Project 03-18: Operational and Business Continuity Planning for Prolonged Airport Disruptions

1. ACRP Airport Cooperative Research Program Project 03-18: Operational and Business Continuity Planning for Prolonged Airport Disruptions AGTA Meeting Round II Workshop – 3:00 PM Michael J. Corby, CISSP, CCP, PMP Principal Investigator September 14, 2010

2. Agenda • Traditional Business Continuity Planning • Specifics of ACRP 03-18 • Project Team Structure and Current Activities • Scope of Included Operations • Research Plan • Targeted Deliverables • Wrap-up

3. APPROACH Project Management Business Impact Analysis Gap Analysis & Strategy Plan Development & Integration Testing &Maintenance ACTIONS • Establish steering committee • Identify roles and responsibilities • Develop project plan • Customize status reporting tools • Prepare kickoff presentation • Kickoff Presentation • BIA Questionnaire • Periodic Status Reports • Conduct BIA interviews/ workshops • Distribute and complete BIA questionnaires • Review BIAs and conduct follow-up interviews • BIA Workshops • Business Requirements Summary • Identify and document resource requirements based on BIAs • Conduct gap analysis • Prepare strategy options presentation • Gap Analysis and Strategy Options presentation • Strategy Development workshop • Conduct Manual Workaround and Data Restoration workshop • Complete Business Relocation Plan • Prepare plan model with completed BCP • Business Relocation Plans • Manual workarounds • Data restoration plans • Plan and conduct structured walkthrough/ tabletop exercise • Prepare maintenance and testing procedures • Walkthrough testing • Maintenance and testing procedures RESULTS Traditional Business Continuity Planning Process

4. ACRP 03-18 Background • ACRP is authorized by Congress and funded as part of the annual FAA appropriation process. • Project 3-18 is a fifteen month project to: • survey, research, review and analyze the current practice of business and operational continuity at US airports of all kinds (approach, status, strengths, weaknesses, successes, failures), • create a best practices Guidebook, Interactive Tool, and Critical Path Flowchart for use by ALL types of airports, and • outreach and presentations to the industry to help promote understanding, adoption and use.

5. Background • Research project, not a commercial project • Very precise project management and reporting process • Program Officer – Theresia “Sia” Schatz • Project Panel comprised of airport industry experts • we deal with each of their issues, comments, input monthly • Monthly formal written reports: • Cover letter • Complete accounting of work completed • Outline of work to be done next month • Any problems encountered, recommended fixes (or statement of none)

6. Role Summaries • Principal Investigator • Drives substance of data collection, analysis, document review • Interfaces with BCP standards, guidance bodies • Speaks at targeted events • Hands-on BCP work – airport facing • Heavy documentation • Drives approach and content of deliverables • Senior Business Continuity Planners • Owns the BCAP process execution – business-facing • Owns the pro forma BCP implementations • Speaks at targeted events • Heavy documentation • Core contributors of content for deliverables • Technical Writer • Technical project management and ProjectManager.com • Schedule coordination • Direct reporting – format

7. Critical Project Focus • Business and operational continuity for prolonged airport disruptions • Effects of disruptions, NOT their causes (so NOT emergency management or crisis management or safety/security oriented) • Scope is • horizontal - across the entire airport operation, from the municipalities, counties and authorities <and private companies> that own/operate airports, including offsite systems in play • vertical – addressing all airport-sited, airport-affected, airport-proximate organizations that can be affected by prolonged disruptions and are in the “airport economic footprint” • Car rental, restaurants, hotels, extra-modal transportation, Hudson News, TSA, General Aviation commercial ops (FBO’s, SASO’s) and non-commercial ops (corporate flight departments), FAA, and all landside and airside operations of all kinds • Deliverables must be highly practical, useable, applicable, and implementable by non-BCP personnel

8. Airport Types Primary Large Hub Medium Hub Small Hub Non-hub Non-primary commercial Cargo Reliever General Aviation FBOs and Other Entities Airside Entities, for example: Fuel Maintenance Airlines Operations Groundside Entities, for example: Security Baggage Handling Ticketing Government Entities TSA FAA CBP ICE Military Air Operations Types of Airports

