by: Wan Asriah Wan Adnan Head Business Continuity Bursa Malaysia Berhad July 2007

1. BCP for Pandemic Influenza by: Wan Asriah Wan Adnan Head Business Continuity Bursa Malaysia Berhad July 2007 wan_asriah@bursamalaysia.com

2. Our Concern

3. Cumulative No. of Confirmed Human Cased of H5N1 reported to WHO as of 15 June 2007 Source: WHO Recent death reported in Riau, Indonesia on June 15

4. Recent Local News on Bird Flu

5. Scope • Background • Our Approach • Plan Component • Summary of Major Initiatives • Our Next Initiative

6. Background

7. Background Extension of BURSA Business Continuity Scope T H R E A T Infrastructure Failure Business Disruption Human Unavailability Pandemic

8. Pandemic BCP: Objective • To ensure Protection of BURSA Employees • Timely Response to Pandemic Threat • Ensure capability to resume critical business during • pandemic crisis

9. Our Approach

10. Reference • Local Authorities Document Ministry of Health Malaysia (MOH) • National Influenza Pandemic Preparedness Plan (NIPPP) • Malaysia Influenza Surveillance System • Medical Strategies in Management of Pandemic Influenza (PI) and Guidelines of Influenza Pandemic Management • Recommendations on Influenza Pandemic Preparedness for Industry in Malaysia • International Authorities Document - World Health Organization (WHO) - Guidelines for Pandemic - Global Influenza Preparedness Plan • Ministry of Health Singapore • US Dept of Health & Human Services – Pandemic Influenza Plan • Australian Management Plan for Pandemic Influenza • Continuity Planning Guide for Canadian Business • New Zealand Pandemic Plan • Thailand Pandemic Plan • IMF Plan on Pandemic • Other Organizations • National Security Division (NSD), Prime Minister Department • Bank Negara Malaysia • DHL Malaysia • DRI Asia • 3M Avian Flu Business Continuity

11. Pandemic Threat to Bursa High likelihood Low Impact Travel Restriction Likelihood High likelihood High Impact School / Kindergarten Closed Visitors Restriction Quarantine of affected Bursa employees Bursa employees were infected Exchange Square Bldg Cordoned off Low Likelihood Low Impact Low likelihood High Impact Impact to Bursa Our Constraint • Centralised location – one person infected, could resulted in a quarantine order for all Bursa personnel • Resource limitation to implement full split operations • Cost limitation to implement dual operating site

12. WHO / MOH Pandemic Phase WHO – Pandemic phases Precautionary / Alert State Disaster alert

13. High Level View – Our Strategy

14. Plan Component

15. Plan Component • HR Communicable Disease Policy • BURSA Pandemic Preparedness Plan • Updated Bursa BC Plan

16. HR Communicable Disease Policy • Objective • To establish guidelines to prevent outbreak of any communicable disease in Bursa • To protect well being of Bursa employees and maintain a safe and healthy work environment C O N T E N T S • Responsibility of Employee • Responsibility of Employer • Responsibility of the Business Unit / Functional Group Heads • Travel Policies • Policies on Meetings and Visitors • Policy on Building Management • Emergency Contact Numbers • Policy on Quarantine Order

17. Pandemic Preparedness Plan • To complement Bursa Business Continuity Plan and HR Policy • Intended to be iterative. Should be continually updated in light of new information about pandemic influenza and countermeasure

18. Pandemic Planning Structure Management of Infected/ Potentially Infected Staff Optimizing Employee Health Reduction of Infection Risk Communications BURSA Pandemic Preparedness Plan Strategy Good Hygiene Practice Personal Protection Equipment Plan element Pre-approved HR Policy Communications & Response Policy

19. BURSA Business Continuity Plan

20. Required Update to BCP Element

21. Problem Solved? Activate BCP recovery procedures Pandemic Escalation & Activation Procedures PANDEMIC Problem PROBLEM STATE • Staff / panel doctors notified Bursa • MOH / authorities activate alert state Activate Pandemic escalation Procedure if necessary PRE-PANDEMIC Authority Notify Recovery Coordinator & Public Relations • FIRST ALERT • Activate • preventive • measure Human Resource Assess extend of damage Implement Preventive Measure (if Pandemic) DRMT • SECOND ALERT • Activate Segregation • Procedure DRMT Activate DRMT recommend A “Split Operation’? No Yes No Assess and monitor situation Activate Split Operations Yes END No A DRMT (if Pandemic) Disaster recommend disaster Declared? No Declaration? Yes • DISASTER ALERT • Activate Isolation • Procedure • Continue with mission critical function only DRMT Yes

22. Summary of Major Initiatives

23. Summary of Major Initiatives

24. Our Next Initiatives

25. Our Next Initiatives • Based on outcome of Business Continuity Survey conducted in Q2 2007 • To extend Pandemic preparedness requirement to brokers • Basic requirement would include: • - Communications to employees on Avian Flu / Health & Hygiene • - Identification of critical personnel and resources to support • critical functions • - Establishment of HR policies e.g. reporting illness, sick leave • policy, traveling restriction etc.

26. BCP Philosophy We cannot totally avoid disaster but we can minimise business impact caused by the disaster Be Proactive NOT Reactive!!!!

27. Thank You