Business Continuity Planning

Transcription

Business Continuity Planning
Business Continuity Planning
Always be prepared for the unexpected!
Get back in business asap!
Ir. Jan van Aarle
Dr. Ir. Johan Maes
Agenda
1. History (from J&J)
2. Business Continuity Planning (BCP)
3. BCP Certification Process
4. BCP manual
5. Critical success factors
6. Description of testing with in Chemical (API) manufacturing
Johan Maes
History
• Aftermath September 11, 2001
• Russ Deyo: Executive Committee sponsor
– Start BCP program = Jan. 03 letter to implement BCP
by YE 2003
In January 2002, I wrote to you about the formation of the Emergency
Preparedness Task Force. This enterprise-wide initiative was established in
response to September 11th and subsequent terrorist threats and was one
of several steps taken to help ensure that the people, facilities and products
of the Johnson & Johnson Family of Companies remain secure and safe.
• BCP will become institutionalized and continuously assessed Corporate wide process
Annual Certification requirements
Corporate has formalized BCP roles and process
Agenda
1. History
2. Business Continuity Planning (BCP)
3. BCP Certification Process
4. BCP manual
5. Critical success factors
6. Description of testing with in Chemical (API) manufacturing
Johan Maes
What is Business Continuity?
Business Continuity Planning (BCP) is a process where
clear plans are developed to:
Safeguard employees
Protect assets
Manage risk (including insurance premium
reductions)
Provide for continued supply of products and
services following a catastrophic event
Sustain market share / revenue flow
Identify significant existing exposure
Define mitigation steps and action items
Objective: “Stay in Business after a Disaster”
BCP Elements
Three core elements:
Emergency Response (0 - 2 hours)
Incident Management (0 - 48 hours)
Operations Recovery (0 - 24 months)
Agenda
1. History
2. Business Continuity Planning (BCP)
3. BCP Certification Process
4. BCP Binder
5. Critical success factors
6. Description of testing with in Chemical (API) manufacturing
Johan Maes
Business Continuity Planning Process
Company
Strategic Plan
Workshop
(Training)
Critical Suppliers
&
External Mfgs.
Corporate BCP Review/Assessment
Plan
Development
Sector
Alignment
Meeting
Step 2
BCP Review
(Periodic/Change)
Draft
BCP
Tabletop
Exercise
Certification
Recertification Process
Update
BCP
Tabletop
Exercise
Recertification
Implement
BCP
Agenda
1. History
2. Business Continuity Planning (BCP)
3. BCP Certification Process
4. BCP manual
5. Critical success factors
6. Description of testing with in Chemical (API) manufacturing
Johan Maes
BCP Binder
1. Introduction (No Tabs)
2. Emergency Response
3. Incident Management
4. Operations Recovery
5. Appendices
Emergency Notifications and Response Teams
Critical Area Map JJPRD
BCP Binder
1. Introduction (No Tabs)
2. Emergency Response
3. Incident Management
4. Operations Recovery
5. Appendices
Emergency Response: Red (0 - 1hr)
1.
2.
3.
4.
Emergency Response flowchart
Evacuation Procedures
Initial Support
Response Scenarios
The different responsible departments
(security, emergency response team,…)
Fire Brigade Responsibility
BCP Binder
1. Introduction (No Tabs)
2. Emergency Response
3. Incident Management
4. Operations Recovery
5. Appendices
Incident Management: Yellow (0 - 48 hr)
Focus on
Communication
The different responsible departments: CMT,
Business Units, Site Resources and Support
1. Roles and Responsibilities
2. Public Communications
3. Crisis Plans: Human Resources, IT, Records Management and Risk Management
BCP Binder
1. Introduction (No Tabs)
2. Emergency Response
3. Incident Management
4. Operations Recovery
5. Appendices
Operations Recovery: Green (1 day - 18 months)
The different responsible departments:
Communications, HR, IM, Engineering,…
Assessment
Start Full Recovery
Operations Recovery: Action Plans (RAP)
WHAT
RAP Sheets: shows for each time slice
WHAT should be done and HOW these
activities should be carried out
Responsible departments
BCP Binder
1. Introduction (No Tabs)
2. Emergency Response
3. Incident Management
4. Operations Recovery
5. Appendices
– List of Alternate Capacity
– List of Critical Equipment
– List of Key Materials /Supplies
– IT Contingency Plan
Agenda
1. History
2. Business Continuity Planning (BCP)
3. BCP Certification Process
4. BCP manual
5. Critical success factors
