POL:10:EP:003:03:NIBT PAGE 1 of 7

Transcription

1 POL:10:EP:003:03:NIBT PAGE 1 of 7 Northern Ireland Blood Transfusion Service POLICY DOCUMENT Document Details Document Number: POL:10:EP:003:03:NIBT No. of Appendices: 2 Supersedes Number: POL:10:EP:003:02:NIBT Document Title: NIBTS BUSINESS CONTINUITY POLICY ISSUE DATE: 11 MARCH 2015 EFFECTIVE DATE: 25 MARCH 2015 Document Authorisation Written By: Claire Boyd, Business Continuity & Risk Signature: Date: Authorised By: Ivan Ritchie, Human Resources and Corporate Services Department Signature: Date: Authorised By: Mervyn Barkley, Chief Executive Signature: Date: CROSS REFERENCES This Policy refers to the following documents: Doc Type Doc. No. Title PLN EP:002 Corporate Business Continuity Plan APP 1 ISO 22301:2012- Societal security- Business continuity management systems The seven requirements APP 2 Business Continuity Management Team SOP EM:003 Business Unit Resumption Plan Procedure

2 POL:10:EP:003:03:NIBT PAGE 2 of 7 Key Change From Previous Revision: Update of Policy to adhere to International Standard ISO 22301:2012- Societal security- Business Continuity management systems- Requirements. 1 STATEMENT Business continuity management is a tool that is widely accepted across industry, to safeguard an organisation s business operations against threats. This tool allows an organisation to- improve its resilience provide an effective response in order to maintain its critical functions during a disruption exercise its arrangements to improve confidence in its ability to restore services to business as usual The International Standard on Business Continuity Management Systems ( ISO 22301) defines Business Continuity Management as a holistic management process that identifies potential threats to an organisation and the impacts to operations that those threats, if realised, might cause, and which provides a framework for building organisational resilience with the capability of an effective response that safeguards the interests of its key stakeholder, reputation, brand and value-creating activities. Business continuity management is the process through which NIBTS aims to maintain a supply of safe and effective blood and blood products to its customers during and following a disruption to business and to affect a recovery afterwards. The Senior Management team recognise the importance of business continuity management arrangements and work to embed its principles throughout the organisation. 2 OVERVIEW 2.1 The Business Continuity Policy provides the framework from which NIBTS s Corporate Business Continuity Plan and departmental Business Unit Resumption Plans are established in order to ensure that the organisation can continue to deliver the core services in the event of a disruption. 3 RESPONSIBILITY 3.1 Chief Executive- The Chief Executive has overall responsibility for Business Continuity Management 3.2 Head of Human Resource and Corporate Services- Ensures contingency planning is appropriately developed within NIBTS and that it is given the correct

3 POL:10:EP:003:03:NIBT PAGE 3 of 7 level of importance within the organisation. This role is known as the Business Continuity Executive Business Continuity and Risk Manages the Business Continuity System. 3.4 Business Continuity Management Team- Operational team that would respond to an internal incident that caused disruption to service provision.(see Appendix 2) 4 POLICY The NIBTS has established and will maintain a comprehensive business continuity management system. The International Standard ISO is widely regarded as setting out good practice in business continuity management and this informs NIBTS s business continuity arrangements. The International Standard IS consists of seven requirements as outlined below; (1) Context of the organisation (2) Leadership (3) Policy (4) Planning (5) Support (6) Operation (7) Performance evaluation See Appendix 1 for summary of the International Standard IS and how NIBTS has applied it. The business continuity management system covers key functions together with supporting services, processes and resources which are critical to the provision of these functions. A business impact analysis and risk assessment have been applied to the organisations key functions and are documented in the departmental Business Unit Resumption Plans. Where appropriate, steps have been taken to prevent the interruption of key functions and where this is not possible, plans have been developed to ensure restoration of key functions within agreed time periods. Business Unit Resumption Plans have been developed by each department within NIBTS. There is also an overarching Corporate Business Continuity Plan. The policy also applies to the management of outsourced contracts, and requires those responsible for specifying and managing them to ensure that appropriate business continuity standards are included in the contracts. This will ensure the service or product provider is able to deliver acceptable standards of service following a disruption. 5 EQUALITY SCREENING OUTCOME 5.1 This policy has been drawn up and reviewed in light of the statutory obligations contained within Section 75 of the Northern Ireland Act (1998). In line with this

