COVERAGE INTRODUCTIONThai Transport Human Pandemic Planning

May 2009

Summary ….

THE PROPOSED PRODUCT….

1. Develop Internal Plans (recommended)1. GCMP 2. Pandemic Control (Phase 5)3. Pandemic Crisis (Phase 6)

2. Develop External Plans (with Thai Transport management assistance)

1. GCMP2. Pandemic Control (Phase 5 Local)3. Pandemic Introduction Control (Phase 6

International)4. Pandemic Crisis Control (Phase 6 Locally)

3. Training for 2000 Thai Transport staff4. TTX for Thai Transport staff

THE PROPOSED PLANS WILL INCLUDE….

1. Notification and Activation system2. Crisis Organisation Structure3. Role and Responsibilities4. Planning system5. Forms and Templates6. Terms and Definitions7. Training and Testing Plan

And can be prepared within 3-6 months (training and testing rolled out over 2 years)

HOW THE PRODUCT WILL HELP….

Assist Thai Transport to operate if Pandemic hits staff and partners and speed recovery

Assist Thai Transport provide services to citizens if Pandemic hits Thailand Lower disruption to Thai business and society Lower loss to economy

Provide confidence for Thai Transport staff and partners

Provide confidence for Thailand Help Foreign Investment Assist Tourism/Export confidence

Prepare Thai Transport for any other disasters in future

WHY IS IT GOOD FOR THAI TRANSPORT….

Low cost method to protect staff and operations

Low cost method to provide confidence to Thai government and population

Can be adapted to easily make plans for any future disasters such as: Major storms Floods Fires/Bombs/Terrorist Attacks IT Disasters

Can be linked to other department plans Can be used to assist others make plans

REFERENCES…. Risk Management and BCP professional since 1998

Member of the Business Continuity Institute (www.thebci.org) since 2003

International Federation of the Red Cross, Geneva – Created GCMP and Pandemic Plan in 2009

International Federation of the Red Cross, West Central African Zone – Created GCMP and Pandemic Plan in 2008, trained all management and staff

Siam Ocean World, Bangkok – Created GCMP, trained all management staff and conducted TTX’s 2007-2009

Meinhardts Engineering, Bangkok – Created GCMP, trained all management staff and conducted TTX 2008

Siam City Cement, Bangkok – Revised Crisis Management system and conducted TTX 2008

Medibank Private, Melbourne – Created GCMP, IT Disaster Plan, trained all management staff, conducted TTX 2000-2001

Mayne Nickless Express, Melbourne – Created GCMP and Y2K plan, trained all management staff, conducted TTX 1999

ADPC/Red Cross/UN Avian Influenza working group – 2007-2009

Consulted and advised ASEAN Transport ministers on Avian Influenza issues - 2008

Multiple seminars and business forums – BCP, Human Pandemic guest speaker – 2007-2009

Quoted and Interviewed for various publications such as Bangkok Post – 2008-2009

Developed fully integrated and component based BCP system - 2003

WHY COVERAGE…. Only company in Thailand to have provided Human

Pandemic Plans for many different companies across 4 continents

Only consulting company in Thailand to be qualified by the BCP Organisation in the UK

Only company in Thailand to provide a unique integrated component based BCP system to handle any and all risks

Most experienced BCP provider in Thailand Low prices compared to International providers Trained Thai staff Assisting NESDB to create new Thai BCP standards Able to test and audit BCP’s and provide training and

TTX’s as required

Introduction/Background …..

COVERAGE….

Thai company Started operations in 2003 Employed over 100 Thais since starting Profitable Growing 3 main business activities:

Software sales Outsourcing Business Continuity Planning and Risk

Management

BCP AND RISK MANAGEMENT

Prepare customers for Disasters: Bird Flu Bombs Fires IT Failures etc

Conduct Risk Assessments Provide Auditing:

SOX Major Customers:

Red Cross, Hutch, Siam Ocean World, Meinhardts, SCCC, Nestle, DTac

ANDREW …. More than 20 years in IT and Consulting, supporting

industries: Telcos - Telstra, Hutch, Dtac Logistics – Mayne Nickless, Infocomm Software Finance – Medibank Private, Kbank Others – Manufacturing, NGO’s, Engineering, Tourism and

Entertainment Owner of:

Coverage and Infocomm Software President of Australian Chamber of Commerce Thailand Director of Board of Trade Thailand MBCI (master of Business Continuity Planning) Developed complete BCP system Consultant to Red Cross and UN for Pandemic Planning 1 daughter (11) attending school in Bangkok

Influenza Update

SWINE FLU ….