9. Airport Administration – General Manager Airport Facility Maintenance Air Traffic Control Commercial Establishments of all types – restaurants, news/books, car rental operations, and all airside third party operators Emergency Services (Law Enforcement, Security, Fire, Medical, ARFF, Office of Emergency Management) General Aviation – commercial entities, operators, businesses (FBO’s, SASO’s) and non-commercial entities like corporate flight departments FAA Facility Management FAA Facility Maintenance Facility Engineering Finance/Administration Legal Organization and Procedures Other Modal Departments (Sea, Road, Rail) Personnel Planning Properties and Development Public Relations Partial In-Scope Operations List

10. Landside Operations Access Management Air Traffic Control Baggage Cargo, Mail Concessionaires Curbside Management Ground handlers Ground Transportation Leasing companies Local authorities and municipalities Meteorology Parking lots and parking technology Passenger processing (ticketing, security, screening) Passenger services Public transportation Roads Suppliers Utilities Waste Management Airside Operations Aircraft Operators Aircraft maintenance Baggage Catering/duty free Cleaning Customs/Immigration De-icing Fuel supplies and fueling Gates Ground Support Equipment Noise monitoring Push back/Towing Runways, Taxiways, Ramps Sanitary services Waste Management Wildlife Control Partial In-Scope Operations List

11. Research Plan We are here

12. Document Review • Aviation – AGTA (ground transportation), ACI-NA (airport owner/operators), AAAE (airport executives), NBAA (national business aviation association), AFFRWG (aircraft rescue firefighting working group), ALEAN (airport law enforcement agencies network), ALPA (airline pilots association), IAASP (international association of airport and seaport police), NATCA (national air traffic controllers association), CAP (Civil Air patrol), ICAO (international civil aviation organization) • Government – FAA, TSA, NTSB, Immigration & Customs Enforcement, HLS (PS-Prep), US Air Force, CBP, CFR’s • BCP Credentialing Bodies – DRII, BCI • Risk Management – Willis Aviation Practice, Key Airport Underwriters • Consulting Firms – Professional Services Firms with Aviation, Airport, Aerospace Practices/Clients • Standards Bodies – ISO, NFPA, BSI, ANSI, ASIS, NIST….. • Airports – Branson, Buffalo, Denver, LaGuardia, JFK…… • Credentialing letter from TRB for enhanced access?

13. Data Collection Plan • Document, standards, guidance review, analysis and documentation. • BCAP style Q&A (paper to database, Bold Systems tool…..IF we get credible access to email lists) re: a) knowledge, capacity and practice; b) “strategic BIA” • Attendance at key industry conferences: • AGTA, ACI-NA, AAAE, Hub Operations, Facilities Management, Regional's, Leasing Policies/Minimum Standards, Gen’l Aviation Issues, Small Airports, Airport Law Workshop, Essentials of Airport Business Management, National Airports, Airports and Car Rental Workshop, Parking and Landside Management Workshop, Airport Concessions, Airport Economic Forum….may add vertical industry group conferences (e.g. airport lessees) • via sponsored focus group, session, presentation • GoToMeetings/GoToWebinars sponsored by industry groups • One-on-One interviews with representative airport executives • Use of “airport” team members to gain trusted access

14. Data Collection Plan • Meetings with key governmental agencies in DC (HLS, FAA, TSA, NTSB, etc.), Industry associations (AGTA, ACI-NA, AAAE, NBAA) • Meetings with key verticals – • General Aviation organizations • Car rentals – i.e. Hertz and Avis • Hotels – i.e. Marriot, Sheraton • Retailers – i.e. Hudson News, PGA, McDonalds • Airlines – i.e. Continental, Delta • Meetings with key labor: • Pilots • Flight attendants • Airline workers • Baggage handlers • ATC

15. Data Collection Plan • 3-5 Pro Forma BCP Implementations at representative airport types

16. Sample Deliverables

17. Sample Deliverables

18. Sample Deliverables

19. Interactive Tool

20. Wrap-up Questions? Comments? Volunteers?