4 POL:10:EP:003:03:NIBT PAGE 4 of 7 statutory duty of equality this policy has been screened against particular criteria. If at any stage of the life of the policy there are any issues within the policy which are perceived by any party as creating adverse impacts on any of the groups under Section 75 that party should bring these to the attention of the Head of HR & Corporate Services. The Northern Ireland Blood Transfusion Service is committed to the promotion of equality of opportunity for staff, donors and service users. We strive to ensure that everyone is treated fairly and that their rights are respected at all times. We believe that it is important that our policy is understood by all those whose literacy is limited, those who do not speak English as a first language or those who face communication barriers because of a disability. On request it may be possible to make this policy available in alternative formats such as large print, Braille, disk, audio file, audio cassette, Easy Read or in minority languages to meet the needs of those not fluent in English. 6 TRAINING REQUIREMENTS 6.1 Those who have been identified as Business Continuity Representatives by their senior managers should read and understand this document.

5 POL:10:EP:003:03:NIBT PAGE 5 of 7 APPENDIX 1 ISO 22301:2012- Societal security- Business continuity management systems The seven Requirements The 7 requirements- (1) Context of the organisation Understanding of the organisation and its context NIBTS has determined the external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended outcomes of its Business Continuity Management System. NIBTS has documented their key activities, functions and services and the potential impact related to a disruptive incident. Understanding the needs and expectations of interested parties NIBTS has identified the parties that are relevant to the Business Continuity Management System and their requirements. Scope NIBTS have set the scope of its Business Continuity Management System. (2) Leadership NIBTS have identified the Chief Executive, the Head of Human Resources and Corporate Services, the Business Continuity and Risk and the Business Continuity Team as having specific roles with respect to the Business Continuity Management System. (3) Planning Business Continuity objectives have been set for the organisation by considering the key activities of the organisation and the expectations of interested parties. (4) Support NIBTS have identified individuals in each department who are responsible for Business Continuity and updating their Business Unit Resumption Plans. They are members of their department Business Unit Resumption Team who come together when a disruption occurs.

6 POL:10:EP:003:03:NIBT PAGE 6 of 7 (5) Operation NIBTS have based their Corporate Business Continuity Plan on the Business Impact Assessments and Risk Assessments completed by each department when they completed their departmental Business Unit Resumption Plans. See SOP:EM:003 Business Unit Resumption Plan Procedure. (6) Performance evaluation NIBTS have committed to reviewing its Business Continuity procedures annually and ensure their continuing suitability, adequacy and effectiveness. The review will include exercising and testing of the Corporate Business Continuity Plan.

7 POL:10:EP:003:03:NIBT PAGE 7 of 7 APPENDIX 2 BUSINES CONTINUITY MANAGEMENT TEAM NIBTS ROLE Chief Executive Medical Director & Consultant in Transfusion Head of HR and Corporate Services ICT Facilities Donor Recruitment Finance Regulatory Affairs and Compliance Donor Services General Laboratory BC and Risk BUSINESS RECOVERY TEAM ROLE BCM Lead Medical BCM Practitioner BCM & Human Resources BCM Practitioner IT BCM Practitioner Facilities BCM Practitioner Media BCM Practitioner Finance BCM Practitioner Regulatory Affairs and Compliance BCM Practitioner Donor Services BCM Practitioner Laboratory BCM Practitioner General BCM Practitioner