Title Page
-
Conducted on
-
Prepared by
-
Location
Checklist
Threat response
-
If there is a high probability of an event occurring, consider the following:
-
Identify incident management team members, including an incident manager, and alternates
-
Identify business and information technology recovery team leaders and alternates
-
Update all critical internal and external contact lists. Include the following information:<br>* Home address<br>* Home telephone<br>* Cellular phone<br>* Pager<br>* Blackberry<br>* E-mail address
-
Establish a conference bridge. Provide all incident management team members the conference bridge number and pass code
-
Establish a voice mail box for employees to monitor for status updates
-
Determine if you should place third party business continuity and disaster recovery service providers on alert if you are a subscriber
-
Ensure that monitoring service vendors (e.g., alarm company) have current contact information
-
Develop procedures to account for employees
-
Provide employees with threat response procedures, if appropriate (e.g., bomb threat, evacuation)
-
Create backup tapes and ship off site
-
Identify a crisis command centre outside of the anticipated impact area
-
Top off emergency generators and arrange for additional fuel deliveries
-
Acquire battery-operated radios with spare batteries.
Incident detection and preliminary assessment
-
Follow company emergency response procedures
-
Conduct a preliminary damage assessment, if it can be done safely. No recovery activities should be undertaken if personnel are placed in danger
-
Notify the incident manager and provide a detailed report.
Activate incident management team
-
The incident manager will determine if the incident management team should be activated and if necessary
-
Notify Incident Management Team Members<br>* Provide a description of the event<br>* Request that they assemble at the crisis command centre or participate via a conference call
-
Activate the crisis command centre.
Evaluate disaster impact
-
Determine if the severity of the impact requires implementation of the recovery plan
-
Determine recovery objectives including:<br>* Priorities<br>* Recovery strategies<br>* Action plans<br>* Assignments.
Activate recovery plan
-
Notify recovery team leaders and members
-
Brief recovery team leaders and alternates regarding:<br>* Priorities<br>* Strategies<br>* Action plans<br>* Assignments<br>* Reporting and communications procedures
-
Declare a disaster with your third party business continuity and disaster recovery service provider if you are a subscriber.
Implement support procedures
-
As directed by the incident manager, incident management team support personnel will provide recovery support to all affected business units.
Audit
-
Consult/provide advice on changes to standard operating procedures to be implemented during the recovery effort
-
Ensure that the following policies and standards are maintained during the recovery effort:<br>* Financial security and control policies<br>* Anti-fraud policies<br>* Information security standards
-
Provide reports and recommendations to the IMT as required
-
Provide additional resources to other business units during the recovery effort as needed.
Corporate communications
-
Establish a media briefing centre
-
Coordinate all media communications
-
Review and approve all statements regarding the incident
-
Develop both internal and external communications
-
Coordinate recovery related advertising with external vendors
-
Instruct employees to direct all media inquiries to corporate communications.
Environmental and safety
-
Ensure the health and safety of employees
-
Ensure that response activities to address fire, spills and/or medical emergencies are performed in accordance with regulatory guidelines
-
Notify regulatory agencies of the incident as required
-
Enlist the assistance of vendors and agencies to assist in support activities as appropriate.
Facilities
-
Conduct detailed damage assessment
-
Conduct salvage and restoration activities
-
Acquire replacement office space if necessary
-
Notify tenants of the incident and provide periodic updates regarding the condition of their affected office space.
Finance
-
Ensure funds are available for recovery
-
Ensure that all recovery expenditures are properly documented
-
Set up a recovery cost centre
-
Estimate the impact of the incident on the company’s financial statement.<br>Food Services
-
Provide foods services to recovery personnel at the alternate operating locations.
Human resources
-
Account for all personnel
-
Assist public authorities in handling casualties (i.e., identification of victims, family notifications, etc.)
-
Monitor the condition and location of the injured
-
Coordinate employee communications with corporate communications
-
Coordinate additional or temporary staffing for recovery effort
-
Provide counselling services as required
-
Administer company personnel policies as they apply to response and recovery
-
File Worker’s Compensation claims
-
Assist employees with incident related benefit administration
-
Complete and submit HSE Reports as required.
Insurance
-
Coordinate with insurance broker on the preparation and filing of all insurance claims
-
Document proof of losses
-
Submit claims and monitor payments
-
Establish a debris management programme.
Information Technology
-
Conduct computer system and telecommunications damage assessment
-
Activate alternate operating locations (for system recovery)
-
Recover computer systems and network environment(s)
-
Acquire and install replacement desktop computer equipment
-
Re-establish data network connections to external resources (branch locations, vendors)
-
Implement all telephone response plans (re-routing critical telephone numbers)
-
Arrange for all alternate site telephone installations
-
Ensure all system security devices and procedures are in place.
Legal
-
Manage all required regulatory notifications
-
Provide legal counsel for response and recovery operations
-
Review and approve new contracts acquired as a result of the event, before implementation.
Offices services (mailroom, shipping/ receiving)
-
Re-establish mail and shipping services
-
Re-direct all mail and parcel receipts to alternate operating locations.<br>Purchasing
-
Manage all incident related purchasing
-
Acquire office supplies, forms and equipment for affected business units
-
Implement any necessary short-term financial tracking controls, using designated cost centres.
Records management
-
Coordinate with information technology to ensure the recovery of the records management system
-
Coordinate with business units in retrieving all off site backup records
-
Lead records reclamation and reconstruction efforts.
Security
-
Coordinate onsite security for affected facilities and all alternate operating locations
-
Control access to affected facilities
-
Monitor equipment and records being removed from facilities.
Transportation
-
Provide local transportation during response and recovery activities as required
-
Provide travel arrangements and accommodations for employees travelling to remote recovery locations.
Track incident status and recovery progress
-
Conduct periodic debriefing sessions with recovery teams to monitor progress and determine problem areas
-
Reallocate and/or provide resources.
Sign Off
-
Name and Signature
