Bci NeBe conf 2017 practical - on track with bcm and resilience at pro rail v2 - jan pierre van eekelen sd

1. BCM with ProRail
Jean-Pierre van Eekelen
Corporate Business Continuity Officer

2. Contents presentation
• Introduction ProRail, relevance BCM
• General approach BCM
– Policy, Governance, Programme
• Deepdive “BCM by design”.
• Conclusions

3. Introduction ProRail

4. Introduction ProRail

5. Introduction ProRail

6. Relevance of BCM for rail infrastructure
• Rail system = vulnerable
– Physical open (level crossings, bridges, stations …)
– Digital (ICT systems, internet)
– Critical processes (staff)
• Discontinuity => major social impact
– 1.1 M passengers a day
– Main freight corridor Rotterdam - Europe

7. General approach setup BCM
• Policy
• Governance
• Business Impact Analysis & Risk Assessments
• BCM Programme

8. Policy
• Major output ProRail
=> infrastructure for train movements
safe, accurate speed, accurate capacity etc.
• Main BCM discontinuity criteria:
=> 1000 trains cancelled
– main corridor blocked 1 day
– medium station area shut down 1 day
– Utrecht CS shut down 3 hours !

9. Governance BCM
BCM Committee
(Exec. Comm.)
Asset-
management
ICT Traffic Control Facilities
Project-
management
BCM Officer

10. Business Impact Analysis

11. BIA: presentation => awareness
0
1
10
100
1,000
1 10 100 1,000 10,000 100,000
Interval ( in jaren)
Aantal opgeheven treinen (worst case)
Algemene BCM risicomatrix 2014 v0.4 (totaal overzicht)

12. BCM Programme
1 Prevention
– Prevent new vulnerabilities
2 Repression
– Adjust existing systems, objects, processes
3 Recovery
– Continuity plans & facilities, training & exercises

13. BCM Programme: prevention
1 Prevention
=> Deepdive “BCM by design”
2 Repression
3 Recovery

14. BCM Programme: repression
1 Prevention
2 Repression
– Redundancy networks & ICT
– Redundancy and/or back up power supply
– Critical systems in datacenters
– Modification contracts external suppliers
– Security measures
3 Recovery

15. BCM Programme: recovery
1 Prevention
2 Repression
3 Recovery
– Crisis management organisation
– Facilities
– Processes

16. BCM Programme: recovery
1 Prevention
2 Repression
3 Recovery
Crisis management organisation 24 x 7
– Technical recovery (infrastructuur, ICT, rolling stock)
– Logistic recovery (passengers, cargo)
– Communication & media
– Close cooperation chain: ProRail – operators (NS)
emergency services (security, fire, cyber...)

17. BCM Programme: recovery
1 Prevention
2 Repression
3 Recovery
Facilities
– Fall back locations 13 Traffic Control posts & Central
Operational Control Centre
– Fall back locations offices
– Emergency power supply
– Data storage
– etc

18. BCM Programme: recovery
1 Prevention
2 Repression
3 Recovery
Process:
– Continuity Plans (evacuation, blocked corridor, power
failure, extreme weather, security issues….)
– Testing, training & exercises
• fall back traffic control Post & OCCR
• Extreme weather procedures
• Emergency communication facilities, etc….

19. BCM Programme: prevention: “BCM by design”.
• Goal: reduce existing vulnerabilities (SPOF’s)
and prevent new ones, in every renewal of:
– Systems (ICT, controlsystems, power supply, tunnel control, ….)
– Objects (swiches, bridges, buildings,….)
– Processes (traffic control, maintenance, construction, security…)
– External dependencies (power, communications, products…)
– …

20. BCM Programme: prevention: BCM by design”.
System
development
Application
/design
maintenance
use
Prevention: BCM by design
repression
recovery
BCM requirements

21. BCM Prgm: prevention: “BCM by design”: case 1
Modernisation of control systems
• Control swiches, signals, level crossings & all train
movements
• No controlsystem
=> no train service

22. BCM Prgm: prevention: “BCM by design”: case 1
Modernisation of control systems
• Design:
Redundant vital equipment & networks
Networks separated technical & control
Restricted access (physical and digital)
Power back up
Fall back modes technical and operational
Specialised technical recovery teams 24x7
Testing & exercising facilities

23. BCM Prgm: prevention: “BCM by design”: case 2
Reconstruction main yard (station area)

24. BCM Prgm: prevention: “BCM by design”: e.g. 2
Reconstruction main yard (station area)
• Traditional design train control, ICT, power supply

25. BCM Prgm: prevention: “BCM by design”: e.g. 2
Reconstruction main yard (station area)
• Alternative design: corridor-wise (disaster tolerant)

26. BCM Prgm: prevention: “BCM by design”: e.g. 2
Reconstruction main yard (station area)
Alternative design: corridor-wise:
• Impact disaster reduced & recovery feasible
– Train traffic partly unaffected
– Affected traffic: partially rerouted by train
– Necessary fall back to bus/taxi: limited => feasible.
• Optimal design: cooperation with operators.
• Impact costs limited if included in early design stage.

27. BCM with ProRail: Conclusions
• Full scale approach, from short term (recovery) to
long term (prevention)
• Deep involvement key players (board, management
& specialists)
• Pragmatic and close to operations
• Maximum embedding of BCM in regular processes
(development, designing, maintenance, training,
exercising)

28. THANK YOU

29. This presentation was delivered at a
BCI event
To find out more about upcoming
events please visit our website