Global Incident Command System ICS Implementation

1
Global Incident Command System (ICS)
Implementation
Randy Till Global Business Continuity Management
2
Agenda

• Business Continuity Program model
• ICS Background
• Team Structure Group Responsibilities
• Commitment and Empowerment
• Team Types and their Responsibilities
• Integration with existing BC Program
• Implementation

3
Business Continuity Program Key Components
Awareness Management

Awareness and Management - Maintain the
appropriate level of knowledge and experience
while providing a structured process to ensure
business continuity needs are addressed
4
ICS Background
5
Business Continuity Components
Today it is all about Emergency Management
BUSINESS CONTINUITY
Emergency Management
Business and Technical Recovery
6
What is Emergency Management?

• Emergency Management is the process of responding
  to and managing any event that impacts the
  company across the globe
• Emergency Response teams in each office
• Standard processes and procedures
• Train and practice
• In 2006, executive management endorsed the use of
  a new Emergency Management Methodology called the
  Incident Command System (ICS)

7
Why Incident Command System (ICS)?

• Global events (e.g. Pandemic)
• Promote emergency management plan
• Management awareness
• Reputation and shareholder value

8
What is Incident Command System (ICS)?
ICS is a well organized team approach for
managing critical incidents

• It is modular and scalable only use teams that
  you need
• Provides for consistent and reliable
  communications using common terminology
• Ensures coordinated response among teams and
  locations (horizontal vertical)
• Especially helpful for companies with multiple
  locations
• Proven practice used by law enforcement,
  government, and the military

9
Incident Command System (ICS) History

• ICS was developed in response to a series of
  fires in Southern California in the early 1970s
• - Created by an interagency called FIRESCOPE.

10
Incident Command System (ICS) is Required

• Compliance with US Presidential Directive (PD 5)
• Mandatory for all US federal agencies for federal
  funding
• US State governments had to migrate to ICS by
  January 2006
• Mandated for all hazardous material incidents
• Required for all US law enforcement, government,
  and the military
• Prevailing thought is that ICS will be required
  for Financial Institutions in near future

11
Team Structure and Group Responsibilities
12
ICS Organizational Structure
Command (manages)
Operations (does)
Logistics (care/gets)
Planning Intelligence (plans)
Financial (pays/records)
13
CommandResponsibilities

• A Incident Commander is responsible for overall
  command of the team and the incident
• Sets priorities and objectives
• In charge of all ICS functions
• Directs, controls, and orders resources
• Resolves conflict
• Conduct Initial Assessment with Team
• Facilitates Action planning
• Interfaces with
• Executive Management

Command (manages)
Lead by Incident Commander
14
Operations GroupResponsibilities

• Responsible for all tactical operations necessary
  to carry out the plan (response and restoration)
• Involves the key backbone aspects of the
  business
• Facilities, Security, IT, Telecom
• Initial damage inspection
• Establish interface with first responders
• Establish situation control
• Develop situation status report
• Front line resolve the issues
• Restores business back tobusiness-as-usual

Operations (does)
Lead by a Group Leader
15
Planning Intelligence GroupResponsibilities

• Responsible for the collection, evaluation, and
  dissemination of information concerning incident
  development
• Develop and maintain intelligence plans
• Crisis communications, business recovery and
  technical recovery plans
• Take situation reports and evaluate information
• Apply intelligence to the situation and action
  plans
• Addresses communication needs and legal aspects
• Recommends actions and next steps based on event
  and plans

Planning Intelligence (plans)
Lead by a Group Leader
16
Logistics GroupResponsibilities

• Responsible for providing the necessary support
  to meet incident needs
• All of the human aspects of the event
• Well being of employees
• Acquires resource to support the incident
• Addresses services, materials and vendor
  resources
• Provides administrative support/message center
• Provides for the care of personnel and
  acquisition of resources

Logistics (care/gets)
Lead by a Group Leader
17
Financial GroupResponsibilities

• Responsible for monitoring and documenting all
  costs
• Properly records all expenditures
• Payroll, emergency purchase orders, cash,
  purchasing cards and other critical payment
  issues
• Works with insurance companies regarding
  reimbursement and workers compensation insurance
• Provides financial support and funding related to
  an event

