aio business continuity plan

Upload: joe-fedele

Post on 14-Apr-2018

222 views

Category:

Documents


0 download

TRANSCRIPT

  • 7/30/2019 AIO Business Continuity Plan

    1/12

    Updated 5/8/2013

    1

    All-In-One, Inc.

    d/b/a

    Business Continuity

    and Disaster

    Preparedness Plan

  • 7/30/2019 AIO Business Continuity Plan

    2/12

    Updated 5/8/2013

    2

    Table of Contents

    Document ObjectiveI. Purpose......... 3

    Business Location and Crisis ManagersI. Business Location. 4

    II. Crisis Managers... .. 4Emergency Contact Information........... 5

    AIO Essential Business Partners / External Collaboration Members... 5

    Plan ScopeI. Remote Danger to Employees and Visitors. 6

    II. Immediate and Direct Threat to Persons on Site. 6III. Site is Inaccessible from External Locations... 6

    Situational ProceduresI. Level 1 Evacuation.. 7

    II. Level 2 Shelter-In-Place.. 8

    III. Level 3 Alternate Location.. 9Cyber Security and Data Backup

    I. Cyber Security.... 10

    II. Data Backup.. 10Employee Emergency Contact Information... 11

    Plan Updates and Distribution 11Authentication of Document.. 12

  • 7/30/2019 AIO Business Continuity Plan

    3/12

    Updated 5/8/2013

    3

    Document Objective

    I. PurposeAIOs mission to provide safe and fun activities to its visitors will be disrupted atsome point, though we will not know at what time or in what manner. This

    uncertainty is addressed in the following pages, where future stressors and obstaclesto the organization are anticipated, analyzed and countered by careful planning and

    direction. The detailed situations and strategies indicated throughout this document

    will be implemented in the event of any unexpected and afflictive events in order to

    mitigate theireffect of on AIOs essential operations.

    It is extremely important that all AIO employees read and fully understand the

    content of AIOs Business Continuity and Disaster Preparedness Plan. As will soon

    be indicated, all employees will play significant roles in carrying out this plan, on

    which the safety and satisfaction of our visitors and AIO team, as well as our essentialbusiness functions rely. We ask that in the event of such an emergency, all

    employees remain calm and abide by the following Plan to all extents possible. If aunique and dangerous situation arises that forces employees to stray from the Plan,

    we ask that the employees use their best judgment with concern for the safety and

    well-being of our AIO visitors, themselves, and other members of the AIO team.

    At any time, any AIO employee feeling unsure or confused about not only their

    role, but the overall procedures and effects of the Plan, is encouraged to seek reviewor clarification of the contents of the Plan from any member of the AIO EmergencyManagement Team (listed below). Electronic and paper copies of the Plan will be

    distributed upon request for review, and we ask that any concerns are addressed in a

    meeting with AIO Emergency Management Team members directly. As always, we

    appreciate the cooperation and commitment of our AIO staff team.

    Sincerely, the AIO Emergency Management Team:

    Michelle L. Blasz Carly R. Hacker Joseph A. Fedele

    Chief Operations Officer Chief Executive Officer Chief Financial Officer

    716-691-9265 716-276-8432 716-283-4972

    716-777-4842 716-777-4840 [email protected] [email protected] [email protected]

    mailto:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]
  • 7/30/2019 AIO Business Continuity Plan

    4/12

    Updated 5/8/2013

    4

    Business Location and Crisis Managers

    I. LocationAIO (and all of its essential business functions) is located at:

    3100 Lake Shore Road (Route 5)

    Blasdell, NY 14219`

    II. Crisis ManagersPrimary Emergency Contact / AIO Spokesperson:

    Michelle L. Blasz

    Chief Operations Officer716-691-9265

    716-777-4842

    [email protected]

    Secondary Emergency Contact / Alternate AIO Spokesperson:

    Carly R. Hacker

    Chief Executive Officer716-276-8432

    716-777-4840

    [email protected]

    mailto:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]
  • 7/30/2019 AIO Business Continuity Plan

