article

Pandemic Planning ... Time to act now

Dr Margaret Chan, director-general of the World Health Organisation, yesterday announced formally the arrival of the influenza pandemic, describing it as now “unstoppable”.  By the time you read this note, in the UK we’ll have had around 1400 cases identified, with probably many more going undiagnosed. 

The novel A(H1N1) virus causing the Pandemic is so far relatively mild, with much of the message coming from Health professionals giving reassurance that the virulence is moderate and for us all not to be alarmed.  Notably, the move to a Pandemic level has been described as reflecting geographic spread only and not marking a specific increase in the danger of the virus.

This all sounds not too bad; it’s not the H5N1 Bird Flu, which is far more deadly, the symptoms are pretty mild, and most get well without needing much medical intervention … so is it really something for us to be concerned about?

Well, I’d say yes.

From a medical perspective, the issue is that nature has created in the virus a very adaptive thing.  It is constantly evolving, changing and merging its structures to try and survive and spread. So far there have been 30,000 cases globally; this is a tiny percentage of those likely to be infected, and in a person infected with a tricky virus like A(H1N1), the possibility of the virus mutating still further not just exists, but is reasonably likely. What this means is we really don’t know just what the longer-term impact of the virus is going to be. It may stay as a mild seasonal ‘flu type strain or it may increase in its severity.  Crossing ones fingers and hoping, though, is a poor risk management tactic despite its frequent use. 

One thing is certain, people infected will be too ill to come to work and if the spread of the Virus does scale up dramatically in the Autumn then a lot of Offices, Shops and Factories are going to have to function with fewer people for a while.  There could well be further impact should Schools continue to close (and parents need to stay at home), or if the Transport networks were affected through staff loss.  

The Continuity Forum and the Government have been campaigning for BCM to be more widely adopted by organisations, and today around half our ‘corporates’ do have plans to some degree.  However, many of these (>65%) do not cover the People issues the threat of Pandemic raises.  In smaller organisations, as you may expect, the level of planning is much less. Scaling this up and taking a National view means more than 90% of organisations, covering something like 80% of the UK Workforce, have not developed proper plans.

This raises an important organisational issue. It is rare for those working in the Continuity field to get any significant notice of one specific event, but that is the case with the current Pandemic. 

Most of you reading this will be ‘believers’ in the value of BCM to an organisation, but you’ll also know that there are real difficulties in gaining the necessary support of develop effective plans. It should come as no surprise you that 8 out of 10 of those with BCM plans in the Corporate area (our best prepared) have not considered at all the financial impact of a Pandemic, and fewer than 30% have looked at their supply chain at all. 

Against this backdrop, I have reservations about how people will now act, particularly in the SME community, where pressures are intense just now. They may feel it is too late or hard, and choose to do little or nothing, putting their faith in luck.

Understanding how your organisation will be affected by a period of sustained staff absence is vital to coping well with any disruption - and maybe even averting a crisis. There is a lot of advice now available that people can follow, mostly practical and easily implemented. 

The first steps though are a real critical examination of the likely impact on foundations of the Organisation.  Look at areas like cash flow and production difficulties, consider how you would cope if you lost critical skills.  This is often overlooked, not just in areas such as IT or production, but in terms of people authorised under regulation to do certain tasks whether it is a safety licence as seen in the Gas, electricity and similar sectors or professional qualifications needed in other sectors such as Law, Banking, Insurance and of course Medicine.  Absence of other 'authorised' personnel such as those able to deal with banks and access sensitive information can also become a difficult issue for organisations if not considered fully ahead of time.

By carefully thinking through how your organisation relies on specific skills you'll be able to identify critical activities ahead of any skills shortage and develop a more measured and appropriate response to any absences affecting the organisation.

Remember to extend this thinking to other key partners on whom your organisation may rely too.  With most organisations having partnerships or outsourcing relationships that place key skills outside of your direct control it is vital that you understand the steps these organisations are likely to be taking and how they will impact on you.

Some will doubtless feel as though there are enough difficulties in the economy at the moment to spend time on what they may feel is just another 'health scare', but that is a very dangerous position to take.  With the economy under such pressure, further disruption could well be the final push that takes unprepared organisations over the edge.

The old adage of "a stitch in time ..." has never been more true and should the projections for the Autumn be realised you'll certainly appreciate the effort made.   

So the first task has to be to choose to act and act now or else we (and you) risk losing  the window of opportunity we have ahead of the traditional Flu Season to mitigate the potential effects to us all. 

