Policy Directory

BUSINESS CONTINUITY MANAGEMENT POLICY

Date first approved:

14 July 2009

Date of effect:

On Approval

Date last amended:

14 March 2017

Date of Next Review:

14 March 2020

First Approved by:

Administrative Committee

Custodian title & e-mail address:

Chief Finance Officer
business-assurance@uow.edu.au

Author:

UOW Business Continuity Coordinator

Responsible
Division & Unit:

Business Improvement & Assurance Division

Supporting documents, procedures & forms:

Business Continuity Management Guidelines
Business Continuity Templates

Risk Management Policy

Risk Management Guidelines

UOW Emergency Management Plan

IMTS Disaster Recovery Plan
Critical Incident Guidelines

Delegations of Authority Policy

Business Continuity Management Group Terms of Reference

Relevant Legislation
&
External Documents:

AS/NZS 5050:2010 Business continuity-Managing disruption-related risk
ISO 22301: 2012 Societal security – Business continuity management systems
ISO 22313: 2013 Societal security – Business continuity systems – Guidance
AS/NZS ISO 31000:2009 – Risk management – Principles and guidelines

Audience:

Public – accessible to anyone

Contents

1 Purpose of Policy

  • 1. Business Continuity Management aims to achieve the framework for resilience and response capability in order to safeguard people and operations as well as to uphold confidence in the organisation.
  • 2. The purpose of this Policy is to ensure that UOW is well equipped to respond to a wide variety of disruptions in order to support the continuing availability of processes and resources to achieve its business objectives.

2 Definitions

Word/Term

Definition

Business Continuity Framework

The overall collection of management processes and documents that establishes, implements, operates, monitors, reviews, maintains and improves business continuity.

Business Continuity Plan (BCP)

A collection of procedures and information that is developed, compiled and maintained in readiness for use in an incident, emergency or disaster to facilitate resumption of those processes that are essential to the delivery of outputs and achievement of key business objectives.

Business Impact Analysis

(BIA)

The process of identifying and assessing the risks of impacts that interrupt business processes and determining priorities in the resumption of normal operations.

UOW Support Units

These units include (but are not limited to) the Business Continuity Management Group (BCMG), Workplace Health and Safety (WHS), Information Management and Technology Services (IMTS), Security, Facilities Management Division (FMD), Staff Services, Student Services Division (SSD), Government Relations, Strategic Marketing and Communications Unit and Business Improvement and Assurance Division .

3 Application & Scope

  • 1. This policy applies to all faculties, divisions and significant University activities including regional campuses and controlled entities.
  • 2. This Policy is supported by the Business Continuity Management Guidelines and is an integral component of the Business Continuity Framework.

4 Objectives

  • 1. In the event of a disruption to its business processes, UOW aims to meet the following objectives:
      • a. to provide timely availability of all key resources necessary to operate critical business processes to an acceptable level of operation;
      • b. to ensure University community health, welfare and confidence;
      • c. to maintain customer/staff/student/stakeholder contact and confidence;
      • d. to fulfil regulatory requirements; and
      • e. to control expenditure and reduce any extraordinary costs caused by an event.

5 Business Continuity Principles

  • 1. Business continuity principles require that a complete, organised and effective Business Continuity Framework is in place that establishes, implements, operates, monitors, reviews, maintains and continually improves viable, responsive and practical business continuity processes for UOW, in alignment with the University’s Risk Management Framework.
  • 2. The University is committed to the establishment and maintenance of Business Continuity Plans (BCP) for each Faculty, Division and Unit where necessary, to maintain continuity of critical business functions within acceptable timeframes. All Plans should incorporate the specified requirements which are set out in the BCP template, including resource requirements and recovery strategies.
  • 3. A Business Impact Analysis (BIA) is the primary data collection tool in the development of the Plans. The BIA determines business continuity priorities, in accordance with a risk-based assessment, and includes specified requirements which are set out in the BIA template.
  • 4. Regular testing, knowledge development and awareness programs are to be undertaken as required to ensure that staff are familiar with the Business Continuity Framework.

6 Business Continuity Management Relationships

  • 1. The Business Continuity Framework is informed by the University’s Risk Framework. It contains integrated relationships with the UOW Emergency Management Plan (EMP) and Information Management and Technology Services (IMTS) Disaster Recovery Plans (IT-DRP) depending on the type and severity of the incident.
  • 2. The Business Continuity Management Group (BCMG) will oversee and monitor the Business Continuity Governance operations, which includes an indirect relationship with the Emergency Management Group (EMG) and receiving reports from the Senior Executive Emergency Management Group (SEEMG).
  • 3. The following diagram depicts the broad structure of Business Continuity Management at the University:

Image

  • 1. The Business Continuity Management Group is the overarching governance body for the University of Wollongong’s Business Continuity Management Policy and framework, and oversees development of supporting Guidelines, plans and programs.

7 Version Control and Change History

Version Control

Date Effective

Approved By

Amendment

1

1 December 2004

Vice Principal(Administration)
UOW Internal Audit Manager

First Version

2

27 April 2006

UOW Internal Audit Manager

Update distribution list

3

14 July 2009

Administrative Committee

Major Revision of Policy

4

16 January 2012

Vice-Principal (Administration)

Updated to reflect divisional name change from Buildings and Grounds to Facilities Management Division.

5

24 May 2012

Vice-Principal (Administration)

Updated to reflect the transfer of BCMS responsibilities from UOWIA to Finance and the document registration sequence

6

20 Sept 2012

DVP – Finance & IT for VP(A)

Triennial Scheduled Review and name change from OHS to WHS

7

11 Sept 2013

Chief Administrative Officer

Updated to reflect title change from VPA to CAO

8

9 February 2016

Vice-Chancellor

Triennial Scheduled Review – minor updating and alignment to UOW Risk Management Policy and Guidelines

9

23 March 2017

Vice-Chancellor

Reviewed to reflect the agreed changes to the BCM Framework

Here to Help

Need a hand? Contact the Governance Unit for advice and assistance on policy issues.