Document Review Whenever this document is reviewed and or amended, details are to be recorded on this page. Document Change Control Revision # Change Description Date Author 1 Initial document release as per draft 23/11/2016 Theron King 1.1 Amended as per Residential Systems suggestions: Extra BAU for Residential 14/03/2017 Theron King 1.2 Amended as per Risk and Audit suggestions: Trim and document control 16/03/2017 Theron King 1.3 Document registered in Work Health and Safety Management System (WHSMS) and ‘Document Control’ applied. 20/11/2017 Jodi McAlary
Distribution List Copy Number Name Location 001 Business Continuity Officer – Electronic Copy HRS - Safety 002 ORPC Members – Electronic Copy Various – ORPC Administrator to distribute 002 Emergency Operations Centre – Hard Copy Printery 003 004 Abbreviations & Definitions Term Abbreviation Definition Adaption Adaption The Universities capability to cope with uncertainty, change and associated stresses, and adjust to change After Action Review AAR An After Action Review is a structured review or de-brief process for analyzing what happened, why it happened, and how it can be done better by the participants and those responsible for the project or event. Business as Usual BAU The normal execution of standard functional operations within an organisation. Business Continuity BC A state of continued, uninterrupted operation of a business in all contexts. Business Continuity Plan (s) BCP This process leads to a clearly defined and documented plan which sets out the procedures, resources and systems necessary to continue or restore the activities of an organisation should unpredicted business disruption occur. The BCP is used as a communication and decision support tool and is executed in response to a business disruption.
Business Impact Analysis BIA A management level analysis which identifies the impacts of function loss on the organisation. The BIA provides management with data upon which to base risk mitigation and continuity planning decisions Business Interruption Event BIE An event that by its duration exceeds the Maximum Acceptable Outage and / or has an adverse impact on business objectives and requires the implementation of the BCP or sub plans Business Process Assessment BPA A management tool designed in the identification and assessment of criticality of business process and functions. Business Unit BU A part of the University that operates separately under the umbrella of UNE Critical Business Activity CBA May be defined as primary business functions that must continue in order to support your business. Emergency Control Organisation ECO The entity responsible for UNE’s incident and emergency activities during the Reaction, Response and Recovery Phases. Emergency Operations Centre EOC A central point of reference to co-ordinate the response to a business interruption event. Is established at the discretion of the ORPC. Emergency Event Emergency Event An event due to an actual or imminent occurrence (such as fire, explosion, flood, earthquake, pandemic, etc. ) which: Endangers or threatens to endanger the safety or health of staff or visitors to the organisation Destroy or damages, or threatens to destroy or damage, property of the organisation Has the capacity to disrupt operations to the extent that it impacts on business objectives. Emergency Management Plan EMP The written document of the emergency arrangements for a facility generally made during the planning phase. It includes the agreed emergency roles, responsibilities, strategies, systems and arrangements. Full Time Equivalent FTE An FTE of 1.0 is equivalent to a full-time worker or student, while an FTE of 0.5 signals half of a full work or school load. Maximum Tolerable Outage MTO The maximum period of time that UNE can tolerate the loss of capability of a critical business function, process, asset or IT application Organisational Resilience Planning Committee ORPC ORPC is responsible for the development and review of a strategic framework to ensure the effective continuance of the University of New England’s operations in the event of a major crisis or potentially catastrophic event.
Notification & Declaration Process Notification On first becoming aware of a possible critical incident, the relevant function manager is required to assess the situation and if the event is likely to exceed the agreed MTO, then the Chief Warden should be notified immediately by phone and where possible, with a follow up email or personal briefing detailing the key issues including: Nature of the incident – time informed etc. Describe business elements impacted Facility / equipment impacted Staff impacted / required Any response actions implemented Any media involvement / interest Any immediate support requirements Elements of the BCP can be implemented at the local level, where appropriate to address and immediate response requirement even if the event is expected to be resolved within an acceptable period. Assessment On receipt of a notification that will impact business continuity the Chief Warden will: Formally note details Notify the other members of the ECO Confirm the details of the incident and appropriate media strategies Conduct preliminary impact assessment (on facility and technology infrastructure) Determine if the Emergency Operations Centre (EOC) needs to be opened Declaration The Chief Warden is to review the preliminary information and if considered necessary declare a Critical Incident based on UNE’s Activation and Notification Levels for a Critical Incident (see below). Declaration will allow for: Formal activation of UNE’s Emergency Response Plans Closure of part/all of campus Suspension of business activity Activation of the BCP* *NB: As per the University’s Emergency Management Plan, it is the responsibility of the Chief Warden to enact the BCP should it be required.
UNE Activation & Notification Levels IMPACTS RESPONSE LEVELS HARM TO PEOPLE HARM TO ENVIRONMENT ASSET DAMAGE LOSS OF BUSINESS CONTINUITY DAMAGE TO REPUTATION POLITICAL INTEREST Level 1 Illness or injury of a minor nature Significant near miss Minor environmental impact able to be dealt with by SSO Environmental nuisance (noise etc.) Minor damage to facilities or equipment able to be dealt with by UNE personnel Minor disruption to departmental operations Campus community awareness of issue, little media interest Peaceful on campus able to be managed by UNE personnel Level 2 Single or multiple injuries requiring immediate hospitalisation affecting daily operations Moderate environmental harm able to be dealt with by UNE personnel Minor hazardous spill Accident or damage to facilities or equipment which could affect daily operations Disruption affecting significant amount of campus operations for more than 1 day Local or regional concerns which have the potential to escalate Demonstrations or unrest involving political interest groups which can be managed by UNE personnel Level 3 Life and/or property at risk Large area affected (Armidale/New England/State) Single or multiple serious injuries or fatalities Mass illness requiring external help Serious environmental harm requiring external agencies support Hazardous chemical spill/gas release Environmental impact affecting neighbouring area Significant damage to structures, facilities or equipment which seriously affects daily operations Loss of whole campus operations for multiple days Significant national or international media interest/activity Demonstrations or unrest involving political interest groups which require external agencies support