Outbreak probably due to Swine flu mutation Highly contagious (maybe 30%) Now more than 15000 cases Spread to 40 countries in less than two

weeks Death rate 1% (3% in Mexico) In Thailand and China Both have Avian Influenza (highly

pathogenic) Similar pattern to 1918 – all basic ingredients

in place for major problem in December and January

RESPONSES TO DATE….

WHO raised pandemic status to 4 then 5 Now considering 6 Thailand should now implement plans Mexico shut down country for 5 days US have shut down a number of schools Hong Kong quarantined a major Hotel China closed borders to Mexican citizens

(even if they haven’t been in Mexico for 2 years!)

Many updating their plans now

THINGS TO CONSIDER

Provide normal Transport services, monitoring and control for Thailand (external)

Other risks, problems and disasters won’t stop Protect internal capability to provide services Local v Regional v International Pandemic Development time and Effectiveness of Vaccine

unknown (6 months +) Actions of other departments unknown Effect of actions on public panic, business,

tourism and Thai image

Key Questions

SCOPE ….

Thai Transport departments? Staff numbers in each department? Pandemic Planning required by when? Links with other groups?

Airport Police/Military Customs Education TAT BOI Commerce Health

Proposed Solution….

PLANS ….

Need Internal Plan And External Plan ASAP! Need to train and test both

INTERNAL PLAN ….

Aim - Plan to allow Thai Transport to keep operating

Need 2 Plans Prevent infection of staff (Phase 5 – locally) Minimise disruption to operations (Phase 6 –

locally) Need to make some assumptions Need to develop plan with key functions Need to train and test

What if Pandemic doesn’t go to plan? What if another disease or problem hits first?

INTERNAL PLAN SOLUTION ….

1. Develop a Generic Crisis Management Plan first

2. Use key components:1. NAS2. Organisation Structure3. Roles and Responsibilities4. Planning system5. Training/Testing6. Forms and Templates7. Terms and Definitions

3. Develop a Pandemic Plan using these components and training

EXTERNAL PLAN ….

Aim – to minimise disruption of transport services to Thailand

Need 2 Plans: Limit infection (Phase 5 locally and Phase 6

International) Minimise disruption (Phase 6 – locally)

Need to make some assumptions about Flu What will other groups do? Need to train and test – but how to get others

to participate? What if Pandemic doesn’t go to plan? What if others don’t respond how we think?

EXTERNAL PLAN SOLUTION ….

1. Develop a Generic Crisis Management Plan for any Transport disaster first

2. Use key components:1. NAS2. Organisation Structure3. Roles and Responsibilities4. Planning system5. Training/Testing6. Forms and Templates7. Terms and Definitions

3. Develop a Pandemic Plan using these components and training

4. Co-ordinate with other groups!!

PROPOSAL OPTIONS ….

1. Develop Internal Plans (recommended)1. GCMP 2. Pandemic Control (Phase 5)3. Pandemic Crisis (Phase 6)

2. Develop External Plans 1. GCMP2. Pandemic Control (Phase 5 Local and Phase 6

International)3. Pandemic Crisis Control (Phase 6 Locally)

3. Operate 2.2 and 2.3 (Undertake controls)4. Operate 1.2 and 1.3 (Run Crisis)

OPTION 1 PLAN Meet with senior department managers to determine

best system and requirements Develop 3 Internal Plans for Thai Transport (3 months) Train 2000-3000 Transport Staff and selected others =

2 days per person TTX 1 (simple) GCMP Training HCPC Training TTX 2 (Pandemic Scenario)

Use Thai Transport locations to minimise cost Thai language training and material

SUMMARY

RATES…

3 Components Licence Fee for each plan Daily rate to develop plans Daily rate for Training and Testing

Can provide ongoing testing and auditing Can provide some operational activities Can provide actual crisis management

services

What can Coverage provide

Planning system for managers Training for all levels of staff in Thai and English Documentation to support audits and reviews Exercises to review performance and problems Ongoing support for other plans and training