There is a lot to consider and space is limited, but you are not alone and we can help.  If you would like to know more please contact us at www.continuityforum.org.

The Continuity Forum is holding our third Pandemic Summit on 26th June please contact us directly for more information. 

 

New plan for London's Pandemic Planning

New plan for London's Pandemic Planning

As organisations planning falters...

The Government Office for London's Resilience Team has just released the updated plan to detailing its plans to address the threat of Pandemic. This update follows enhanced guidance from the Department of Health and the Cabinet Office.

Securing premises: advice to keep your business safe

In recent years an increasing chunk of companies’ corporate security or business continuity budget has been spent on maintaining back-up sites where data can be stored or from which the business could be run in an emergency.

However, security consultants point out that risk management begins at home with measures to safeguard company headquarters, branches, factories and greenfield sites.

For new buildings, once the nature of the risks to the business has been assessed, this means careful planning of the layout and configuration of the site or office and security professionals should be part of the process.

7/7 Phone network performance examined and explained

 

Following the explosions on the morning of 7th July hundreds of thousands of people used their mobile phones to contact their families and work colleagues. Mobile networks are designed to cope with significant peaks in volumes of calls, and a safety margin is also built in so that even major events do not overload the system. Call volumes on 7th July far exceeded normal levels, and the O2 network alone carried 67% more voice traffic in central London than normal, while text message volumes increased by 20% on the day across the whole country.

The O2 network was not damaged by the attacks and we took steps to manage the demand. The large number of calls did mean that there was network congestion in parts of London, but most customers were able to make calls after several attempts.

Risk Scenarios ... how well are we prepared?

 

The Cold War may be history, but with threats ranging from global warming to terror cells, Britain's emergency planners are now struggling to prepare for a greater range of potential disasters than ever before.

Since the outcry after the poorest citizens of New Orleans were left marooned in their ruined city in the wake of Hurricane Katrina, emergency planning has been thrown " harshly " into the spotlight.

BCM for Beginners cont'd...

How to develop a business continuity plan

Who is responsible for business continuity management?

BCM has grown out of the need to provide IT disaster recovery. While this has focused on IT systems and networks, business continuity management is broader in its scope and encompasses crisis management combined with business, as well as IT resumption. Drilling down from this top-level it will involve identifying key business functions and revenue sources as well as the need to maintain the reputation of the organization as whole.

Together, these factors make business continuity management the shared responsibility of an organization’s entire senior management, from the chief executive through to the line-of business managers who are responsible for crucial business processes. Although IT remains central to the business continuity process, IT management alone cannot determine which processes are critical to the business and how much the company should pay to protect those resources.

It is important that business continuity management has the full support of an organization’s most senior committee to ensure the initiative does not stall. One member of this committee should be made the overall sponsor with responsibility for initiating BCM across the entire organization. With this top level support it should be possible for the undoubted difficulties that will be faced in putting together the plan to be overcome.

An overall BCM co-ordinator should then be appointed to report directly to the senior committee member responsible. This person is ideally someone who understands the business structures and people. They require good programme management, communication and interpersonal skills and need to be a good team leader. In addition a budget must be allocated for the initial stages of the process. For larger organizations matrix team management is the best method to approach business continuity management. The team will be drawn from existing managers within key divisions and or locations.

It is expected that they will not be full time members of the team but will need to dedicate appropriate time to the BCM process.

Business Continuity Management principles

The Business Continuity Institute recommends that the following principles are utilized when devising and implementing a BCM plan:

· BCM is an integral part of corporate governance
· BCM activities must match, focus upon and directly support the business strategy and goals of the organization
· BCM must provide organizational resilience to optimize product and service availability
· BCM must optimize cost efficiencies
· BCM is a business management process that is undertaken because it adds value rather than because of governance or regulatory considerations * All BCM strategies, plans and solutions must be business owned and driven

Bearing these in mind it becomes easier to develop your BCM plan.

Overview of the BCM life-cycle

There are five steps that should be followed when developing a business continuity management plan:

1. Analyze your business
2. Assess the risks
3. Develop your strategy
4. Develop your plan
5. Rehearse the plan

Due to the rapidly changing nature of business conditions the process is not static, but cyclical.

Once you have worked through and completed step 5 it is necessary to go back to step 1 and review the whole process again to ensure that any external or internal changes have not made elements of the plan redundant.

