Pfizer Inc. Implementing a Business Resiliency Program and Transitioning from Emergency Response to Crisis Management to Business Continuity 1 Take-Aways from This Presentation • Information on how to implement the following Business Resiliency Programs on a site level: Programs on a site level: – Emergency Response – Crisis Management – Business Continuity program • Guidance on how to transition from: 2 – Emergency Response – Crisis Management – Business Continuity
Transcript
Pfizer Inc.Implementing a Business Resiliency Program and Transitioning from Emergency Response to Crisis Management to Business Continuity
1
Take-Aways from This Presentation
• Information on how to implementthe following Business Resiliency Programs on a site level:Programs on a site level:– Emergency Response– Crisis Management– Business Continuity program
• Guidance on how to transition from:
2
– Emergency Response– Crisis Management– Business Continuity
Incident Progression
Immediate Short Term Long Term
B i C ti it (W k d )
Emergency
Crisis Management
BusinessContinuity (Recovery)
ncid
ent
Business Continuity (Workarounds)
3
g yResponseIn
Phase 1 Phase 2 Phase 3
The immediate response to an emergency, focusing on protecting life, environment, and property
The overall coordination of an organization’s response to a crisis in an effective timely manner
The Pfizer Resilience Model
Emergency Response
Crisis The overall coordination of an organization s response to a crisis, in an effective, timely manner, with the goal of avoiding or minimizing damage to the organization
The ability to continue Pfizer’s critical business processes and to protect Pfizer’s critical assets during outages or business disruptions and to manage the return to business-as-usual operations
Activities designed to restore Information Technology (IT) systems, including hardware, applications and telecommunications systems from outages
Disaster Recovery
Crisis Management
Business Continuity
Disaster Recovery
4
y
Business Continuity
Crisis Management
Emergency Response
Incident
Time
Pfizer La Jolla SiteEmergency Response Program
5
Pfizer’s Emergency RespondersIncident Commander (IC) – For Chemical Spills, Fires & Explosions, and Natural DisastersE C di t (EC) F C fi d S E i M di l E i d B ildi E ti
Pfizer La Jolla SiteEmergency Response Program (1/3)
Goal: To Immediately Respond to an Emergency withFocus on Protecting Life, Environment, and Property
Emergency Coordinator (EC) – For Confined Space Emergencies, Medical Emergenices, and Building EvacuationsDan Shiel xxx xxxMilton Perez xxx xxxLisa Bonomo xxx xxxCharles Geraci xxx xxx
Emergency Coordinators (EC) – For Violence in Workplace, Civil Disturbances, Bomb Threat, & Building Evacuation (ALT)Skip Joyce xxx xxx
Emergency Coordinators (EC) – For Elevator Failures, Utilities Failure & Building EvacuationsCarl Millwood xxx xxxMike Burnett xxx xxxJim Condelles xxx xxx
6
Other Emergency ContactsRyan Henderson (Veolia) xxx xxxMike Engler (Veolia) xxx xxxCarol Devine (OHW) xxx Xxx
Risk Management Services Emergency Phone: xxx
S p JoyceDarrell McCoy xxx xxxSean Mullen xxx xxx
Incident Commander: A designated person who is HAZWOPER trained that will coordinate HAZWOPER incidents (such as chemical spills)Emergency Coordinator: A designated person who is trained to coordinate NON-HAZWOPER incidents (such as bomb threats &elevator entrapments)
Pfizer La Jolla SiteEmergency Response Program (2/3)
• Incident Commander (IC) & EmergencyCoordinator (EC) Duties:– Coordinating the response during emergencies:
• IC / EC is the one person in charge of theemergency response
• All colleagues involved in emergency responsereport to IC / EC– Evacuation Coordinators & Roll Call Coordinators– Facilities on-call technician– Security officer
– Will maintain command, unless an EC or IC withmore expertise assumes command
– Establishes a Command Post at or near the lobby of the affected building in the event of
7
obby o t e a ected bu d g t e e e t oan evacuation• The IC / EC has the discretion to change the
Command Post AND the building assemblyarea location based on the circumstancesat the time of the incident
– Keeps senior management informed of the situation• Immediately informs Crisis Management Leader
of situation
Pfizer La Jolla SiteEmergency Response Program (3/3)
• Site Resources for Emergency Response:– Site Emergency Action Plan (EAP) SOP
• Highlights how the site responds to all possible emergency situations (e.g., natural disasters chemical spills civil disturbances etc )disasters, chemical spills, civil disturbances, etc.)
Team DrillsHighl skilled (trained) site colleag es
8
– Highly skilled (trained) site colleagues:• Incident Commanders (30 hour HAZWOPER training)• Emergency Coordinators• Building Evacuation & Roll Call Coordinators• Security Operations Center (SOC)• All site colleagues trained on the Emergency Action Plan• Business Emergency Response Team (BERT)
• BERT = Business Emergency Response Team• A free program administered through the Fire Department
with the goal of providing emergency response training to
Pfizer La Jolla SiteBusiness Emergency Response Team (BERT)
What Is BERT? g p g g y p g
business members
• In an actual crisis situation the Fire Department would not be able to immediately respond to our needs– BERT members would be able to provide initial response (at least for
the first 1–2 days after an incident)Example: Major earthquake with damages to buildings & roads
BERT?
