Management of Security
Serious Incidents
Security threats to the BBC can and do manifest
as a serious incident resulting in fatality, injury, programme and
service loss, damage to property, reputation issues, and financial
loss. They are brought about by demonstrations, direct action
campaigns, terrorist action (often coordinated by increasingly
sophisticated use of internet and mobile technology), local area
crime, malicious attack on our IT systems and businesses, and the
many threats associated with programme operations in High Risk
territories abroad.
It is essential for effective mitigation that
information is shared between the various internal security
services, Corporate Security, High Risk Team, Investigation
Service, Information Security, Business Continuity Disaster
Recovery Team (BCDRT), the Division security managers, Facilities
Managers and security officers. This information informs the
Security Risk Assessments and consequent security response level,
and it builds defences, whether in planning, procedures, personal
protective equipment, IT and broadcast systems and back-ups,
etc.
A security threat or incident may also activate
business continuity plans (BCDRT), the BBC People Major Incident
plan and the other Divisions plans that are linked to the
BCDRT.
Definition of Serious Incident
A serious incident is one resulting in fatality, injury, or
programme loss, significant impact on others in the broadcast
chain, location, building, etc., and which will also incite
interest from press and other media, and/or will adversely reflect
on the BBC reputation with its audience, and opinion formers,
including UK and foreign governments. All incidents should be
reported using myRisks
tools.
Not included here, but possibly a result of a
security incident is;
- injury or ill health, potential for harm to people, damage to property or equipment, and circumstances and near misses that have the potential to cause harm to people and the business;
- fire, accident, health incident, building infrastructure damage, IT service failure.
Head of Corporate Security monitors and
coordinates the response to security threats to the BBC, and
liaises with other security services inside and outside the
BBC.
Serious incidents must be reported to him as
soon as practicable whether by programme staff directly or through
their Divisional security manager, or by Facilities Managers if
building related.
In the event of a major security threat
or incident involving any of the BBC's staff, activities, services,
operations or assets, or major disruption to the broadcast and
production activity of the BBC, it will be necessary to activate
the business continuity plans managed by the BCDRT.
Such incidents might involve the following, but not exclusive list:
Such incidents might involve the following, but not exclusive list:
- significant disruption to broadcasting - caused by building or security failure or threat;
- other major building disruption resulting from a criminal, malicious or hostile act (such as explosion, fire, flood, major power failure or suspect packages) with ongoing disruption to occupants;
- a major accident or fatality resulting from a criminal, malicious or hostile act on or in the vicinity of BBC premises;
- demonstrations against the BBC or near BBC premises which involve aggression or violence;
- incidents involving individuals, UK or overseas, identified in the BBC's International & Indigenous Terrorism Threat Assessment;
- a major incident (such as violence, blackmail, theft, stalking or threats) involving senior staff, a key contributor or a member of their family; or receipt of a credible bomb threat to BBC premises.
The Director General will appoint an Incident
Commander if the BBC Security Response goes to EXCEPTIONAL, or in
special circumstances he may set up a group to co-ordinate the
BBC's response. Such circumstances may include national crisis, or
the receipt of serious, specific and credible threats against the
BBC's staff, activities, services, operations or assets.
Incidents resulting in the death or serious
injury of BBC staff must be reported to the BBC People 24hr duty
officer to activate the HR Incident Officer role (HRIO) for
co-ordinating all the BBC People services (159, next of kin,
etc).
