Public BoD papers 26.5.22

the baseline evidence for which is currently under review by the MIAA internal auditor, which this year includes evidence against Assertion 7.3 in relation to business continuity response readiness. 4 . Implementation of emergency and business continuity plans 4.1 COVID-19 pandemic The trust continues to implement its pandemic influenza plan and business continuity plan in relation to COVID-19. The Incident Coordination Centre (ICC) has been operational since 11 March 2020, seven days a week, and at the time of writing this report remains open, albeit with slightly shortened hours of operation. The trust is still required to submit daily electronic submissions nationally and regionally, which are coordinated by the Incident Coordination Centre. The importance of the trust’s biosecurity measures e.g wearing surgical masks, observing social distancing and reduced footfall on site to protect our vulnerable patient group and staff continues to be emphasised. 4.3 Incident W62999 Radiology - A PACS (Picture Archiving and Communication System) outage occurred, which required business continuity arrangements to be implemented for a short period. The investigation determined that the root cause was ‘Insufficient storage space provided by GE to support the data migration’. A number of actions were identified and completed by 31 August 2021. 4.4 Incident W66890 Clinical Web Portal - This incident involved a server failure resulting in unavailability of CWP and other clinical systems. The underlying root cause was a cooling system failure in the server room causing overheating and server room shutdown affecting all systems hosted from that room. Digital Services are in the early stages of moving to a new data centre. 4.5 Business continuity arrangements were put in place for planned IT work over the year, which included upgrade work on various clinical systems and the voicemail system. 5. Training and exercising As part of the NHS framework arrangements, the trust is required to: • undertake a live exercise every three years • undertake a table top exercise every year • carry out communications cascades every six months The continuing response to Covid-19 fulfils the requirement to hold a live exercise every 3 years. 5.1 Internal exercises 5.1.1 Communications test The trust has not been able to conduct a communications test during the year because of the continuing focus on our Covid-19 response. 5.1.2 Business continuity during a telephone upgrade, affecting analogue lines – April 2021 A tabletop exercise to test business continuity arrangements during a telephone system upgrade took place in April 2021. Participants included representatives from digital services, networked services, clinical support and specialist surgery, facilities and research and innovation. The aim was to explore the options when an analogue phone of unknown location was disconnected as part of the upgrade work. It referred mainly to the impact on analogue business continuity phones, lift phones, fridges and fax machines. As considerable work had already been undertaken to identify the location of active analogue phones the risk of a crucial

81