32
Grid Resilience: Business Continuity, the step after developing an Emergency Response Plan Dennis V. Rose, MBA, CBCP DirectorBusiness Continuity/ Disaster Recovery NRECA TechAdvantage Orlando February 26, 2015

Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

  • Upload
    others

  • View
    2

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

1

GridResilience:BusinessContinuity,thestepafterdevelopinganEmergency

ResponsePlan

DennisV.Rose,MBA,CBCPDirector‐BusinessContinuity/DisasterRecovery

NRECATechAdvantageOrlandoFebruary26,2015

Page 2: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

MOSS ADAMS LLP

“What we learn from history is that people don’t learn from 

history”Warren Buffet

Page 3: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

3

Today’sAgenda

• CrisisManagement

• IncidentCommandSystem(ICS)

• ChangeManagement

• BusinessContinuity=StrategicPlanning

• QuestionsandAnswers

Page 4: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

4

Itallstartswithyou!

http://www.ready.gov/

Page 5: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

5

CrisisManagement

Page 6: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

MOSS ADAMS LLP

What is Resilience?

• Theabilitytobecomestrong,healthy,orsuccessfulagainaftersomethingbadhappens

Merriam‐Webster

• Resilienceisthecapacityofanyentity‐‐anindividual,acommunity,anorganization,oranaturalsystem‐‐topreparefordisruptions,torecoverfromshocksandstresses,andtoadaptandgrowfromthedisruptiveexperience.

JudithRodin,authorof“TheResilienceDividend”

Page 7: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

7

CrisisManagement

• FacilitateeffectiveCrisisManagementutilizingthe‐ IncidentCommandSystem(ICS)‐ Crisismanagementprotocolsandprocedures‐ CrisisCommunications‐ Allocationofassets‐ Incidenttracking‐ Internal/externalstakeholders

Page 8: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

8

‐ IncidentCommandSystem(ICS)‐ Crisismanagementprotocolsandprocedures‐ CrisisCommunications‐ Allocationofassets‐ Incidenttracking‐ Internal/externalstakeholders

CrisisManagement(Continued)

Page 9: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

9

CrisisManagement(Continued)

• Acrisisrarelyoccurswithoutwarning…anumberofpreconditionsusuallyexistthatbreedacrisis.

• Criseshavelifecycles,andunderstandingwhatoccursbeforeacrisiscommencesisimportanttohelpingpreventingit.

• DisasterRecoveryistheprocessofreturningabusinessfunctiontoastateofnormaloperationseitherataninterimminimalsurvivalleveland/orre‐establishingfull‐scaleoperations.

Page 10: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

10

THELIFECYCLEOFACRISIS

Myers• NormalOperations

o Preventionpractices

• EmergencyResponseo Activitiesduringthefirsthours

• InterimProcessingo Temporaryproceduresaresetup

• Restorationo Transitionbacktonormal

PearsonandMitroff(1993)• Signaldetection

o Beginswithsomeformofwarnings

• Preparation/preventiono Formingthecrisismanagement

teamandplanofaction• Containment/Damage

limitationo Managingthecrisis

• Recoveryo Attemptstoresumeactivities

• Learningo Reflectingonwhatcanbelearned

Page 11: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

11

LandscapeSurvey

StrategicPlanning

CrisisManagement

OperationalLearning

TheInternalLandscape

InternalCrisisThreats

Planforpotential crisisevents

Managinginternalstakeholdersduringacrisis

Whatcan welearn

TheexternalLandscape

ExternalCrisisThreats

Externalplanningthatcouldhelp

Managingexternalstakeholdersduringacrisis

Whatlearningistakingplaceoutside ourorganization

Crandall, Parnell and Spillan (2014)

THEFRAMEWORKFORCRISISMANAGEMENT

Page 12: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

12

CRISISPHASESCRISISPHASES

End of the Crisis

Landscape Survey

&Strategic Planning

CommunicatingMonitoringDelegatingPrioritizing

Planning Organizational Learning

Situation AssessmentDecision Making

Team Coordination

Page 13: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

13

CHANGINGROLES

Day‐to‐DayOperations

• Normalcompanyorganization

• Businessasusual

• SteeringCommittee

• BusinessManagers

DuringaCrisis

• BusinessContinuityOrganization

• Survivaloftimesensitiveoperations

• EmergencyManagementCommittee

• TeamLeadersreporttoEMT

(DRI International 2006)

Page 14: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

14

IncidentCommandSystem(ICS)

Page 15: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

15

IncidentCommandSystem(ICS)

• FederalEmergencyManagementAgency(FEMA)definestheIncidentCommandSystem(ICS)asastandardized,on‐scene,all‐hazardsincidentmanagementapproachthat:

‐ Allowsfortheintegrationoffacilities,equipment,personnel,procedures,andcommunications.

‐ Enablesacoordinatedresponseamongvariousgroups,bothpublicandprivate.

‐ Establishescommonprocessesforplanningandmanagingresources.

Page 16: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

16

ICS(Continued)

• Canbeusedtomanageanemergencyincidentornon‐emergencyevent

• Canbeusedforbothsmallandlargeeventsorsituations

• Systemhasconsiderableinternalflexibility

• Systemcangroworshrinktomeetdifferingneeds

• Costeffective&efficientmanagementsystem

Page 17: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

17

• ICSisflexibleandcanbeusedforincidentsofanytype,scope,andcomplexity.

• ICSisusedbyalllevelsofgovernment,nongovernmentalorganizationsandtheprivatesector.

• Asasystem,ICSisextremelyuseful;notonlydoesitprovideanorganizationalstructureforincidentmanagement,butitalsoguidestheprocessforplanning,building,andadaptingthatstructure.

