How many of you have contingency plans for a Pandemic in your BCP?

Here’s what the FFIEC says about it:

The FFIEC agencies believe the potentially significant effects a pandemic could have on an institution justify establishing plans to address how each institution will manage a pandemic event. Accordingly, an institution’s business continuity plan should include:

1. A preventive program to reduce the likelihood an institution’s operation will be significantly affected by a pandemic event;

2. A documented strategy that provides for scaling pandemic efforts commensurate with the particular stages of a pandemic outbreak;

3. A comprehensive framework of facilities, systems, or procedures to continue critical operations if large numbers of staff members are unavailable for prolonged periods;

4. A testing program to ensure the institution’s pandemic planning practices and capabilities are effective and will allow critical operations to continue; and

5. An oversight program to ensure ongoing review and updates to the pandemic plan.

We did a drill last year that was actually pretty useful; I think we found out where people have unique knowledge, unduplicated skills, etc. And that comes in handy for all kinds of disasters, even as minor as a car accident or a cold.

I think this question may have been asked before, BTW. I seem to remember writing a much longer version of the same comment. :)

Yes, Heath asked about this: “Are pandemic plans necessary?” (I kinda went off on the mic.)

We have added the Pandemic plan to our BCP. It was a good thing as well simply because the State really looked at the Pandemic part of the plan. Our DR person did a great job and they had no recommendations, but they did leave us with a verbal suggestion. They stated that banks need to take this seriously and that the plan should have a “statement of purpose” from the Board saying that they fully support the following initiatives. If banks don’t get hit with a Pandemic exam this year, it will be almost a guaranty for the next.