North Hampshire Urgent Care

Disaster Recovery Plan (DRP)

The principal objective of the disaster recovery program is to develop, test and
document a well-structured and easily understood plan which will help the North
Hampshire Urgent Care recover as quickly and effectively as possible from an
unforeseen disaster or emergency which interrupts information systems and
business operations. It must be noted that NHUC does not provide or support any of
its IT infrastructure and that this is provided by Frimley Park Hospital and North
Hampshire Hospital. In the event of an actual emergency situation, modifications to
this document may be made to ensure physical safety of our people, our systems,
and our data.

The principle purpose is to ensure information system uptime, data integrity and
availability, and business continuity are resumed and maintained as soon as
possible.

Policy Statement

Objectives

• The disaster recovery plan will covers all essential and critical infrastructure
elements, systems and networks, in accordance with key business activities.
• To ensure that proposed contingency arrangements are cost-effective
• When a disaster occurs at one site it is important to consider implications on
other sites
• To ensure that all employees fully understand their duties in implementing such a
plan

Risk Management

There are many potential disruptive threats which can occur at any time and affect
the normal business process. Each potential environmental disaster or emergency
situation has been examined. The focus here is on the level of business disruption
which could arise from each type of disaster.

Potential disasters have been assessed as follows:

Brief Description Of
Probability Impact Potential
Potential Disaster
Rating Rating Consequences &
Remedial Actions
Fire Low Severe Relocation of the
service into a
different part of the
hospital. Switch
operations to
alternative base in
the short term
IT Systems failure High Moderate Revert to manual
paper systems for
the duration of the
 North Hampshire Urgent Care

failure
Utility Failure – Gas Low Low FT disaster recovery
plan
Utility Failure – Moderate High FT disaster recovery
Electricity plan
Telephone Failure High Moderate Mobile phone back
ups
Flooding – External Low Moderate FT disaster recovery
causes plan
Flooding – Pipe/tank Moderate Low FT disaster recovery
burst plan
Severe weather High Low See Adverse
weather plan
Infrastructure Low Moderate Relies on health
problems e.g. fuel economy
contingency plan
Infectious disease – High Low Isolation process
single case
Infectious disease – Low High Pandemic flu policy
outbreak
Pandemic flu Moderate High Ditto
Contamination incident Low High Isolation and deep
cleaning processes
of FT
Major casualty incident Low Moderate Emergency FT
plans
Catastrophic incident Very Low High Emergency FT
e.g. terrorism plans

Emergency Response

Activation of the Disaster Recovery Plan (DRP)

When an incident occurs the DRP must be activated. All employees must be
issued a Quick Reference card containing DRP contact details to be used in the
event of a disaster. Responsibilities of the lead on-duty manager are to:

• Respond immediately to a potential disaster and call emergency services;

• Assess the extent of the disaster and its impact on the business and the
immediate impact on the services’ ability to provide safe patient care.
• Establish and manage disaster recovery team to maintain vital services and
return to normal operation;
• Ensure employees are notified and allocate responsibilities and activities as
required.

On duty management Team

The team's responsibilities include:

• Establish facilities for an emergency level of service within 2.0 business hours;
• Restore key services within 4.0 business hours of the incident;
• Recover to business as usual within 8.0 to 24.0 hours after the incident;
 North Hampshire Urgent Care
• Coordinate activities with disaster recovery team, first responders, etc.
• Report to the emergency response team.

Emergency Alert, Escalation and DRP Activation

All staff must have a clear understanding of who should be contacted. Procedures
have been addressed to ensure that communications can be quickly established
while activating disaster recovery.

The DR plan will rely principally on key members of management and staff who will
provide the technical and management skills necessary to achieve a smooth
technology and business recovery. Suppliers of critical goods and services will
continue to support recovery of business operations as the company returns to
normal operating mode.

Emergency Alert

The person discovering the incident calls a member of the Emergency Response
Team or the trusts IT team, in the order listed:

Emergency Response Team

• Estates issues at FT sites – on-call teams
• • IT issues at FT sites - on-call teams
• Adastra issues – service desk
• Other operational issues – Operations Manager
• System wide issues – Chief Executive

One of the tasks during the early stages of the emergency is to notify the Chief
Executive or their deputy that an emergency has occurred. A senior member of the
NHUC’s management team will be responsible for taking overall charge of the
process and ensuring that the company returns to normal working operations as
early as possible.

DR Procedures for Management

Members of the management team will keep a hard copy of the names and contact
numbers of each employee in their departments.

Personnel and Family Notification

If the incident has resulted in a situation which would cause concern to an
employee’s immediate family such as hospitalisation of injured persons, it will be
necessary to notify their immediate family members quickly.

Media
What information will be passed to the media must be considered and by whom.

Only the Chief Executive or deputy is permitted direct contact with the media; anyone
else contacted should refer callers or in-person media representatives to the media
team.
 North Hampshire Urgent Care
Legal Issues

NHUC will review the aftermath of the incident and decide whether there may be
legal actions resulting from the event; in particular, the possibility of claims by or
against the company for regulatory violations, etc.