5th ME Business & IT Resilience Summit 2016 - Implementing Business Continuity within an Airline

1

Continuity and Resilience (CORE)

ISO 22301 BCM Consulting Firm

Presentations by speakers at the 5th Middle East Business & IT Resilience Summit

20 – 21 April 2016 – Palace Hotel DownTown Dubai

Our Contact Details:

INDIA UAE

Continuity and Resilience

Level 15,Eros Corporate Tower Nehru Place ,New Delhi-110019

Tel: +91 11 41055534/ +91 11 41613033 Fax: ++91 11 41055535

Email: [email protected]


P. O. Box 127557 Abu Dhabi, United Arab Emirates

Mobile:+971 50 8460530 Tel: +971 2 8152831 Fax: +971 2 8152888


Please write to us if you would like to get in touch with the Speaker

Implementing Business Continuity within an Airline

5th Middle East Business Continuity and IT Resilience Summit, Dubai

Charlotte Hems, AMBCI

Thursday 21st April 2016

2

Case Study

Who?

• Leading Middle East national airline

What?

• Deliver a comprehensive package of activity to enhance company resilience by development and delivery of a Business Continuity knowledge transfer project.

3

Project Brief To design, deliver and test a Business Continuity knowledge transfer programme for a leading Middle East national airline • Aligned to international BC standards ISO22301:2012 • Complement the organisation’s existing Emergency Management Strategy • To support the 5 key business priorities: 1. Operate a safe airline 2. Ensure this was the first choice airline for the region 3. Increase business profit and reduce cost 4. Prepare for airline growth and expansion 5. Promote regional tourism

4

Approach Developing a Business Continuity Management System via a two-phased approach:

Phase 1 – Gap analysis

• Management buy-in

• Documentation review

• Key stakeholders

• Critical activities

• Approach/improvements

• Phase 2 - Business Continuity Management System (BCMS) implementation

• Governance

• Training

• Documentation & Testing

• Supply Chain

• Identification of improvements

5

Project Successes

65 airline staff members trained in global BC standards

Developed and implemented accepted practice project governance arrangements for BCM

Creation and acceptance of a BC Policy and BC Manual

Formation of a project steering group with the recommendation that this group evolves into the company business continuity working group

Raised management awareness of BC as a core function of management of a commercial airline

Designed, delivered and provided recommendations from a series of table top exercises, focused on validating nascent arrangements

Developed a BC culture

6

Challenges and Lessons Learnt

• Attitudes

• Management Challenges

• Training

• Agile approach Lessons Learnt

7

Airline Business Continuity – How does this differ to other industries?

• BCM is BCM with one major exception……flight safety

• Integral part of the transportation system

• Part of critical national infrastructure, so there are wider impacts than commercial

• Airlines are keen to improve customer confidence - BC enables that

• Consideration given to regional and global impacts of disruption

• Prolonged airport disruptions can result in the loss of critical functions

• Many airlines have emergency plans but not necessarily BC plans

• Complex and multiple stakeholders

• Aggressive recovery time objectives & maximum tolerable period of disruption timeframes

• Airline people are acutely aware of the media focus on them

8

Summary

• What next? Continuity of business continuity

• Culture

• BC isn’t just about pieces of paper and manuals – develop your people

9

Q&A

10

Appendices

11

Appendix 1: BCM Standards & Good Practice BCM Standards and Good Practice

Title Category Impact on Airline BCMS

ISO 22301:2012, Societal security – Business continuity management systems –

Requirements

International Standard Informs and is accepted practice in some aviation organisations/carriers.

BCM Standard and Guide, AE/HSC/NCEMA 7000: 2012, Version 1, National Crisis and

Emergency Authority (NCEMA) UAE

UAE National BCM Standard Regional/neighbouring country standard – could inform accepted practice

Business Continuity Institute (BCI) Good Practice Guidelines 2013, Global Edition Good Practice Guidance on accepted practice, BCI approved training based on this material

ISO 27001 - Information Security Management International Standard Includes requirement of continuity, availability and currency of information. BCM

planning adds requirement data to inform information security arrangements

UK CAA CAP 1244 2014 Passenger welfare at times of major disruption – guidance for UK

airports

Good Practice Due to collaborative nature of aviation this document is also relevant to airlines

ISO 28000:2007, Specification for security management systems for the supply chain International Standard Supply chain standard focusing on security issues

BS EN ISO 9001:2008, Quality management systems – Requirements

International Standard Quality Management System standard, providing information on ensuring

continuous improvement applicable to BCM

BSI PD 25222:2011, Business continuity management – Guidance on supply chain continuity

Standard Guidance on supply chain continuity based upon good practice

ISO/TS 22318:2015(E), Societal security – Business Continuity management systems – Guidelines for supply chain continuity

International Standard Further guidance specific to supply chain issues

12

Appendix 2: The BCM Lifecycle

13

14

Continuity and Resilience (CORE)

ISO 22301 BCM Consulting Firm

Presentations by speakers at the 5th Middle East Business & IT Resilience Summit

20 – 21 April 2016 – Palace Hotel DownTown Dubai

Our Contact Details:

INDIA UAE


Level 15,Eros Corporate Tower Nehru Place ,New Delhi-110019

Tel: +91 11 41055534/ +91 11 41613033 Fax: ++91 11 41055535



P. O. Box 127557 Abu Dhabi, United Arab Emirates

Mobile:+971 50 8460530 Tel: +971 2 8152831 Fax: +971 2 8152888


Please write to us if you would like to get in touch with the Speaker

5th ME Business & IT Resilience Summit 2016 - Implementing Business Continuity within an Airline

Leadership & Management

Transcript of 5th ME Business & IT Resilience Summit 2016 - Implementing Business Continuity within an Airline