Business continuity and disaster recovery planning
The Director of Marketing and Communications outlined a number of principles and procedures, summarised within a draft Crisis Action Plan, and designed to form the basis of a new b usiness continuity and disaster recovery plan for the University. This sought to address recommendations made in Internal Audit report 3 of 2003/04, and had been refined following discussions at the Monday Morning Management Group and with the recently appointed Head of Security.
Based on a distinction between 'physical' emergencies, such as fires, notificable diseases etc, whose status was usually clear cut, and 'reputational' situations, which required more careful consideration, the following specific proposals were made.
The Vice-Chancellor, or her designate, would decide when a situation presenting a possible reputational risk should be deemed to be an emergency and, if so deemed, appoint a chairman to manage the situation.
In respect of physical emergencies, an Emergency Control team should be formed. This would be chaired by the Deputy Vice-Chancellor, with the Registrar as the designated deputy.
The Emergency Control Team should oversee preparation of the final version of the Crisis Action Plan and the production of an Emergency Operations Manual.
The Head of Security would update and circulate contact details of all core members and alternates of the Emergency Crisis team and of key officers to the same group of individuals.
The Director of Marketing and Communications and Head of Security would organise training for dealing with physical emergencies.
Agreed:
i)
That in-principle approval could be given to the proposals. The Director of Marketing and Communications would arrange for an Executive Policy Statement to be submitted to the Committee for final approval. He would also consult with the Head of Security about arrangements for dealing with emergencies in the student residences in the city centre.
ii) That the Director of Computing Services would prepare supplementary guidelines on measures taken to ensure IT resilience and also ensure that robust communication systems were in place to enable remote contact with all Committee members.
iii) That the Director of Human Resources would arrange for a proper record of staff next of kin to be maintained on the TRENT system.