What is Continuity of Operations Planning Continuity of

What is Continuity of Operations Planning? Continuity of Operations Planning (COOP): The effort to ensure that essential functions can continue across a wide range of potential emergencies. It is the process of maintaining the business of the University. COOP Planning addresses three scenarios: 1. Loss of access to a facility (as in a fire); 2. Loss of services due to a reduction in workforce (as in pandemic influenza); and 3. Loss of services due to a systems failure (as in IT or communications systems failure). 1

COOP Purpose 4 4 4 4 2 Ensure the continuous performance of an organization’s essential functions during an emergency; Ensure the safety of employees; Protect essential equipment, records and other assets; Reduce disruptions to operations; Minimize damage and losses; Achieve an orderly recovery from emergency operations; and Identify relocation sites and ensure operational and managerial requirements are met before an emergency occurs.

All Hazards Approach to COOP Planning 3

What is the difference between a COOP Plan and an Emergency Response Plan? VT Emergency Response Plan 4 4 4 Immediate actions taken to respond to an event COOP Plan 4 Planning for “after the response” 4 Continuing operations of department in primary or alternate facility 4 Protecting vital records 4 Ensuring leadership of department Guidance on Department Emergency Action Plan 4 4 4 Building evacuation instructions 4 Fire alarm drills 4 Emergency Response actions

Industry Standards 4 4 4 4 5 Emergency Management Accreditation Program (EMAP) Standards (2003, 2004) National Fire Protection Association (NFPA) 1600 FEMA Interim Guidance Document on COOP Planning Federal Preparedness Circular-65 National Incident Management System (NIMS) FEMA Disaster-Resistant University Guidance NIST – Contingency Planning Standard for IT VDEM’s COOP Planning Manual for Institutions of Higher Education

Virginia COOP Authorities Executive Order 44 (2007) 4 Each executive branch agency including institutions of higher education with guidance from their Emergency Coordination Officer: 4 4 4 Create or update Continuity of Operation Plans to conform to the template produced by the Virginia Department of Emergency Management, and Utilize the resources available from the Virginia Department of Emergency Management for creating or updating Continuity of Operations Plans. “The process of creating or updating Continuity of Operations Plans shall be completed by April 1 of each year…” § 44 -146. 18 Code of Virginia (2005) 4 “The … Department of Emergency Management shall in the administration of emergency services and disaster preparedness program … provide guidance and assistance to state agencies and units of local government in developing and maintaining emergency management and continuity of operations (COOP) programs, plans and systems…” Executive Order 69 (2004) 4 All executive branch agencies are directed to exercise and test their COOP plans on or before Sept 1, 2005. Executive Order 65 (2004) 4 Assigns each designated state department or agency to appoint a lead and one alternate Emergency Coordination Officer for the agency. Included in their responsibilities is the coordination on emergency preparedness, response, and recovery issues. 6

Key COOP Goals for Virginia Tech 4 4 4 7 People will know who is in charge; There will be trained backup personnel; There will be predefined alternate work locations; Essential functions, vital systems, data and information will be able to be recovered quickly; and Predefined checklists will guide the organization in responding to an event.

Key COOP Objectives for Virginia Tech 4 4 4 8 Ensure the safety of students, employees and visitors; Provide COOP activation and implementation guidance; Essential functions will be operational no later than 12 hours after activation; Essential functions will be capable of operation for up to 30 days at the alternate site; Regular training, testing and exercising of COOP personnel, equipment, processes and procedures will occur; and COOP Plan will be activated with and without warning.

9 Elements of a COOP Plan 1. 2. 3. 4. 5. 6. 7. 8. 9. 9 Essential Functions Delegations of Authority Orders of Succession Alternate Facilities Interoperable Communications Vital Records, Systems and Equipment Human Capital Management Tests, Training and Exercises Reconstitution

Essential Functions 4 Activities, processes or functions which could not be interrupted or unavailable for several days without significantly jeopardizing operations of the University 4 Examples of essential functions 4 Teaching 4 Ensuring access to vital records, i. e. grades 4 Conducting 4 10 research Essential functions only --not everything the department is responsible for

Delegations of Authority 4 4 Delegations of authority specify who is authorized to make decisions or act on behalf of key department personnel Delegation planning involves: 4 4 4 11 Identifying which authorities can and should be delegated; Describing the circumstances under which the delegation would be exercised, including when it would become effective and terminate; Identifying limitations of the delegation; Documenting to whom authority should be delegated; and Ensuring designees are trained to perform their emergency duties.

Orders of Succession 4 4 Orders of Succession provide for an orderly and predefined transition of key departmental leadership Succession of Leadership planning involves: 4 4 12 Identifying the key leadership positions that require Orders of Succession; Describing the conditions under which the succession would be exercised, including when it would become effective and terminate; Identifying limitations of the succession; and Documenting the designated successors.

Alternate Facility 4 4 Pre-position, maintain or provide for minimum essential equipment for continued operations of critical processes at the alternate facility There are several types of alternate facilities with different readiness levels: 4 4 4 13 Hot Site—all systems and records necessary to begin operations; Warm Site—some systems and records available, but requires some time and additional resources to become fully operational; and Cold Site—a location with no pre-installed systems or records from which to begin operations. Least expensive option, but it takes the most time to begin recovery or reconstitution operations.

Selecting an Alternate Facility 4 Factors to consider in selecting an alternate facility 4 4 4 4 4 14 Location – Risk-free environment, geographically dispersed Construction – Safe from high-risk areas Space – Space for personnel, equipment and systems Transportation – Consider public access, public transportation, proximity to hotels and restaurants Communications – Support data and telephone communication requirements Security – Controlled access Life Sustaining – Access to life sustaining essentials such as food, water and lodging Site Preparation Requirements – Time, effort and cost required to make ready Maintenance – Degree of maintenance required to keep the facility ready

Interoperable Communications 4 Ability to communicate to all members of the University community 4 Alert and Notification methods and redundancies 15

Vital Records, Systems and Equipment 16 4 Records, files, systems, documents, equipment or databases, which would require extensive effort and/or expense to recreate or replace if damaged or destroyed 4 Due to legal, regulatory or operational reasons, access to these records, systems or equipment cannot be lost or damaged without severely impacting the department's ability to function

Human Capital Management 4 Ensuring essential functions continues even with reduced staffing 4 Trained, back up personnel who can fill a recovery team position when the primary staff person is unavailable 17

Test, Training and Exercises 4 COOP Program Management specifies regular testing and exercising of plan 4 Revise 4 Train 18 plan after each test/exercise to execute plan

“Work the Plan” 4 Planning is a journey. Work does not end with the development and implementation of a COOP plan 4 4 Distribution and Communication Training 4 4 Testing and Exercises Revising and Updating 4 4 19 Key Personnel Refresher at Alternate Site Establish review cycle (coordinate with budget cycle) Update plans with material changes (moves, new systems, employee turnover)