    5/12

    Updated 5/8/2013

    5

    Emergency Contact Information

    ** In an emergency, please dial 911 first **

    Blasdell Police..................... (716) 851-4415

    Buffalo Water Authority...................... (716) 847-1065

    Allstate Insurance, Annette K. Winder (716) 649-0325

    5555 Camp Road, Hamburg NY 14075

    National Fuel Gas......... 1-800-444-3130

    National Grid (Electric).... 1-800-867-5222

    Time Warner Cable (Internet/Phone)... 1-866-826-1948

    Erie Country Sewer Authority.. (716) 823-8188

    AIO Essential Business Partners /

    External Collaboration Members

    Rich Products Corporation. (716) 878-8000

    One Robert Rich Way, Buffalo, NY 14213

    Rich Products is an essential supplier of frozen food products for the AIO

    Bar & Grill function. We have worked with them for procedures regarding

    cancellation of orders/deliveries in the event of a business disruption.

    Republic Steel (716) 827-8213

    3049 Lakeshore Road, Blasdell, NY 14219

    Republic Steel is an emergency planning collaborative as a valuableneighboring organization. We have worked with the Blasdell location

    management to create our evacuation plan, which makes use of Republic

    Steels parking lot as a gathering site for AIO visitors and employees.

  • 7/30/2019 AIO Business Continuity Plan

    6/12

    Updated 5/8/2013

    6

    Plan Scope

    The AIO Emergency Management Team has analyzed the essential businessfunctions of the organization, and established comprehensive plans to be

    implemented in the event of the following types of situations. Taking into account

    the means and focus by which AIO operates, we have considered these to be thecircumstances most threatening, and have presented them in detail for careful

    identification in practice.

    I. Remote Danger to Employees and VisitorsThis title covers any situation in which remaining on the AIO business

    location site would pose a threat to the safety or health of AIO employees and

    visitors. Examples of this type of situation may include smoke or fire in any

    of AIOs functional areas, a natural gas leak within the building, or the

    potential of explosives or hazardous waste on site.. Visitors and employeeswill be notified of the existence of a situation of this type from a member of

    the AIO Emergency Management Team via the site-wide PA system. It will

    be announced promptly as a Level 1 Evacuation, and employees are asked

    to abide by the associated plan dictated on the following pages.

    II. Immediate and Direct Threat to Persons on SiteThis title covers any situation in which leaving the premises or even

    remaining in the normal operative positions on location poses a threat to the

    health or safety of all individuals present. Examples of this type of situation

    may include sudden and extreme weather conditions, such as tornado-likewinds, harsh blizzard conditions, and severe lightning storms, during hours of

    operation, or threat of violence or terror by a visitor, employee, or intruder

    anywhere at the AIO location. Visitors and employees will be notified of theexistence of a situation of this type from a member of the AIO Emergency

    Management Team via the site-wide PA system. It will be announced

    promptly as a Level 2 Shelter-In-Place, and employees are asked to abideby the associated plan dictated on the following pages.

    III. Site is Inaccessible from External LocationsThis title covers any situation in which AIO employees and visitors cannot

    safely and/or legally get to or enter the AIO premises. Examples of this type

    of situation may include imminent or happening extreme weather conditions,

    such as tornado-like winds, harsh blizzard conditions, and severe lightningstorms, before hours of operation, structural or breathing air integrity at the

    site has been compromised, or a ban on travel or community lockdown has

    been established by local authorities. Scheduled visitors and employees willbe notified of a situation of this type by telephone and local media closings

    announcements. The situation will be indicated as a Level 3 Alternate

    Location to AIO employees.

  • 7/30/2019 AIO Business Continuity Plan

    7/12

    Updated 5/8/2013

    7

    Situational Procedures

    I. Level 1 Evacuation:ASSEMBLY SITE: Republic Steel parking lot

    3049 Lake Shore Road, Blasdell, NY 14219

    1. In the event of a remote danger to employees and visitors, a member ofthe AIO Emergency Management Team will announce across the site-wide (including outdoor areas) audio system the need for a full

    evacuation of the premises.

    2. Employees will gather visitors under their watch, and calmly instructand lead them outside and across Lake Shore Road (Route 5) to the

    above indicated assembly site.

