Nursing Home Disaster

Recovery Plan:

Be Smart… Be Prepared

Shane Molinari, MSc, CISSP, PMP, ITSM, SSMBB

Crisis  and  DR  Management  Overview

Workplace  Violence:20-­‐34  years  old:  highest  vic�m  rate71%  killed  by  strangers29%  killed  by  associates  and  personal  connec�ons

Natural  Disasters:$46.8B  in  damage3,533  injuries90%  deaths  by  storm  and  exposure  (633)

Data  Breech:  #1  surpassing  drug  trafficking$56.6B  in  costs  (not  including  fines)80%  data  loss  due  to  Malware

3

Statistical  Examples  from  2011

Direct  Impact  Statement

✤ Nursing staff were not prepared to be sole medical provider

✤ Ex: 75% of deaths via Hurricane Katrina were 60 years and older

WHY?

Problem  Statement

✤ Lack of detailed governance and processes hamstrings C3

✤ Diminished communications between operations staff and stakeholders means rework and significant cost overruns

✤ Inability to recognize precipitous distress events increases risk of DR related sickness, injuries, and LOD death

Solution:  What  To  Do

Risk

Management

Strategic

Alignment

Value

Delivery

Resource

Management

Performance

Management

C 3

Governance

Business  Con�nuity

BS25999

Core  Competencies

Roadmap  for  Success

TRAINING  &  AUDIT

STANDARDS  &  BEST  PRACTICES

ENSURE

SUSTAINABILITY  &  

COMPLIANCE

DEVELOP

MITIGATION  

STRATEGIES

RESOLVE

WEAK

AREAS

DOCUMENT

CURRENT  STATE

Results:  Continuity  and  Sustainability

10

What’s  Needed  to  Succeed

✤ Continuity of Operations Plan

✤ Actionable Disaster Recovery Plan

✤ Security Plan

Continuity  of  Operations  Plan  (COOP)

✤ Readiness and Preparedness

✤ Activation and Relocation

✤ Continuity Operations

✤ Reconstitution Operations

Actionable  Disaster  Recovery  Plan✤ Recognize and align with COOP

✤ ID critical Business and Technology recovery time frames

✤ Recovery Strategic, Tactical, and Operational Governance

✤ Specify Recovery Team Roles, Responsibilities, & Qualifications

✤ Emergency Procedures

✤ Document Training & Maintenance Procedures

Security  Plan

✤ Applies to all and perspective must be systemic

✤ Minimum standard for all supporting activities and systems

✤ Security policies, assigns responsibilities and prescribes procedures

✤ Describes the organization’s security program

✤ Complies with the intent of prevailing privacy legislation

Questions  and  Answers

Contact  info

S h a n e M o l i n a r i , P r i n c i p a l

( E ) s h a n e m @ b c m p ro f e s s i o n a l s . c o m

( U ) B C M P ro s . c o m

( O ) 8 8 8 - 5 8 7 - 4 7 6 9

( M ) 8 5 0 - 6 2 5 - 2 4 9 1