This document discusses lessons learned from business continuity planning for pandemics. It provides an overview of the business continuity cycle and understanding the context of a potential pandemic. It suggests either developing a separate pandemic plan or incorporating pandemics into an all-hazards plan. Finally, it stresses the importance of exercises to improve preparedness, including reviewing business impact analyses and supply chain risks.
Business continuity lessons from pandemic planning
1. It’s a bird; it’s a plane!
No, it’s a threat & an opportunity
Lesson learned in business
continuity planning for a pandemic
Christine F Miller
Consultant
Business Continuity Manager
Helping build business resilience
1
2. Overview
Business Continuity (BC) cycle
Some lessons
learnt in BC for
pandemic
preparedness
& response
What next?
Helping build business resilience
2
4. 1) Understanding the
organisation/context
What is happening with
pandemic influenza?
Helping build business resilience
5. Some International sources
World Health Organisation (WHO)
http://www.who.int/csr/disease/avian_influenza/en/
US Centers for Disease Control &
Prevention (CDC) http://www.cdc.gov/H1N1FLU/
Nature (UK) http://www.nature.com/
& Science (US) http://www.sciencemag.org/
Regina Phelps, EMS Solutions Inc
http://emssolutionsinc.wordpress.com
Helping build business resilience
7. Some Australian sources
Australian Government Dept of Health &
Ageing
http://www.flupandemic.gov.au/internet/panflu/publishing.nsf
Helping build business resilience
8. 2) Determining Business
Continuity Management (BCM)
options
A separate pandemic BCP or
or an all threats, all hazards BCP
Helping build business resilience
8
9. Courtesy of Nick from Nearing Zero (NZ) http://www.nearingzero.net/250dpi/nz355.jpg
9
10. 3) Developing & implementing
Business Continuity Management
(BCM) response
‘End to end’ Business Impact Analyses
(BIAs)
Supply chain – 3rd party providers,
single or many points of failure
Review Human Resources &
Communications Recovery Procedures
Helping build business resilience 10
11. Integration of BIA & e-business DRP
Business As Usual (BAU)
When resuming normal
MTPDs business beware of
resumption spikes
COULD DO’s
Disaster Recovery Plan (DRP)
Disaster Recovery Plan (DRP)
Information & Communications Technology (ICT)
Information & Communications Technology (ICT)
30+ days RTOs
Business Impact Analysis (BIA)
SHOULD DO’s SHOULD HAVE’s
7+ days
MUST DO’s MUST HAVE’s
<7 days
REALLY MUST DO’s
or Mission Critical Activities REALLY MUST HAVE’s
(MCAs) i.e. core business
with little or no tolerance of
downtime
INCIDENT/CRISIS
a non-routine business disruption
20. Any questions or comments?
All the best in your efforts to increase
business/organisation’s resilience to pandemic
as one of the many threats & hazards to manage
Chris Miller
b4crisis@grapevine.net.au
0416 113 250
Helping build business resilience