CONTINGENCY PLANNING

Operation plans and the command's organizational manual are prepared and executed for the accomplishment of the command's specific mission. These operation plans assume normal working conditions, the availability of command resources and personnel, and a normal working atmosphere. Despite careful use of preventive measures, there is always some likelihood that events will occur that could prevent normal operations and interfere with the command accomplishing its mission. For this reason, contingency plans are included in the AIS security program. For the purpose of this chapter, we refer to these contingency plans as the Continuity of Operations Plan (COOP).

Three different types of contingency plans makeup a COOP security program for an AIS facility:

Emergency response. There should be procedures for response to emergencies, such as fire, flood, civil commotion, natural disasters, bomb threats, and enemy attack, to protect lives, limit the damage to naval property, and minimize the impact on AIS operations.

Backup operations. Backup operation plans are prepared to ensure essential tasks (as identified by the risk analysis) can be completed subsequent to disruption of the AIS and that operations continue until the facility is sufficiently restored or completely relocated.

Recovery. Recovery plans should be made to permit smooth, rapid restoration of the AIS facility following physical destruction or major damage.

Each AIS facility should establish and appoint members to a formal board to construct, review, and recommend command procedures for approval in creating a COOP program. Figure 4-12 shows suggested tasks and how they may be set up and assigned. Each AIS facility will need to adapt to its own special circumstances and make full use of the resources available to it.

EMERGENCY RESPONSE PLANNING

The term emergency response planning is used here to refer to steps taken immediately after an emergency occurs to protect life and property and to minimize the impact of the emergency. The risk analysis should be reviewed by the AIS technical manager to identify emergency conditions that have particular implications for AIS operations, such as protection of equipment during a period of civil commotion and subsequent to a natural disaster (fire or flood, for example). Where civil commotion and natural disaster are found, local instructions should be developed and implemented to meet the special needs of the AIS facility. These instructions and procedures may be designated the "Loss Control Plan" and implemented as part of COOP.

Loss control can be particularly important to the AIS facility. In a number of recent fires and floods, the value of being prepared to limit damage is amply demonstrated. By reviewing operations and the locations of critical equipment and records with shift leaders, the AIS technical manager can develop measures to use in case of an emergency. The guidelines should be similar to the following:

^1. Notify online users of the service interruption.

2. Terminate jobs in progress.

3. Rewind and demount magnetic tapes; remove disk packs.

4. Power down AIS hardware and cover with plastic sheeting or other waterproof material.

5. Put tapes, disks, run books, and source documents in a safe place.

6. Power down air-conditioning equipment.

If evacuation of work areas is ordered or likely, instruct all personnel to:

Figure 4-12.-Organization and tasks for COOP.

1. Put working papers and other unclassified material in desks or file cabinets and close them.

2. Turn off equipment, but leave room lights on.

3. Close doors as areas are evacuated, but ensure that locks and bolts are not secured.

The loss control plan should define the steps to be taken, assign responsibilities for general and specific steps, and provide any needed materials and equipment in handy locations. In some cases, ample time will be available to take all measures, but in extreme emergencies, life safety will dictate immediate evacuation. For this reason, the loss control plan should designate one or more individuals in each AIS area who, in the event of an emergency, will determine what can be done to protect equipment and records without endangering life, and direct AIS staff members accordingly.

Earlier in this chapter, we discussed measures to protect the facility against the effects of fire. Semiannually, review the protective plans with the operations division officer to assure that all normal requirements and any special requirements of the AIS facilities are satisfied. At the same time, brief upper management on the AIS facility plans and status, to get their advice and to ensure good coordination.

When emergency response planning is completed and approved, it should be documented succinctly for easy execution. See figure 4-13.