What Is the Rational for
BERT?
9
• Work in conjunction with our site Incident Commanders / Emergency Coordinators to respond to emergency situations whereas there is no immediate response expected fromlocal authorities
What Would Pfizer BERT
Members Do?
Transitioning from Emergency Responseto Crisis Management
• Crisis Management Leader:– Meets with CM “Core Team” consisting of:
• CM Coordinator– CM Coordinator is the “boots on the ground” and is
designated to provide needed info to CM Leader• Communication Officer
– Ensure the appropriate information is communicated bothinternally & externally
• Admin Support– Responsible for records & documents related to the incident
– Activates site Crisis Management Team
11
• CM Team consists of SM Experts from each business line
– If necessary will keep Business Continuity Team Leaderappraised of the situation
Does Your Crisis Management Program Look Something Like This?
Typical Crisis Management
12
Crisis Management
Accepted Crisis Management Definition“The overall coordination of an organization’s response to a crisis in anThe overall coordination of an organization s response to a crisis in an effective and timely manner with the goal of avoiding or minimizing damage to the organization’s profitability, reputation or ability to operate.”
– Rania Azmi, University of Alexandria
• Protect lives and property• Preserve company brand and reputationGoals of a
C
13
p y p• Reduce the impact of a crisis• Reduce business losses• Avoid chaos
Crisis Management
Program
Unified Command Organizational Structure
• xxx
CM Leader
• xxx
IC / EC
• xxx
CM Coordinator
• xxx
Communications Coordinator
• xxx
CM Team
• xxx
Admin Support
• xxx
Site
14
• xxx
Incident Advisor• xxx
Corporate
• xxx
Media
Crisis Management Resources
• Key contact information for all CM / BC Team members• Organizational chart and role profiles• Site crisis hotline number & dial in instructions• Accessing public address system
Crisis Management /
Business Continuity
• Updated quarterly & color codedBooklets
• Quick reference guideCrisis
Management Quick Cards
• Designated Conference Rooms for CM & BC teamEmergency Operations
15
• Storage center for emergency suppliesOperations
Centers
• Outside storage bunker with emergency supplies and building maps• Used if can not access building(s)• Emergency response equipment can be used by Fire Department
Emergency Response
Bunker
Transitioning from Crisis Management to Business Continuity
Transitioning from Crisis Management to Business Continuity
• Crisis Management Leader:– Communicates with Business Continuity Leader
throughout the incident
• Business Continuity Leader:– Meets with BC “Core Team”– Implements the Business Continuity Team
• Holds conference call with BC Team Leaders• Site BC Team consists of SME’s from each
business line
17
• Business Continuity Team:– SME’s will evaluate critical processes and
determine how best to continue operations
Pfizer Inc.Business Continuity Resources
• Provides standardized methodology for Business Continuity
Worldwide Business Continuity Management (WBCM) Group
• Leverages resources from other sites to perform critical processes if necessary
• Site BCM colleagues sharing their BCM Programs and Best
Business Continuity Management Network
18
g g gPractices
• Harmonize similar groups BC programs– Aligns similar critical processes, applications, dependencies, etc.
Defining Business Continuity
• The ability of an organization to provide service and support for its customers and to maintain its
Business Continuity
viability before, during, and after a crisis event(BC)
• A subset of the BCP plan designed to identify and prioritize critical business functions
Business Impact
Analysis (BIA)
19
Business Continuity Plan (BCP)
• A plan that provides guidance to help an organization continue its critical business functions after a crisis event
The Pfizer Business Continuity Management (BCM)Methodology Consists of a Six-Step Process
Pfizer BCM Methodology Overview
Initiate BCM Program
ConductBIA & RA
Select Recovery Strategies
20
Maintain Plans & Improve
Capabilities
Train, Exercise, & Distribute
Plans
Document Business
Continuity Plan
Business Continuity Program Implementation on Site Level
• Develop Business Continuity Plans where risks cannot be mitigated– “BCP At A Glance”
• Distribute the Business Continuity Plan to Team Members and Key Stakeholders– Conduct exercises and complete post-exercise
evaluations– Lessons learned are identified and shared
• Maintain the Business Continuity Plan– Business lines practice continuous improvement
B i C ti it Pl d t d ll
21
– Business Continuity Plans are updated annually or after major organization changes have occurred
– Appropriate stakeholders are trained and aware of the plan contents and changes
Business Continuity Plans
• Develop Business Continuity Plan “At A Glance”
Short version of a BCP– Short version of a BCP– Used during time of activation of BC Team– Elements of a typical “BCP at A Glance”
