Welcome Councillor Michael Braley

‘ Helping you deliver your promises’ The Business Case for Resilience Planning ‘ Helping you deliver your promises’ The Business Case for Resilience Planning Charlie Heritage Emergency Planning Officer WCC & Mike Mikkelsen FBCI MCMA Tel: +44 (0) Mob: +44 (0)

Why be prepared? Charlie Heritage.

‘A consideration, - --it is going to happen sometime – a fact !!’ And when --it happens, will you be really prepared?

An Overview of Resilience Planning n Origins and History u Where is Resilience Planning Today? u Where is Resilience Planning Going?

Origins of Resilience Planning n Emergency Planning – Community Based n Disaster Recovery u Technology - Main-Frame Computers u IT Buildings u Recovery Times n Mmmm…….Deep Thinks!! What about your People ? n And so, Business Continuity Management as a part of Resilience Planning Evolved!!

Drivers/Incentives! for the deployment of Resilience Planning n Commercial Companies are being committed by Corporate Governance Obligations n All UK Government Departments are charged with creating a Resilience Planning capability – Civil Contingencies Act n Customer/Clients are applying pressure/expecting ‘always available’ services n Resilience Planning is able to compliment best business practice

Operational Risk Management – supporting Resilience Planning n Issues directly affecting operations n Primary Considerations: u Emergency Management u HR and employment u Business Continuity Management u Security u Health & Safety and environmental u Behavioural and culture u Property (tangible and intangible assets) u Fleet n Preparedness,Training & Awareness

- Resilience Planning - Business Continuity Management Business Continuity Management EMERGENCY MANAGEMENT IT DISASTER RECOVERY FACILITIES MANAGEMENT HUMAN RESOURCES SECURITY CRISIS COMMUNICATIONS & PR KNOWLEDGE MANAGEMENT SUPPLY CHAIN MANAGEMENT QUALITY MANAGEMENT HEATH & SAFETY RISK MANAGEMENT ENVIRONMENTAL MANAGEMENT

Business Continuity Management The BCI Definition : “Business Continuity Management is a holistic management process that identifies potential impacts that threaten an organisation and provides a framework for building resilience and the capability for an effective response that safeguards the interests of its key stakeholders, reputation, brand and value creating activities”.

My Definition of Resilience Planning by BCM ‘Appropriate Cost Justified Business Housekeeping with Exceptional Management Controls for Exceptional Circumstances’

Quote: “Planning is an unnatural process; it is much more fun to do something. And the nicest thing about not planning is that failure comes as a complete surprise rather than being preceded by a period of worry and depression.” Sir John Harvey-Jones

And Finally - ‘Does everyone really understand?

Protecting your Business Protecting your Business Mike Mikkelsen

The Development of BCM Standards n BS BCM Code of Practice’ n BS – BCM Specification n B C I 's Good Practice Guide 2008 Rev 2 u Practical methodology n BS ICT SC n Other Global standards - ITIL, Spring.... n And there’s More!!!!Why?

Lets go Simple ! The Business Continuity Management Cycle P

Resilience and BC analogy: Car journey

‘A Quote from the Forces’ ‘Take a Risk but always have a plan B’

Understanding Understanding your Business n Defining Priority Products, Services & Underpinning Processes by: u Business Impact Analysis u Risk Assessment n Simple Terms – What do you do?

Business Impact - Resource & Dependencies. n Staff and Managers; n I C Technologies /Software applications; n Telecommunications; n Supporting Systems; n Data (all formats and media); n Facilities (workshop – stores – you know!) n Office& Specialist Equipment n Constraints (contractual or otherwise). n AND TIMINGS !!!

Outcomes of Understanding your Business by Impact. n Prioritised recovery profile of Product, Services & Processes n Defined and documented risk (business impact) appetite n Documented schedule of priorities for BCM protection and the Ro I in the programme n A resource recovery profile n A Documented profile of your Business

Resilience & BCM Risk Matrix Impact Control Accept Prevent Plan High Probability High Low

Developing Resilience and BC Strategies n Organisational Strategy n Process Strategy n Recovery Strategy

Developing and Implementing Responses n Resilience & Business Continuity Plans n Business Recovery Solutions & Plans n Incident Management Plans

Initiating an Incident Response n Location n Tactical Strategic

Following the Plan n People Safety - ‘paramount’ n Asset Register and Identification n Implications and Impact n Communications

Image & Reputation Protection Image & Reputation Protection n Stakeholders n Your People n Regulators n Partners n Suppliers

Incident Communications n Stakeholders n Your People n Customers n Partners n Suppliers Note: Do not depend on mobile phones !!

Building & Embedding a Resilient Company Culture n Awareness and Understanding n Education & Culture – The H.W.W.W.W. n Training Programme to create resilience

Resilience & BCM Awareness n Create Resilience and BCM Awareness Plans n Components; u Roles and Responsibilities u Media u Currency and Updates u Small is beautiful n Pictures paint a thousand words! n And share them with your clients and suppliers – don’t be shy!

Keeping the Resilience Current n Exercising n Maintenance n Audit Managing Change – its essential !!

Business Resilience Management n Programme Management - Investment Profiles n Policy - Appropriate/Current Assurance - Outcome of Audit and Reviews

Future Developments of Resilience / BCM n Greater focus on Governance - following further ‘Drains-Up’s! post Global What’sit!

Conclusions n Understanding dependency on critical business components n ‘Prevention is far better than Cure - Create Business resilience - in depth n Ensure currency by maintaining a company Resilience & BCM Programme ‘its not just about plans! n Ensure it is effective and appropriate

Finally - Remember Everyone has put their trust in you – Have you created a Plan ‘B’?

And Finally! ‘That All Folks – Your Observations and Comments Please ’ ‘Can I please thank you for your contribution to the Day’

Sources of Additional Information n BS &2 BCM Standards n BCI BCM Good Practice Guide-lines 2008 n The Redditch Borough Council Web Site n BCI Website - n Civil Contingencies Secretariat : n - BCM Portal n - Training