Financial (pays/records)
Lead by a Group Leader

18
Functional Areas within each Group

• Operations Group
• Facilities
• Security
• Technology/Operations
• Information Security

Planning Intelligence Group Key Lines of
Business Legal Investor Relations Communications T
echnical Recovery Business Recovery
Logistics Group HR Business Partners Benefits Trav
el Meetings Purchasing
Financial Group Finance Insurance Payroll Accounts
Payable
19
Commitment and Empowerment
20
ICS Team MemberCommitment and Empowerment
Effective emergency response is dependent on
qualified staff being trained to execute with
proper authority

• ICS team members must be
• Trained to clearly understand their roles and
  responsibilities
• Committed to fulfilling their responsibility
• Engaged by participating in meetings and
  exercises
• Empowered to perform their roles in accordance
  with practiced guidelines

21
Team Types and Their Responsibilities
22
ICS Team Types

• CIRT Corporate Incident Response Team
• Corporate Headquarters ONLY
• LIRT Local Incident Response Team
• Regional Headquarters and Select Offices
• IAT Initial Assessment Team
• Team for Regional Offices and sub-team of the
  CIRT/LIRT

23
IAT Members
24
Initial Assessment Team (IAT)Responsibilities

• Assembles at Rally Point for Building Evacuations
• Determine initial impacts to life safety,
  building, and operations
• Assesses the event and determines the Incident
  Level
• Manages the events locally
• Communicate status to their appropriate CIRT /
  LIRT Incident Commander
• For offices with a CIRT or LIRT, determine if
  CIRT / LIRT should be activated and to what
  degree
• For offices with a IAT only, continue to address
  the incident until conclusion

25
CIRT Members
26
Corporate Incident Response Team
(CIRT)Responsibilities

• Manages the events locally impacting the
  Corporate Headquarters
• Supports all global incidents with the potential
  to impact the corporation from an enterprise
  business perspective
• Performs action planning and sets the operational
  period
• Interfaces with executive management
• Declares disaster for recovery activation locally
  and if necessary, globally

27
LIRT Members
28
Local Incident Response Team (LIRT)Responsibiliti
es

• Manages the events locally
• Supports regional offices with an IAT only
• Communicates up to Corporate HQs or if
  applicable, Regional HQs
• Performs action planning and sets the operational
  period
• Interfaces with local regional Executive
  Management
• Declares disaster for recovery activation locally
  and at regional offices

29
Breadth of the Program
30
Initial Assessment Team (IAT) for Regional
offices example
Corporate HQ CIRT
Asia Pacific LIRT
31
ICS processes and supporting tools

• Initial Assessment Team (IAT) process
• Initial Assessment
• Incident matrix
• LIRT/CIRT process
• Functional group checklists
• Action planning
• ICS Flow of Escalation
• Cross Office communications
• Command Center Operations
• Notification tool

32
Integration with existing program
33
Integration with existing Business Continuity
Program

• Business Recovery and Technical Recovery
  activation
• Planning Intelligence on CIRT/LIRT
• Problem Resolution Team (PRT) process
• Business Recovery Plan
• Activation Flow
• Pandemic planning scenario
• Business Continuity manuals

34
Implementation
35
Implementing ICS at each office

• Awareness sessions with key management
• Awareness sessions with functional group leaders
• Role specific training commitment and
  participation
• Initial Assessment Team (IAT)
• Functional Groups (Operations, PI, Logistics,
  Finance)
• LIRT/CIRT exercises
• Notification tests
• ICS Ready

36
Examples of training and exercises
EVENT

• The roof of a building wing caves in
• IAT
• LIRT action planning
• LIRT functional groups
• Status update to LIRT Incident Commander
• Pandemic
• Chemical spill

EVENT
EVENT
37
Lessons learned

• Travelers
• Delegation
• Global representation/interaction
• Management training/buy-in
• Team member empowerment
• Identification of gaps/areas of improvement

38
ICS Benefits

• ICS buy-in and enterprise wide endorsement
• Global response and management of events
• Strengthen partnerships and coordination
• Gained management participation and commitment
• Streamlined processes, integrated actions and
  solidified comprehension

39
Thank you.