the hotspots".
_________________________

“People are frightened during a flood - they need to have reassurance Sir Michael Pitt
_________________________

In an interim report into the floods last December, Sir Michael said planning for flooding should have the same priority as terrorism or flu prevention.

Last summer's flooding followed several weeks of downpours in spring, among the wettest since records began.

According to the Environment Agency, 55,000 homes and businesses were flooded.
Among the worst affected areas were Yorkshire and Gloucestershire, where 140,000 homes were left without water when treatment works flooded.

The disaster also forced the closure of the M1, M4 and M50 motorways and many railway lines.

Sir Michael said the flooding highlighted how vulnerable some electricity sub-stations and water sources were, and he called for utility companies to become involved in risk planning.

He praised local councils for the part they played in the clean-up operation, although he said "we were incredibly lucky because it could have been a lot worse".

"People are frightened during a flood. They need to have reassurance about what to do."
The meeting also heard from Tewkesbury Borough Council's strategic director, Chris Shaw.

Mr Shaw said that seven months on from the flooding, there are still 437 displaced households, of which 95 families are living in caravans.

"The situation is pretty poor for them," he said.

"The biggest single impact is their health suffering; families living in cramped space and the stress that brings."

John Charlton, from Sheffield City Council, described last summer's floods as "by far and away the greatest natural disaster Sheffield has ever had to deal with".

He put the cost of damage to local infrastructure at £10m and said the clean-up would cost £2m.

The government and insurers met on Tuesday to review the way insurance is offered to those most vulnerable to flooding, following a record number of claims.

The Pitt Review conclusions are expected in the summer.

You can download helpful advice by clicking on the link below :

Flooding Guidelines Download HERE

SPECIAL Event - IT security & Resilience Breakfast Briefing - 13th March London

Fri, 14 Mar 2008 08:00:07 +0100

Category Business Continuity Management BCM - EVENT - Free Support - Advice - risk Management - Corporate Governance

Business Continuity Breakfast Seminar SERIES

---------------------------------------------------------------------------------------------

Is outsourcing too risky?

Thu, 24 Jan 2008 09:05:45 +0100

Outsourcing and Risk

Category Business Continuity Management Briefing BCM - BCM & Risk Management - Outsourcing - Services - General

Not if you plan carefully ...

23 Jan 2008

Before an organisation decides to follow the outsourcing trend, attention must be paid to the many risks involved in this way of doing business, says Anthony Plewes.

No matter what the reason is for outsourcing key IT processes, there's always an element of risk. Will the supplier deliver? Was the contract appropriately scoped? Are the business objectives truly being fulfilled? These issues shouldn't be left to chance.

Half of UK GPs lack guidance on tackling pandemic flu

Thu, 24 Jan 2008 08:04:27 +0100

GP's and Pandemic Flu

Category Business Continuity Management Briefing BCM - BCM & Risk Management - H5N1 - Pandemic - General

Only a quarter of practices ready to tackle a pandemic.

23-Jan-08

Half of GPs believe that the DoH has failed to provide them with enough information about what to do in the event of an influenza pandemic, according to a GP survey.

The survey of 310 GPs found that 49.4 per cent of GPs felt that the DoH had not provided them with sufficient information to prepare them for a pandemic.