Follow through on these plans are well documented with
emphasis on coordination, execution and the right outcome
with minimum business impact and assurance on the reliability
of the system at large and process of business continuity in
short. A system of accountability is an integral part of the
overall business continuity capability. A focused approach in
building a structured team effort is a hallmark of the whole
exercise. The focus areas range from clinical issues affecting
operations and potential impact on businesses are always
taken up with care and a thorough approach is developed to
handle these issues, such as H1N1 readiness or issues around
sudden eruption of endemic caused by a resistant strain in a
localised area of hospitals, for example the ICU or operating
theatre. Or a BCM plan for an issue arising from an
operational challenge due to system unavailability due to major
hardware failure in a business critical server. The BCM Plan
will revolve around the clinical aspects of managing this
incident or workout with KPJ IT services to reduce the impact
to as minimal as possible and ensure faster recovery and
follow through on the incidence.
Regular review of these incidences is one of the core activities
of the committee under business operations and are discussed
at every fortnightly meetings. Every two months, risk register
meetings are held to vet through impact and challenges and
input is recorded on improvements and fine tuning of the
issues. All initiatives and any BCM related activity is always
updated at the top management meetings to ensure
organisation wide continuity on reliance of the fall back
mechanisms under BCM.
PROGRESS AND CONTINUITY OF THE BCM PLAN
Risk register maintenance under the Business Development
Unit at KPJ Healthcare is an important part of continuum of
business process development. Also the area of impact to
business under each business units are a regular feature of
development at respective business units. The input from all
the business units are gathered under business development,
Risk Office, to structure the risk register and create best
possible approaches to handle the probability built around the
scenarios.
For IT-related risks, a DR Drill is conducted on annual basis.
Nevertheless, in the last two (2) years, our gradual transition
from virtualised/client-based implementation to cloud has
enabled us to build a more robust DR platform that allows for
all hospitals under this network to share information more
effectively, in a safe and secure environment.
We are planning to bring more hospitals onto the cloud model
due to better throughput, including a more efficient centralised
command and control for business critical applications as well
as processes via the cloud system. KPJ IT Services is
currently working on further improving DR system, which will
enable the system to be recovered at processor level for each
virtual machine in the Data Centre at KPJ Cloud.
We routinely discuss the scenarios around the development of
IT and impact on the business. A structured approach is
employed to evaluate business impact coming from the ever
changing environments in the fast paced dynamics of
information technology at KPJ Healthcare. A very robust
Helpdesk is developed around this to gather proper feedback
and a system of aligning the change management in line with
the development of DR Plans and streamlining those changes
to ensure proper recovery protocols are adhered, at times of
need. This has helped hospitals to adopt cloud with ever
increasing confidence, as assurance of reliability remains at
the core of shift from conventional to new. As an ever
Every two months,
risk register
meetings are held
to vet through impact and challenges and
input is recorded on improvements and
fine tuning of the issues
A structured approach
is employed to evaluate
business impact
coming from the ever changing environments in
the fast paced dynamics of information
technology at KPJ Healthcare
186
KPJ Healthcare Berhad annual report
2014
Business Continuity
Management