6. Description of testing with in Chemical (API) manufacturing
Johan Maes
Critical success factors
• Each segment of the plan is the responsibility of each individual
department and its key managers
• Scoring of the plan and the table top exercise
• Management commitment - Management involvement
• Clear roles and responsibilities
• Extended toolkit of J&J Corporate
– Template plan
– Action oriented
– Simple to use – to keep up to date
Agenda
1. History
2. Business Continuity Planning (BCP)
3. BCP Certification Process
4. BCP manual
5. Critical success factors
6. Description of testing with in Chemical (API) manufacturing
Johan Maes
Worldwide Chemicals
• A group of 4 API manufacturing sites across the world
–
–
–
–
Geel – Belgium
Cork – Ireland
Schaffhausen – Switzerland
Athens – GA, USA
• Each having a specific product portfolio but standard equipment
platforms
– Fine API production, synthesis production
– Batch processes
• All sites working in a very regulated environment
– Safety perspective
– Regulatory perspective
Our implementation of BCP (1/2)
• A global process across the network
– Local part for External Manufacturing (EM) and Internal Manufacturing
(IM) (site specific)
– Global part for business recovery (BR)
• EM & IM regular drills throughout the year on every site
• External assessment for 1 site on a rotating basis
• Other sites do internal assessment every year
• The assessment
– Simulation versus tabletop for EM & IM
– Virtual or real for BR
• Results are shared across the sites
Our implementation of BCP (2/2)
Emergency
Response
Incident
Management
Business
Recovery
Appendices
Owned by the EHS department
Based on existing procedures and processes
Set up as OCT / DCT
Integrated process
Owned by global supply chain
Goal is to secure supply to the market
Using existing internal resources and
option to use external partners
Run by global SC group
The scenario
Scenarios for review and verification of the Business Continuity Plan
Scenario I
Explosion and fire in Plant III
Due to incorrect dosing during a Friedel-Craft reaction, an exothermic reaction is
caused.
As a result of the uncontrollable reaction the reactor explodes.
At the time of the explosion various production activities are taking place at the
reactor level.
Pure raw materials are being pumped from the pure tank park and 2500 liters of
highly flammable fluids are being pumped out of 200-liter drums into a reactor
alongside the exploding reactor.
The resulting explosion triggers a chain of events, domino style: escape of solvents to
the outdoor environment, product spillage from broken pipelines, smashed glassware,
etc.; all combine to produce an explosive mixture at the various lower levels of Plant
III.
A second explosion at these lower levels causes very severe damage in Plant III,
making the plant non-operational. These explosions also cause severe damage to the
nearby pipe rack. Because of the severe damage to the pipe rack, pure raw materials
can no longer be pumped to Plants I and II and Plant IV for a considerable length of
time.
Detailed scenario
14.40
BBW aan OCT met situatieschets
DCT Info
- Plant III
o tweede explosie op 7 meter
o grote verwoesting aan installaties
o twee medewerkers worden vermist
- Pijpen rek ter hoogte plant III en tankpark
o gestart met het blussen van de plasbrand
o koeling voor tankpark is voorzien
- Distributie centrum chemisch magazijn
o spill van aceton +/- 50 liter
o explosie gevaar in de zone van de spill
o twee vermiste personen gevonden, nog geen
namen bekend
o we moeten beide slachtoffers nog ontzetten
14.XX
Golf aan OCT
Verschillende hulpdiensten zullen zich aanmelden
- Brandweer Westerlo
- Brandweer Mol
- Brandweer Balen
- ziekenwagen Geel
Simulation
The Business Recovery tabletop
• Meet with the global supply chain group
• Inform the team about the incident
• Start the process of what is needed to secure supply taking into
account the lost capacity
–
–
–
–
–
Which products are critical
Which capacity is affected, hence which products
What are the alternative production options for those products
What capacity can we free up
Who do we have to inform
• Internal management
• Regulators
– …
The scoring grid
! "
!
#
"
# "
$
"
%
%
&
#
$
#
$
(
'
)
*
*
*
"
,
"
$
*
+
&
"
+
"
,
+
,
+
"
,
"
(
(
.
-
%
/
%
%
%
"
%
0
%
%
"
1+
,
0
2&
3%
!
!
=
.
9
;
!
.
+
5
,
%
.
.
,
,
!67 8
!:; <
24
%
!