London Metropolitan University

1
London Metropolitan University

• Business Continuity Management Seminar Friday
  June 27th 2008
• The Henry Thomas Room
• LUNCH

2
Business Continuity Management Seminar Friday
27th June 2008

• Introduction to London Metropolitan University
  Business Continuity Plan (John Friary)
• The New Standard for Business Continuity
  Management BS25999 (John Sharp FBCI(Hons) FCMI
  MCIM)
• The Next Steps Review,Departmental Plans and
  Desk Top Exercise(John Friary)

3
Business Continuity

• Major Incident Planning
• Disaster Planning
• Emergency Planning
• Disaster Recovery and Business Continuity Planning

4
City University Fire May 2001
5
(No Transcript)
6
(No Transcript)
7
STUDENTS UNION END OF TERM PARTY FLYER !
8
GABLE WALL
THE NEXT MORNING
9
LATER THAT DAY GABLE WALL COLLAPSED
10
(No Transcript)
11
Southampton University Fire October 2005
12
Southampton University Fire October 2005
13
Westminster University Fire July 2007
14
Delft University Fire May 2008
15
Delft University Fire May 2008
16
Delft University Fire May 2008
17
London Metropolitan University Arcade Hall of
Residence Fire 2004
18
London Metropolitan University Commercial Road
Fire 25th June 2008 Scaffolding ablaze
19
London Metropolitan University Commercial Road
Fire 25th June 2008 Scaffolding ablaze
20
London Metropolitan University Commercial Road
Fire 25th June 2008 Fire Fighters put out fire
21
London Metropolitan University Commercial Road
Fire 25th June 2008 -Fire Fighters put out fire
22
London Metropolitan University Commercial Road
Fire 25th June 2008 4 Fire Engines, Police
and ambulance arrive on scene
23
London Metropolitan University Commercial Road
Fire 25th June 2008 Fire put out
24
London Metropolitan University Commercial Road
Fire 25th June 2008 Fire Investigations Team
arrive
25
London Metropolitan University Commercial Road
Fire 25th June 2008 Building closed!
26
Why Plan? Unacceptable
27
Why Plan? Objective
28
Expecting the Unexpected

• Business Continuity in an uncertain world
  (BCI/ACPO/London First 2003)
• Key Steps in developing business continuity
  management
• Analyse your business
• Assess the risks
• Develop your strategy
• Develop your plan
• Rehearse your plan

29
Business Continuity

• London Metropolitan University is a member of the
  HIGHER EDUCATION BUSINESS CONTINUITY NETWORK
  (HEBCoN)
• Attended first National Conference in University
  of Birmingham April 2008
• Attended National meeting on Pandemic Influenza
  May 2008
• Attends HEBCoN London Regional Group meetings

30
London Metropolitan University

• Estates Emergency Response Plan and Business
  Continuity Plan
• Management framework for responding to a major
  incident

31
Estates Emergency Response Plan

• The Emergency Response Plan is a management tool
  to aid the Estates Department in the overall
  management of the Universitys first response to
  an emergency that impacts on the operational use
  of its buildings. All other business continuity
  matters are subordinate to the Emergency Response
  Team (ERT) until the initial emergency period has
  passed.
• The plan focuses on the emergency response to
  incidents that occur during normal and out of
  normal working hours of the University. Normal
  hours are defined as 0900 1700hrs Monday to
  Friday. Out of ours defined as 1700 0900hrs 7
  days a week including national holidays.

32
Business Continuity Plan

• The Business Continuity Plan establishes an
  Emergency Committee(ECOM) that manages response
  strategies and allocates resources to ensure a
  major incident has minimal impact on the
  University's business operation.
•  
• The emergency responses are guided by London
  Metropolitan University's overriding emergency
  goals of
•  
•         Protecting life
•         Securing the critical infrastructure and
  facilities
•         Resuming the teaching and research
  program

33
Scope of the plan

• The plan will be involved when
• Access to any University building is denied due
  to any incident
• The Universitys business systems are interrupted
• A Health Safety incident affects staff,
  students and/or local community/environment

34
Stages of Activation

• Bronze - No immediate threat to safety and/or
  property but emergency situation has an impact on
  the operation of the building(s) that may
  eventually lead to closure or limited
  occupancy/operation of building. This will be
  activated by a level 1 response (see below).
•  
•  

35
Stages of Activation

•  
•  Level 1 - Business interruption affecting one or
  more departments and/or function an example of
  such an incident could be localised flooding or
  temporary loss of building services. Members of
  the EMT will be placed on alert by the ERT in
  preparedness should the incident escalate.

36
Stages of Activation

•  Silver - Threat to safety and/or property
  identified but not immediate. Has a severe impact
  on the operation of the building(s) that could
  result in closure of the building. Staff to
  evacuate when ordered to do so by ERT or
  police/authorities. This will be activated by a
  level 2 response (see below).
•  

37
Stages of Activation

• Level 2 - Business interruption affecting one or
  more buildings resulting in short term closure of
  the building e.g. up to and including two working
  days and will be overcome by the relevant
  department(s) implementing their own departmental
  emergency response plan supported by the Estates
  Team. An example of such an incident could be
  total loss of building services to one or more
  buildings. Members of the ECOM will be notified.
•  
•  

38
Stages of Activation

•  Gold - Immediate threat to safety and/or
  property requiring controlled evacuation and
  closure of the building(s) ordered either by the
  ERT or the police/authorities. Immediate
  activation of the business continuity plan and
  notification of members of the EMT and resources
  to be mobilised. This will be activated by a
  level 3 response (see below)
•  

39
Stages of Activation

•  Level 3 - Business interruption affecting the
  operation of the University. An incident of this
  nature will invoke immediate activation of the
  University Business Continuity Plan. An example
  of such an incident could be a terrorist attack
  on infrastructure of the University or
  surrounding buildings, gas leak, major fire or
  other infrastructure problems. Members of the
  ECOM will be notified.
•  

40
Key Responsibilities

• Life Preservation
• Media
• Learning resources Library, Media, student IT
  facilities
• Teaching
• Operations
• Recovery

41
Business Continuity Management Seminar Friday
June 27th 2008

• and now over to John!

42
Departmental Plans and Risk assessments

• Some Departmental Plans very detailed
• Systems and Services IT and Libraries (M25)
• For most Departments best approach is based on
  Risk Assessment, ie
• Critical activities
• Critical locations
• Critical dates and times

43
Departmental Emergency Plans

•  
• Department
• Critical function
• Effect on the Department
• Effect on the University
• Recovery timescale
• Contact Information
• Special Instructions

44
QUESTIONS

•  
• John Friary, Health Safety Adviser
• Steve Taylor, Head of Facilities
• Helen Kruczkowska, Insurance Manager
• John Sharpe, Kiln House Associated Ltd.

45
The Next Steps

•  1. Departmental Business Continuity Plans (Risk
  Assessments) to be completed by End of July 2008
• 2. Desk Top Exercise with Emergency Management
  Team (EMR) and Emergency Response Team (ERT)
  September 2008
• 3. Review of Estates Emergency Response Plan and
  Business Continuity Plan in 2009 with Desk Top
  Exercises (Talk Through and Walk Through)