Disaster Preparedness & Recovery

Tips for Creating a Plan that Addresses the 3 Key Phases of Business Continuity
By: Jay Oxton on December 16, 2011
Bookmark and Share

Photo courtesy of Pitney Bowes

On Feb. 7, 2011, at 7:45 p.m., smoke detectors were tripped at Pitney Bowes’ largest mail services presort facility in Grand Prairie, Texas, as a fire that started in another company’s nearby facility rapidly spread.

By 4:30 a.m., the fire had grown to a four-alarm blaze and raged through the night, damaging equipment worth millions of dollars. By 9 a.m., the entire facility — which served hundreds of commercial customers — was destroyed.

The unexpected can happen to any organization. And while you can’t control the unexpected, you can control the response.

In the case of the fire, the company’s response was drawn up months earlier. As a result, service continued without disruption. The morning after the incident, trucks started their routes, picking up mail from customers throughout the Dallas-Fort Worth area. Mail was presorted at a second Pitney Bowes facility in the vicinity and other sites in the region to ensure rapid induction and delivery.

In addition to having a mail service network of 36 operational facilities to redirect workflow, Pitney Bowes had designed, documented and tested a formal business continuity plan. When disaster struck, local management knew exactly what to do to safeguard employees, secure the building, protect customer data, reroute the mail and make requested customer pickups and deliveries as scheduled.

The company immediately began searching for a new mail presort facility. Frequent communications to customers continued long after the initial disaster. There were no breaches of customer security, and insurance claims were in the works within 30 days.

Five months after the fire, teams continued to follow through on tasks outlined in the formal plan.

The disaster site remained closed, pending completion of the final insurance investigation, including the cause and origin review — but Pitney Bowes continued assisting clients on insurance claims processing.

During that time, the company experienced a 98 percent customer retention rate — a testament not only to the teams and plans in place, but also the high levels of understanding, encouragement and support provided by customers.

In June, a new, state-of-the-art facility was opened in Grand Prairie, Texas.


Key Phases of Business Continuity


There are three key phases of business continuity: the plan, implementation and follow-up.

1. The plan


Top management initiates a comprehensive business impact analysis, which involves cross-departmental teams identifying the business’s most critical systems and processes and the potential impact a disaster would have on each area. A thorough risk assessment also includes an inventory of the entire business, the facilities, and for each facility, the people, equipment, software and relevant data housed there.

Business analysts then imagine as many disaster scenarios as possible, hypothesizing how to handle each one and prioritizing the risks. The scenarios include the “domino effect,” when more than one thing goes wrong, such as the earthquake in Japan that was followed by a tsunami then a nuclear disaster. The business impact analysis helps determine the sequence of activities, identifying which services should be restored first.

Once complete, a business continuity plan provides a detailed, step-by-step primer on what to do, when to do it, who to bring in and how to follow through. The best plans include simple checklists and priorities that are easy to follow during stressful emergency situations. Since staff turnover is an ongoing issue, the business continuity plan must be written by job function rather than by the employee’s name.

The document further defines emergency response protocols and the “recovery point objective,” or when the mission is complete. This is crucial for the long-term health of a business, particularly

service businesses, as the customer is the ultimate arbiter of when service is back to normal.

The business continuity plan should establish communications guidelines and service levels that help staff effectively manage customer expectations throughout the disaster and its aftermath. As data integrity is the backbone of many service organizations, sections on IT planning and recovery must detail procedures for backing up data and designating alternative sites for housing data. If the need is great enough, as in the financial services industry, duplicate systems are often created offsite so they are ready for immediate deployment.

The final part of plan development is annual training. Everyone involved, from executives to the on-site implementation team, must review the plan annually. Organizational structures and personnel change constantly, and new team members need to understand their roles. Executive management must sign off on the plan, empowering the management team to rapidly respond to a disaster. The plan must be rigorously tested under conditions that are as realistic as possible. Each facility needs to designate a lead for its business continuity implementation team.


2. The implementation

Once the business continuity plan is in place and staff members are trained, every situation, no matter how onerous, can be met with confidence. When disaster strikes, implement the plan immediately and focus first on short-term needs.

Ten best practices during the implementation phase:

1.    Ensure employee safety. Follow proper safety procedures for evacuation in the event of a fire or other disaster, making sure that everyone is out of the building and at a safe distance. Perform a head count to verify that no one is left behind.

2. Contact local emergency assistance. Cooperate with local authorities, and let trained professionals do their jobs without interference.

3.    Secure the data center; if it is endangered or compromised, carry out the IT disaster recovery plans.

4. Secure client information and assets. Especially important for service providers, getting client information, materials and product to a safe place must be top priority. In the event of a natural disaster, such as a fire, on-site security can establish a perimeter.

5.    Contact corporate executives. The on-site team will be in the thick of things from the start. Tie in corporate executives immediately. This executive immersion promotes organizationwide accountability and enables businesses like Pitney Bowes to tap into their nationwide resources to resolve problems swiftly. Local or on-site management might be in the best position to react to the situation at hand. Corporate personnel can gather the necessary resources to help ensure that on-site management has access to those resources.

You may use or reference this story with attribution and a link to
http://www.emergencymgmt.com/disaster/Plan-Addresses-Key-Phases-of-Business-Continuity.html


Comments


Add Your Comment

You are solely responsible for the content of your comments. We reserve the right to remove comments that are considered profane, vulgar, obscene, factually inaccurate, off-topic, or considered a personal attack.



Featured Articles

Funding Constraints Will Greatly Impact Public Health Readiness
By: Raphael M. Barishansky Feb 15, 2012
Technical Communities Redefine Disaster Volunteerism
By: Valerie Lucus-McEwen Feb 13, 2012

Latest Blog Posts RSS

Adam Crowe - Disasters 2.0 Midwest Disasters 2.0 Social Media Workshop, Part 2
Feb 22 Emergency Responders Participate in Training Workshop…
Adam Crowe - Disasters 2.0 Midwest Disasters 2.0 Social Media Workshop, Part 1
Feb 21 Local Social Media Workshop for Emergency Managers…
Emergency Management Blog - Eric Holdeman: Disaster Zone Quote: Adaptation Relies on People
Feb 21 You cannot be a controlling leader and have an adaptive organization.…