Awareness, Training and Exercising
Awareness Training - Module 1 - Resilience - an overview of what we mean by Resilience, Incident Response / Management and Business Continuity Management.
Awareness Training - Module 2 - Introduction to the Emergency Plan - a short overview of some of the key points of the University's Emergency Plan. Note the Emergency Plan precis on this web page and also the full Emergency Plan.
Awareness Training - Module 3 - Imperials Response Groups - an overview of the primary incident management groups used by Imperial - the First Responder, Bronze, Silver and Gold Groups.
Awareness Training - Module 4 - Incident Categories and Escalation - a consideration of the type of incident that could affect Imperial and the likely response. Note this does not dictate the scale / severity of the Incident and so does not dictate what response Groups will be in play.
Awareness Training - Module 5 - Response Overview - some detail on how Imperial manages the response to an incident.
Business Continuity Management (BCM)
Business Continuity is the capability to continue to deliver Important Business Services and Prioritised Activities, Services or Products within identified timelines and to identified levels in the event of a disruption.
The Business Continuity Management Programme provides the strategic framework for how Business Continuity will be undertaken at Imperial.
Specific operational guidance for completing the templates will be provided shortly.
The following templates will be required to undertake Business Continuity Planning.
The Business Impact Analysis Template. This spreadsheet is the mechanism for understanding what you need to continue - i.e. the Prioritised Activities, Services or Products. These are identified when you assess that the impact of the loss of an activity, service or product will cause a Major impact within a week or an Extreme impact within a month. It helps to identify the Recovery Time Objective (how quickly you want an activity etc to be operational) and the Maximum Acceptable Outage (how long you can be without an activity etc before there is an unacceptable loss to the University).
Once the Prioritised Activities, Services or Products have been identified, they need to be individually analysed to identify what resources are required to deliver them to the correct level and what could be done to continue them if the resources are not available. This is achieved with the Resource & Risk Analysis Template which should be completed for each individual Prioritised Activity, Service or Product.
There are two primary outputs from Business Continuity Planning - enhanced organisational resilience and a Business Continuity Plan (BCP). There are two BCP templates for the University - a Departmental Business Continuity Plan (BCP) template and a Service Business Continuity Plan template.
There are two variations in the process which are intended to make the process simpler and more appropriate.
For some short-term projects, events, visits for which there are risk registers and contingency plans, a separate approach is taken. This is explained in more detail in the BCM Programme (Section 6).
Where there is critical infrastructure or high value equipment that is used by more than one Department, Service or Faculty, it makes no sense for all to undertake the same level of resource analysis. Instead, the Vulnerability Assessment Template has been developed which should be undertaken by the 'owner' of the facility or piece of equipment. This will make an assessment of any gaps, weaknesses or vulnerabilities and provides an opportunity to rectify them. If it is not possible immediately, then the planner should raise the vulnerability as a risk on the Departmental / Service risk register using the CoreStream risk management system.
The ICL - BCM process overview summarises the process of BCM at Imperial.
University Emergency Plan & associated documentation
The University Emergency Plan v2 is the framework document that explains the Incident Management process at Imperial.
- It identifies the Incident Management Group structure in relation to level of command and control (Bronze - Operational, Silver - Tactical, Gold - Strategic).
- It identifies 5 levels of response relating to the command and control structure in place.
- It identifies what is expected of the individual Services and Departments in preparing for emergencies.
- It identifies 5 different types of incident and how the response is escalated.
- It provides the response and recovery structures, a glossary, a list of most likely incident types and the likely response, maps, and incident response role cards for key responders.
Emergency Plan Precis v2.1 - A summary of the key features from the Emergency Plan, updated 25th March 25.
For members of the Gold Group there is a Gold Group Aide Memoire.
For members of the Silver Group there is a Silver Group Aide Memoire.