09-CU-13
/
June 2009
Hurricane Preparedness and Pandemic Planning
To
Federally Insured Credit Unions
Subject
Business Continuity
Status
Active
Dear Board of Directors:
The purpose of this letter is to inform credit union management to update their Business Continuity and Disaster Recovery Plans because of recent announcements by the National Hurricane Center (NHC) and Pandemic events related to the H1N1 virus (swine flu).
On May 21, 2009, the NHC predicted a near-normal Atlantic hurricane season for 2009. Forecasters predicted a seventy percent chance of nine to fourteen named storms, of which four to seven could become hurricanes, with one to three major hurricanes. The outlook provided by the NHC is not only a guide to the expected seasonal activity, it is also a warning it is time to take action.
NCUA urges all federally-insured credit unions, in recognition of National Hurricane Preparedness week and the seasonal outlook provided by the NHC, to perform a review of their disaster preparedness and response plans. These plans should be commensurate with the complexity of operations and focus on minimizing interruptions of service to members and maintaining member confidence in times of an emergency. Previous disasters have provided many “lessons learned” in working through a disaster. Following are the principle “lessons learned”:
- Implement pre-disaster actions to ensure a constant state of readiness and take steps to safeguard assets and vital records if an early warning is received;
- Communicate disaster preparedness and response efforts before, during, and after an emergency to keep members, volunteers, employees, and regulators fully aware of the situation;
- Utilize a cross-section of people to develop, test, and implement disaster preparedness and response plans;
- Ensure back-ups are available for not only data but also personnel, worksites, equipment, vendors, and other resources; and
- Treat disaster preparedness and response plans as “living documents” to be updated as circumstance change.
The recent events pertaining to the H1N1 virus (swine flu) highlight the importance of credit union disaster preparedness and response plans including provisions for a Pandemic event. While the recent flu epidemic was mild in the United States, the World Health Organization and Center for Disease Control are cautious about predictions the H1N1 virus will have on the normal flu season this fall and winter.
Pandemic planning, unlike most natural or technical disasters and malicious acts, presents unique challenges to credit unions. The impact of a pandemic is much more difficult to determine. As experience with the recent H1N1 flu, pandemics can be focused to specific regions of the world or the United States, but can spread quickly and cause health officials to close schools and other public gathering facilities or events. Experts believe the most significant challenge may be the severe staffing shortages likely to result from a pandemic outbreak.
Federally-insured credit unions need to review their disaster preparedness and response plans to ensure their pandemic plan is appropriate for their operation. The plan should include:
- A preventative program to reduce the likelihood the operations will be significantly affected by a pandemic event;
- documented strategy which provides for scaling pandemic events including provisions for a possible second and third wave of a pandemic;
- A comprehensive listing of facilities, systems, or procedures to continue critical operations if a large number of staff are unavailable for prolonged periods;
- A testing program to ensure the pandemic planning practices and capabilities are effective;
- An evaluation of critical service provider plans for operating during a pandemic; and
- An oversight program to ensure ongoing review and updates are made to the pandemic plan.
NCUA provides the enclosed resources to assist you in reviewing your own disaster preparedness and response plans related to hurricane and pandemic preparedness.
If you have any questions or concerns, please contact your NCUA Regional Office or State Supervisory Authority.
Sincerely,
/s/
Michael E. Fryzel
Chairman
Footnotes
Resources
NCUA Resources:
- Letter to Credit Unions 08-CU-01, Guidance on Pandemic Planning
- Letter to Credit Unions 06-CU-12, Disaster Preparedness and Response Examination Procedures (opens new window)
- Letter to Credit Unions 06-CU-11, Interagency Guidance Lessons Learned by Institutions Affected by Hurricane Katrina (opens new window)
- Letter to Credit Unions 06-CU-06, Influenza Pandemic Preparedness (opens new window)
- Risk Alert 06-CU-01, Disaster Planning and Response
- Letter to Credit Unions 01-CU-21, Disaster Recovery and Business Resumption Contingency Plans (opens new window)
Interagency Resources:
- FFIEC IT Handbook Booklet: Business Continuity Planning on FFIEC web site (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
Other Resources:
- Ready.Gov - Business Emergency Planning Guidance (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
- The National Strategy for Pandemic Influenza (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
REFERENCES
In addition to resources included above, credit unions may find these web sites helpful in their planning activities:
- National Hurricane Center (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
- Department of Health and Human Services (DHHS) (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
- Business Pandemic Influenza Planning Checklist (DHSS) (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
- Avian Flu Website (DOD) (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
- Centers for Disease Control (CDC) (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
- World Health Organization (WHO)
- Department of Agriculture (USDA) (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
- Department of Labor Occupational Safety and Health Administration (OSHA) (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)
- Department of State (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).)