    3. Primary or Secondary Emergency Contact will contact mostappropriate emergency resource(s) immediately following his or her

    safe exit and retreat from AIO location.

    4. Most senior AIO Maintenance/Grounds staff member will perform aquick sweep of the premises to ensure all visitors and employees haveexited safely, only when it does not put him or her in unreasonable

    danger.

    5. Assembly site managers (one for each AIO functional division) willmeet employees and their groups of visitors at the assembly site.

    Dressed in orange vests and hats, and equipped with mobile

    communication devices and attendee lists, assembly site managers willrequest medical assistance for any individual in the gathered group in

    need.

    6. Once medical attention (if needed) has been called for, assembly sitemanagers will call role of AIO employees present and visitors

    scheduled if individuals names have been made available.

    7. Assembly site managers will utilize the mobile communication devicesto obtain updates and instruction from AIOs Primary or Secondary

    Emergency Contact.

    8. Primary and/or Secondary Emergency Contact will work closely withexternal emergency resources to identify the problem and mitigate thedamage. He or she is ultimately responsible for issuing the all-clear,

    as well as speaking with authorities or media if need be.

    **The audio warning system will be tested monthly and these Evacuationprocedures will be tested /practiced in full implementation 4 times per

    year during regular business operation.

  • 7/30/2019 AIO Business Continuity Plan

    8/12

    Updated 5/8/2013

    8

    II. Level 2 Shelter-In-Place:ASSEMBLY SITE: AIO Bar & Grill basement level

    3100 Lake Shore Road, Blasdell, NY 14219

    1. In the event of an immediate and direct threat to persons on site, amember of the AIO Emergency Management Team will announce

    across the site-wide (including outdoor areas) audio system the need to

    take on-site shelter immediately.

    2. Employees will gather visitors under their watch, and calmly instructand lead them to the basement assembly area of the AIO Bar & Grill.

    3. Primary or Secondary Emergency Contact will contact mostappropriate emergency resource(s) immediately following his or her

    safe arrival at the AIO basement assembly area.

    4. Most senior AIO Maintenance/Grounds staff member will perform aquick sweep of the premises to ensure all visitors and employees haveexited safely, only when it does not put him or her in unreasonable

    danger.

    5. Assembly site managers (one for each AIO functional division) willmeet employees and their groups of visitors at the basement assembly

    site. Dressed in orange vests and hats, and equipped with mobilecommunication devices and attendee lists, assembly site managers will

    request medical assistance for any individual in the gathered group in

    need.

    6. Once medical attention (if needed) has been called for, assembly sitemanagers will call role of AIO employees present and visitorsscheduled if individuals names have been made available.

    7. Assembly site managers will utilize the mobile communication devicesor meet with AIOs Primary or Secondary Emergency Contact at the

    assembly site for updates and instruction.

    8. Primary and/or Secondary Emergency Contact will work closely withexternal emergency resources via mobile communication devices to

    assess the situation and mitigate the damage, with personal safety of

    visitors and AIO employees as the biggest priority. He or she is

    ultimately responsible for issuing the all-clear, as well as speakingwith authorities or media if need be.

    **The audio warning system will be tested monthly and these Shelter-In-

    Place procedures will be tested /practiced in full implementation once per

    year outside regular business operation.

  • 7/30/2019 AIO Business Continuity Plan

    9/12

    Updated 5/8/2013

    9

    III. Level 3 Alternate Location:**Due to the unique and diverse business functions of AIO, including the

    vast equipment needed, it is not feasible for us to fully operate at analternate location. In the event that the AIO site is inaccessible from

    external locations, the Sportsplex, Lodging facilities, and Bar & Grillfunctions will cease for the entire period of time our primary location is

    unreachable.

    1. If the closing of the AIO facilities is not forced by municipaldirections, AIO executives will meet in person or via phone to make

    the decision of whether it is safe to remain open or that AIO must

    close its facilities in the interest of visitor and employee safety.

    2. As soon as the decision to close the AIO facilities is made, the CEOwill be responsible for notifying local media (television and radionews outlets), as well as key business partners of AIOs temporary

    close.

