Business continuity in blood services: two case studies from events with potentially catastrophic effect on the national provision of blood components.

Background and Objectives NHS Blood and Transplant (NHSBT) and the Australian Red Cross Blood Service (ARCBS) are national blood establishments providing blood components to England and North Wales, and Australia, respectively. In 2012, both services experienced potentially catastrophic challenges to key assets. NHSBT suffered a flood that closed the largest blood-manufacturing centre in Europe, whilst ARCBS experienced the failure of a data centre network switch that rendered the national blood management system inaccessible for 42 h. This paper describes both crisis events, including the immediate actions, recovery procedures and lessons learned. Materials and Methods Both incidents triggered emergency response plans. These included hospital reprovisioning and recovery from the incident. Once normal services had been restored, both events were subjected to root cause analysis (RCA) and production of ‘lessons learned’ reports. Results In both scenarios, the key enablers of rapid recovery were established emergency plans, clear leadership and the support of a flexible workforce. Product issues to hospitals were unaffected, and there were no abnormal trends in hospital complaints. RCA identified the importance of risk mitigations that require co-operation with external organizations. Reviews of both events identified opportunities to enhance business resilience through prior identification of external risks and improvements to contingency plans, for example by implementing mass messaging to staff and other stakeholders. Conclusions Blood establishment emergency plans tend to focus on responding to mass casualty events. However, consolidation of manufacturing to fewer sites combined with a reliance on national IT systems increases the impact of loss of function. Blood services should develop business continuity plans which include prevention of such losses, and the maintenance of services and disaster recovery.