ICS(Continued)

Page 18: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

18

ICSSTRUCTURE

LogisticsSection

Finance/Administration

Section

OperationsSection

PlanningSection

IncidentCommand

PublicInformationOfficer

SafetyOfficer

LiaisonOfficer

CommandStaff:TheCommandStaffprovideInformation,Safety,andLiaisonservicesfortheentireorganization.

GeneralStaff:TheGeneralStaffareassignedfunctionalauthorityforOperations,Planning,Logistics,andFinance/Administration.

Page 19: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

19

CommandStaff

• IncidentCommando Inchargeoftherecoveryprocess

o Setstheincidentobjectives,strategies,andpriorities

o Overallresponsibilityfortheincident

o Whattypeofmanagementstyleisbestduringacrisis? TheListener TheDelegator TheGeneral

Page 20: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

20

• TheInformationOfficer:‐ ObtainsinformationfromEMCandprovides

informationtoallstakeholders(incidentpersonnel,newsmedia,otherappropriateagenciesandorganizations)• Developsandreleasesinformationabouttheincident• CommunicateswithRegulatoryentities(ifnecessary)

CommandStaff(Continued)

Page 21: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

21

CommandStaff(Continued)

• TheSafetyOfficer:‐ TodevelopandrecommendmeasurestotheIncidentCommanderassuringpersonnelhealthandsafetyandtoassessand/oranticipatehazardousandunsafesituations.

• DevelopstheSiteSafetyPlan• ReviewstheIncidentActionPlanforsafetyimplications• Providestimely,complete,specific,andaccurateassessmentofhazardsandrequiredcontrols

• Developsandreleasesinformationabouttheincident

Page 22: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

22

CommandStaff(Continued)

• LiaisonOfficer‐ Coordinateswithoutsideagencies;suchaspolice,fire,EMS

‐ Ensuresthattheneedsofassistingandcooperatingagenciesaremet

Page 23: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

23

GeneralStaff

• Operations

• Planning

• Logistics

• Finance&Administration

• Conductsoperationstoreachtheincidentobjectives.Establishesthetacticsanddirectsalloperationalresources.

• Supportstheincidentactionplanningprocessbytrackingresources,collecting/analyzinginformation,andmaintainingdocumentation.

• Providesresourcesandneededservicestosupporttheachievementoftheincidentobjectives.

• Monitorscostsrelatedtotheincident.Providesaccounting,procurement,timerecording,andcostanalyses.

Page 24: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

24

ICSAPPFORSMARTPHONES

Page 25: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

25

ChangeManagement

• Evolvingbusinessenvironment‐ Competition,adecliningeconomy,technologicalchange,andpressuretopreservethenaturalenvironment

• Managingchangehasbecomeacriticalmanagerialfunction‐ Someorganizationshavebeensetuptofacilitatemanagementthantopleasecustomers

‐ Developingrulesandregulationstogivemanagerscontroloveremployees

• ChangeAgentapproach‐ CEO/GeneralManagersmustcreateanenvironmentofcontinualreinvention

• Shorttermdisturbances:anxiety,confusion,andpoorerfinancialresults

Page 26: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

26

ChangeManagement(Continued)

• Plan,Do,Act,Check• Developanewstrategyandimplement

‐ UnderstandPorter’sFiveForces‐ IdentifyaChangeManager

• Communicate,Communicate,Communicate• Continuallyshowthevisionofthefuture• Meetregularlywithstakeholdersandbeatthedrumofchange

• Rewardtheemployeeswhoembracechange

Page 27: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

27

BusinessContinuity

Crandall, Parnell and Spillan (2014)

• DisasterRecoveryInstituteInternational(DRII)definesaBusinessContinuityProgramas:Aholisticprogramdrivenbybusinessrequirements‐ Ledbyamanagementteamempoweredtorespondtointerruptions

‐ Modifiestheconsequencesofaninterruptiontoalevelacceptablebymanagement

‐ Providesatestedmethodologyforfacingcrises• Ensurescontinuityandsurvivaloftheorganization• Providesprotectionofpeople,information,operationsandorganization

• Mitigatesrisksandexposures• TakescontrolofanyDisaster

Page 28: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

28

BusinessContinuity=StrategicPlanning

• Strategy– asetofrelatedactionsthatmanagerstaketoincreasetheircompany’sperformance.

• BusinessContinuity‐ Ensurescontinuityandsurvivaloftheorganizationo StrategicLeadershipo CompetitiveAdvantageo SuperiorPerformance

Page 29: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

MOSS ADAMS LLP

BC/DR Program and Plan

Page 30: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

30

LessonsLearned

• Understandtherisksandbusinessimpactfacingyourorganization

• EstablishCommandandControlthroughICS• StayaheadofCrisisCommunications• Establishbeforehandcommunicationwiththedepartmentheads…opencommunication

• ProvideAfterActionreports• ProvideAwarenessandTraining• Exercise,Exercise,Exercise

Page 31: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

31

Summary

• Prepareyourselfandyourfamily…visitready.gov

• Criseshavelifecycles,andunderstandingwhatoccursbeforeacrisiscommencesisimportanttohelpingpreventingit.

• ThisinformationyouhavebeenpresentedhasprovidedyouwithageneralbackgroundonICS.

• Bethechangeyouwanttohappenintheorganization

• BusinessContinuityisStrategicPlanning

Page 32: Grid Resilience: Business the step after andefines a Business Continuity Program as: A holistic program driven by business requirements ‐Led by a management team empowered to respond

32

Questions/Answers

Contact:DennisV.Rose,M.B.A.,CBCP

512‐652‐[email protected]