Analyze your business

This is the first stage of the business continuity management life-cycle as it is necessary to understand at the outset exactly where your business is vulnerable. You will need the fullest possible understanding of the important processes inside your organization and between you and your customers and suppliers.

This stage of the process will also help to gain the involvement and understanding of other people and departments and will also help identify if any parts of the organization already have plans or procedures in-place to deal with an unplanned event.

Assess the risks

There are two aspects to every risk to your organization:
1. How likely is the risk to happen?
2. What effect will it have on your organization?

Business continuity management will provide a framework for assessing the impact of each one. Many organizations usually define their assessment in terms of cost. For example:

· How much could you afford to lose if an emergency prevented you from doing business for days, weeks or months?

· How would suppliers, customers and potential customers react if your business received adverse publicity because you were unprepared for an incident?

There are three ways to work with the information you have gathered to provide an assessment of the risks.

1. Ask ‘what if?’ questions.
2. Ask what the worst-case scenario is.
3. Ask what functions and people are essential, and when.

MORE >>>

 


If you would like to know more about how your organisation can benefit from working with us, please email us HERE!

 

Economic Consequences of a Pandemic .....

Active analysis can be subdivided into three categories of possible threats/occurrences that could befall an organization. Dr. Ian Mitroff refers to the three categories as Natural Accidents, Normal Accidents and Abnormal Accidents. I have renamed them and to differentiate the three aspects of each. That is, the threat, the actual occurrence and the consequence of the occurrence.

Economic Consequences of a Pandemic

At the time of this writing H5N1, known as Avian Flu, is spreading throughout Asia with one of the highest mortality rates of any flu virus of the previous century. Even the Influenza (Spanish Flu) of 1918 did not have as high a morbidity and mortality rate as H5N1 (Avian Flu). We are seeing almost daily some revelation from the World Health Organization (WHO) or Centers for Disease Control (CDC) or the popular media.

BCM & SME's getting started

The terrorist attacks of September 11th should have been a wake call for the business community in Britain and across the world. However, nearly four years on, national surveys show nearly 49% of all UK businesses lack plans to keep the wheels turning if the unthinkable happens. Astonishingly, that number has only improved by 5% since the 9/11 attacks. Where there are plans – mostly among the larger and more regulated businesses – one fifth have never been tested.

Why has business been so slow to get its act together?

We watched as the 9/11 attacks unfurled, we watched the Madrid Bombings, we watched, as there were targeted attacks on business overseas. But an attitude of “it could never happen to us” permeated the wider business community.

Defending a brand: What's in a name? A crisis will tell

While the web has reduced from days to minutes the time in which a corporate reputation can be attacked on a global scale, companies trying to protect their brands must also face the fact that the public remains cynical about the motives of organisations in both state and private sectors.

Business starts Planning for Avian Flu effects

The most obvious commercial victim of bird flu - imagined or real - is the multi-million pound poultry industry, which includes egg producers and broiler breeders, as well as those bringing the poultry to market; ranging from supermarkets to restaurants.

For the moment, this sector's most immediate concern is that talk of a possible pandemic will spook consumers.

Companies struggle to find balance for terrorism insurance

Hundreds of actors found themselves hired for an unusual performance earlier this month - faking illness. The actors, part of the USA's largest ever terrorism drill, played people suffering from the effects of a biological agent.

Security by the numbers

The issue of security continues to be a major industry topic and understandably, especially as this is is one area of BCM that tends to have the highest profile . Many of the issues are closely linked to the increasing complexity and interoperability requirements of applications across a wide variety of Platforms. These problems are also compounded by the generally poor practices of many IT departments and internal users who continue to be a very weak link in the security chain.

City streets flooded after deluge

Torrential rain and hail brought flash floods to Leeds on Tuesday - sparking hundreds of calls to the fire brigade.

For when the Tide is high ... Flood and water damage management

Water and Flood damage management


Water damage is often believed to be a static effect of primary damage where the visual effects of contact and adsorption are a measure of damage. The reality is that water damage is dynamic, continuingly expanding it’s effects and is capable of developing far reaching secondary damage in minutes or days after the initial effects.

Bio amplification, mould, corrosion, swelling and distortion are typical effects of uncontrolled water escape or flooding. These effects can result in health risks, structural and contents damage and possible devaluation of property.

Syndicate content

Business Continuity Forum creating Resilince and security

Creating Continuity... Building Resilience...