    3. Managers of the three AIO functions (Sportsplex Manager, LodgingManager, and Bar & Grill Manager) will be responsible for contacting

    employees and scheduled visitors from their home offices in order tonotify the employees and visitors of the closing situation, as well as to

    answer questions visitors may have.

    4. The Honeywell automatic generator is programmed to kick on in theevent of prolonged electricity loss. It will run the food stores for the

    AIO Bar Grill as well as keep the facility heated to 38F to preventfreezing if temperatures drop below this point.

    Although the Sportsplex, Lodging facilities, and Bar & Grill will not be

    operational in the event of a Level 3 situation, AIOs business functionswill need to continue.

    5. Executives and upper management will continue to perform theirregular work via their AIO-distributed Laptops from their own homes.

    6. Accounts payable, receivable, and payroll will be completed by theaccounting staff also on their AIO-distributed laptops from home, andthe CFO will be responsible for ensuring such continued financial

    tasks and recording procedures.

    7. Any meetings that must take place in person will occur at CEOs homeoffice (currently Carly R. Hacker, 6814 Oak Street, North Collins, NY

    14111), but ONLY if travel has not been banned by municipalauthorities and they travel does not put AIO executives in

    unreasonable danger of harm.

  • 7/30/2019 AIO Business Continuity Plan

    10/12

    Updated 5/8/2013

    10

    Cyber Security and Data Backup

    I. Cyber SecuritySoftware: The AIO local network is equipped with Cisco firewall

    protection, and all AIO computers are protected with Kaspersky Antivirus

    software.

    Hardware: AIO computer hardware is protected by customized personal

    password capabilities, and the equipment is kept in locked offices or in the

    possession of manager or executive users at all times.

    Because all AIO computer capabilities will be handled on AIO-distributed

    laptops which travel home with users each night, destruction of on-site

    equipment will not be an issue. Executives and managers will utilize theirlaptops from their home offices to continue to complete essential business

    recording and communication functions.

    II. Data BackupQuickbooks, AIOs accounting system software, is responsible for backing

    up our critical records, including payroll, accounting, and booking

    systems. Consistent with our paperless business strategy, we do not keeppaper copies of accounting records on site. They will be accessed from

    the Quickbooks cloud.

    Digital copies of important non-accounting records (continuity plans, site

    maps, insurance policies, bank account records, and computer backups)

    will be backed up with the Norton Online Backup and accessible from

    external locations.

  • 7/30/2019 AIO Business Continuity Plan

    11/12

    Updated 5/8/2013

    11

    Employee Emergency Contact Information** To be updated as AIO team members are hired

    Employee Name Current Position Off-location Number Emergency Contact

    Blasz, Michelle L. Chief Operations Officer 716-691-9265 716-524-9804

    Bowman, Alex B. AIO Sportsplex Manager 716-998-3323 716-653-4117

    Fedele, Joseph A. Chief Financial Officer 716-283-4972 716-824-6652

    Hacker, Carly R. Chief Executive Officer 716-276-8432 716-746-0749

    Hill, Alex. C. Chief Marketing Officer 716-688-7154 716-348-2667

    Keenehan, Alicia D. AIO Bar & Grill Manager 716-948-3387 716-628-1678

    Plan Updates and Distribution

    The AIO Business Continuity and Disaster Preparedness Plan will be

    continuously reviewed and updated annually by the AIO Emergency

    Management Team.

    The contents of the Plan are distributed to and reviewed with new AIOemployees upon their starting work. A yearly meeting is held with all

    employees to review the plan and cover any updates or revisions that havebeen made.

    As is previously stated, questions about the Plan should be directed toward

    the AIO Emergency Management Team.

  • 7/30/2019 AIO Business Continuity Plan

    12/12

    Updated 5/8/2013

    12

    Authentication of Document

    This official document was prepared and reviewed by the AIO Emergency Management Team.Latest version updated May 8, 2013.

    Michelle L. Blasz Carly R. Hacker Joseph A. Fedele

    Michelle L. Blasz Carly R. Hacker Joseph A. Fedele

    Chief Operations Officer Chief Executive Officer Chief Financial Officer