Implementing Business Continuity within an Airline Charlotte Hems Business Continuity Management & Resilience Services CE Hems Limited

1. 1
Continuity and Resilience (CORE)
ISO 22301 BCM Consulting Firm
Presentations by speakers at the
5th Middle East Business & IT Resilience Summit
20 – 21 April 2016 – Palace Hotel DownTown Dubai
Our Contact Details:
INDIA UAE
Continuity and Resilience
Level 15,Eros Corporate Tower
Nehru Place ,New Delhi-110019
Tel: +91 11 41055534/ +91 11 41613033
Fax: ++91 11 41055535
Email: neha@continuityandresilience.com
Continuity and Resilience
P. O. Box 127557
Abu Dhabi, United Arab Emirates
Mobile:+971 50 8460530
Tel: +971 2 8152831
Fax: +971 2 8152888
Email: info@continuityandresilience.com
Please write to us if you would like to get in touch with the Speaker

2. Implementing Business
Continuity within an Airline
5th Middle East Business Continuity and IT Resilience Summit, Dubai
Charlotte Hems, AMBCI
Thursday 21st April 2016
2

3. Case Study
Who?
• Leading Middle East national airline
What?
• Deliver a comprehensive package of activity to enhance company
resilience by development and delivery of a Business Continuity
knowledge transfer project.
3

4. Project Brief
To design, deliver and test a Business Continuity knowledge transfer
programme for a leading Middle East national airline
• Aligned to international BC standards ISO22301:2012
• Complement the organisation’s existing Emergency Management Strategy
• To support the 5 key business priorities:
1. Operate a safe airline
2. Ensure this was the first choice airline for the region
3. Increase business profit and reduce cost
4. Prepare for airline growth and expansion
5. Promote regional tourism
4

5. Approach
Developing a Business Continuity Management System via a two-phased approach:
Phase 1 – Gap analysis
• Management buy-in
• Documentation review
• Key stakeholders
• Critical activities
• Approach/improvements
• Phase 2 - Business Continuity Management System (BCMS) implementation
• Governance
• Training
• Documentation & Testing
• Supply Chain
• Identification of improvements 5

6. Project Successes
65 airline staff members trained in global BC standards
Developed and implemented accepted practice project governance arrangements for BCM
Creation and acceptance of a BC Policy and BC Manual
Formation of a project steering group with the recommendation that this group evolves into the company
business continuity working group
Raised management awareness of BC as a core function of management of a commercial airline
Designed, delivered and provided recommendations from a series of table top exercises, focused on
validating nascent arrangements
Developed a BC culture
6

7. Challenges and Lessons Learnt
• Attitudes
• Management
Challenges
• Training
• Agile approach
Lessons
Learnt
7

8. Airline Business Continuity – How does this
differ to other industries?
• BCM is BCM with one major exception……flight safety
• Integral part of the transportation system
• Part of critical national infrastructure, so there are wider impacts than commercial
• Airlines are keen to improve customer confidence - BC enables that
• Consideration given to regional and global impacts of disruption
• Prolonged airport disruptions can result in the loss of critical functions
• Many airlines have emergency plans but not necessarily BC plans
• Complex and multiple stakeholders
• Aggressive recovery time objectives & maximum tolerable period of disruption timeframes
• Airline people are acutely aware of the media focus on them
8

9. Summary
• What next? Continuity of business continuity
• Culture
• BC isn’t just about pieces of paper and manuals – develop your people
9

10. Q&A
10

11. Appendices
11

12. Appendix 1: BCM Standards & Good Practice
BCM Standards and Good Practice
Title Category Impact on Airline BCMS
ISO 22301:2012, Societal security – Business continuity management systems –
Requirements
International Standard Informs and is accepted practice in some aviation organisations/carriers.
BCM Standard and Guide, AE/HSC/NCEMA 7000: 2012, Version 1, National Crisis and
Emergency Authority (NCEMA) UAE
UAE National BCM Standard Regional/neighbouring country standard – could inform accepted practice
Business Continuity Institute (BCI) Good Practice Guidelines 2013, Global Edition Good Practice Guidance on accepted practice, BCI approved training based on this material
ISO 27001 - Information Security Management International Standard Includes requirement of continuity, availability and currency of information. BCM
planning adds requirement data to inform information security arrangements
UK CAA CAP 1244 2014 Passenger welfare at times of major disruption – guidance for UK
airports
Good Practice Due to collaborative nature of aviation this document is also relevant to airlines
ISO 28000:2007, Specification for security management systems for the supply chain International Standard Supply chain standard focusing on security issues
BS EN ISO 9001:2008, Quality management systems – Requirements International Standard Quality Management System standard, providing information on ensuring
continuous improvement applicable to BCM
BSI PD 25222:2011, Business continuity management – Guidance on supply chain
continuity
Standard Guidance on supply chain continuity based upon good practice
ISO/TS 22318:2015(E), Societal security – Business Continuity management systems –
Guidelines for supply chain continuity
International Standard Further guidance specific to supply chain issues
12

13. Appendix 2: The BCM Lifecycle
13

14. 14
Continuity and Resilience (CORE)
ISO 22301 BCM Consulting Firm
Presentations by speakers at the
5th Middle East Business & IT Resilience Summit
20 – 21 April 2016 – Palace Hotel DownTown Dubai
Our Contact Details:
INDIA UAE
Continuity and Resilience
Level 15,Eros Corporate Tower
Nehru Place ,New Delhi-110019
Tel: +91 11 41055534/ +91 11 41613033
Fax: ++91 11 41055535
Email: neha@continuityandresilience.com
Continuity and Resilience
P. O. Box 127557
Abu Dhabi, United Arab Emirates
Mobile:+971 50 8460530
Tel: +971 2 8152831
Fax: +971 2 8152888
Email: info@continuityandresilience.com
Please write to us if you would like to get in touch with the Speaker