GCMP AND HPCP KEY COMPONENTS

Levels, Terms, Definitions

Organisation Structure

Notification and Activation System

Planning Processes

Forms and Documentation

Training

Roles and Responsibilities

GCM Components

IT Disaster

Brand Damage

Fire/Flood

Currency Crisis

Other CP’s

Plug in and re-

use

Plug in and re-

use

Event Occurs

ReviewRisks

Notification

Business as Usual

Activation

Get Organised

Take Action

Make Plans

Train

PrepareFix process

Prevent

Test

BCP BUSINESS CYCLE

Notification

Event OccursSeen by someone

Tell theBoss

Tell theBoss

Tell theBoss

Activation

Event OccursSeen by someone

MiddleManager

SeniorManager

Geneva

IncidentManager

CrisisManager

SiteManager

Tell the Boss

Tell the Boss

Tell the Boss

NAS

Site Manager

Incident Manager

Crisis ManagerSenior

Manager

Middle Manager

Event Spotter

1

2A

3B

2B

4

3C

Owners/Directors

3A

Notification Process

Activation Process

5

Level 3 - Crisis

Level 2 - Incident

1 = Tell Boss about Event

2A = Tell the Boss (Boss confirms declaration and any appointments made)

2B = Declare Incident (Level 2) and Appoint Incident Manager

3A = Tell the Boss (Boss confirms declaration and any appointments made

3B = Declare Crisis (Level 3) and Appoint Crisis Manager

3C = Incident Manager Appoints Site Managers and necessary

4 = Crisis Manager Informs/Replaces Incident Manager

5 = Owner or Director Confirms Crisis Manager and Crisis (Level 3)

GENEVACM & IMTEAM

ZONECM & IMTEAM

LINKEDCM & IMTEAMS

HELPFUL DEFINITIONS► Emergency (Immediate) Actions (IA)

► Actions to be taken quickly when a trigger event occurs – normally to save lives

► EG = If fire starts - Evacuate► Doesn’t help us operate the business

► Contingency Plans (CP)► Plans that show how to do something in a different way if

something goes wrong = “Plan B”► EG = If car breaks down - catch the train or taxi► Doesn’t help us recover to where we were before

► Disaster Recovery Plans (DRP)► Plans that show how to restore an activity that breaks to its

original status► EG = if computer breaks, use back-up tape to restore the

files► Takes a long time and doesn’t help us operate while we

implement the plan

HELPFUL DEFINITIONS► BCP = Combination of:

► Immediate Actions (IA)► Contingency Plans (CP), and► Disaster Recovery Plans (DRP)

► BCI Definition from BS25999 - Holistic management process that identifies potential threats and provides a framework for building resilience and a process for enabling response that safeguards the interests of stakeholders

► Caution! – Following the BS25999 will require you to have a BCP (IA, CP, DRP) for every risk

PLANNING PROCESS

Make an “Appreciation of the Situation” Make the plan “Effective” Implement the plan

41

PLANNING PROCESS

Make an “Appreciation of the Situation” Assess the situation Choose the right aim Identify all the factors affecting your aim Identify all the courses open for achieving your aim Decide your plan

42

PLANNING PROCESS

Make Your Plan Effective Complete your plan in detail Test your plan against the Principles of Operations Test your plan against the Principles of

Administration Document and communicate your plans under

standard headings

43

PLANNING PROCESS

Implement Your Plans Preparations Managing the Execution of a Plan Reviewing and Updating the Plan

44

SIMPLE CONTINGENCY PLAN

MCA = WCAZ Office support functionRisk = WHO Phase 6 declaration

1-2hrs 2-8hrs 8-24hrs 24-72hrs 72hrs +

DM

         

IT

         

Finance

         

??

         

??         

45

 

ASNZ 4360:2008

RISK MANAGEMENT

When we treat risks we basically try and address:Probability, or Impact, orBoth

Impact/Consequence

Pro

babi

lity/

Like

lihoo

d

Risk “X”

OPTIONS TO REDUCE RISKS

1. Tolerated2. Terminated3. Transferred until

tolerable4. Trimmed until tolerable

Trimming means: Reducing probability Reducing consequence

(one method is to develop a contingency plans)

Tolerated Risks

Operate your

business

Understand your Mission

Critical Activities

Determine the risks to the MCA’s

Treat Every Risk

Terminated Risks

Transferred Risks

Trimmed Risks

Develop CP’s

What can Coverage provide

Generic Crisis Management Plan (GCMP) Used for any risk or disaster Component based so can be linked or updated Simple and fast to develop Easy to learn and fast to implement Complies with International Standards

Human Pandemic Crisis Plan Used for Thailand based problems (Minimising loss)

internally Used for Pandemic outside of Thailand (defence) Links with other plans Links with government departments Flexible Planning for any events