# Presentation: 064984

## Continuity of Operations – Recovery and Mitigation Activities

- Emergency Management Training Conference
- November 28, 2004

## Module Objectives

- List some mission critical systems for health care organizations.
- Describe the steps of the hazards vulnerability analysis (HVA) process and demonstrate the use of the HVA forms.
- Describe some mitigation, preparedness, response and recovery strategies for priority hazards, threats and events.
- Define the term “continuity of operations (COOP)” and give several examples of COOP considerations.

- Beterans Health Administration

- 112804

## Develop/maintain a Mitigation/Recovery Program:

- 1.		Identify critical systems, equipment, 		information, operations and 				materials/supplies.
- 2.		Perform a hazard identification, risk 		assessment and consequence analysis.
- 3.		Develop a recovery plan.
- 4.		Establish a mitigation program.

**B**

- Beterans Health Administration

- 112804

## Identify CriticalOperations & Infrastructure

- Revisit Y2K planning efforts.
- Identify critical operations and determine the human, physical and informational resources on which they depend.
- Analyze the number of alternatives or degree of redundancy supporting the systems.
- Rate the various critical operations on survivability and recommend improvements.

- Beterans Health Administration

- 112804

## Operating Unit Template

## Hazards Vulnerability Assessment (HVA)

- A needs assessment for the emergency management program.
- Three steps:
**Hazard identification (what?)**
**Risk assessment (how likely?)**
**Appraisal of vulnerabilities (what will we lose**
- Outputs/uses:
**Resource identification and inventory.**
**Mitigation program**
**Recovery plan**

- Beterans Health Administration

- 112804

## Hazard Identification

- Types of hazards in the local community:  natural, technological, man-caused.
- Sources of information: State/Local Emergency Management Agency, Local Emergency Planning Committee
- Technical guidance:  NFPA 1600, engineering department.
- Output: A list used by the facility’s emergency management planning committee.

- Beterans Health Administration

- 112804

## Discussion Question

- What are some of your jurisdiction’s priority hazards, threats and events?

- Beterans Health Administration

- 112804

## Risk Assessment

- Subjective prioritization of hazards identified (probability hazard will occur).
- Educational activity for facility emergency management planning committee.
- Think in terms of the facility, but also the entire community.
- Outputs:
**Prioritized list of hazards**
**Risk maps.**

- Beterans Health Administration

- 112804

## Vulnerability Assessment

- Subjective analysis of the functional impact or consequences of the hazard occurring.
- Direct and indirect effects.
- Again, think in terms of the facility as well as the local community.
**Staff**
**Home-based patients**
**Suppliers**
**Utilities**

- Beterans Health Administration

- 112804

## Threats and Events SOPs

- Naturally-occurring Events
- Drought, EQ, Fire, Flood, Hurricane, Thunderstorm, Tornado, Tsunami, Volcanic Eruption, Winter Storm
- Human-related Events
- Bomb Threat, Civil Disturbance, Cyber Attack, Hostage, Terrorism, Violent Behavior
- Hazardous Materials Events
- Explosives and Biological, Chemical, Radiological Events

- Beterans Health Administration

- 112804

## SOP Format

- Subject/Title
- Description of Threat/Event
- Impact on Mission Critical Systems
- Operating Units and Key Personnel
- Mitigation/Preparedness Activities
- Response/Recovery Activities
- Notification Procedures
- Specialized Staff Training
- References and Further Assistance
- Attachments

- Beterans Health Administration

- 112804

## Working with the Draft SOPs

- As a result of the Hazards Vulnerability Analysis (HVA) process, priority threats and events were identified by a score of “2” or greater
- Review and revise the draft SOPs and attachments (ICS chart) in order to suit the facility’s particular requirements
- The ICS chart should be reflect appropriate staffing for the INITIAL response.  The Incident Action Planning Process will adjust staffing needs over the life of the incident

- Beterans Health Administration

- 112804

## Continuity of Operations (COOP)

- “Ensuring continuity of essential functions.”
- Planning that considers:
- Identification of essential functions and the staff and other resources required to perform them
- Delegations of authority
- Lines of succession
- Alternate operating facilities

- Beterans Health Administration

- 112804

## COOP (con’t)

- Interoperable communications
- Vital records and databases -off-site storage and virtual access to:
- Legal and financial records
- Emergency operations plans/procedures
- Devolution of control and operations
- Reconstitution

- Beterans Health Administration

- 112804

## COOP/Recovery Plan

- Also based on the analysis of critical operations, the HVA, and the gaps identified in current safety or maintenance programs.
- Develop priorities, processes and timeframes for restoration of critical systems.
- Identify alternative sources of critical resources (bridge to resource management activities in the Preparedness/Response Program).

- Beterans Health Administration

- 112804

## Establish a Mitigation Program

- Based on the analysis of critical operations and the HVA, identify gaps in current safety or maintenance programs.
- Determine various mitigation strategies that could eliminate or reduce the threat.
- Build awareness with and commitment from the EM Committee and CEO.
- Draft a mitigation plan with interim and long-term goals.

- Beterans Health Administration

- 112804

## Questions?