Resilience is dependent upon personnel availability to maintain critical business processes. Personnel could be unavailable or distracted during such events as natural disasters, severe weather events, or pandemics.Refer to the FFIEC’s FFIEC Releases Guidance on Pandemic Planning. While any one employee’s role may not be designated as mission critical, management should plan for mass absenteeism during an event or disruption. Previous catastrophic events (e.g., Hurricane KatrinaRefer to the FFIEC’s Lessons Learned From Hurricane Katrina: Preparing Your Institution for a Catastrophic Event.) demonstrate that personnel availability affects timely recovery.
Management should plan for events during which personnel may not be able to access facilities and critical personnel may not be available immediately after the disruption. Public infrastructure and transportation systems may not be operating, and telecommunication systems may be overburdened and unavailable. Therefore, management should consider:
- Staffing and skills needed to operate critical functions related to business continuity.
- Lodging arrangements for displaced employees and their families.
- Basic necessities and services for displaced employees, including water, food, clothing, childcare, transportation, and cash.
- On-site medical support and mobile command centers.
- Secure telecommunication options if employees work from an alternate location.
- Designated emergency personnel, including critical business process-level employees.
IV.A.3 Data Backup and Replication
IV.A.5 Third-Party Service Providers