New toolkit offers charities help with records management

The Charity Finance Group has published a free toolkit to help charities manage records effectively.

The toolkit is designed to help charities assess how well they currently manage records within their organisation and how they can improve their practice. The toolkit also aims to help charities to identify issues and solutions that are appropriate to the size and scope of their organisation.

Grants available for church roof alarms

The Allchurches Trust has announced a grants scheme to enable churches to install roof alarms to deter metal thieves. 

Churches can apply for a grant of £1,000 towards the cost of a roof alarm system. The alarm system must be approved by their insurer, and the church’s governing body must commit to maintain the system for five years. The closing date for applications is February 28th 2107.  

Historical society fined over stolen laptop and "serious" data breach

A historical society has been fined after after a laptop containing sensitive personal data was stolen while a member of staff was working away from the office.

Charity Commission launches new anti-fraud website

The Charity Commission this week launched a new website designed to help charities fight fraud. The website, www.charitiesagainstfraud.org.uk, offers guidance on how to spot the warning signs of fraud, how to reduce risk, how to report fraud when it takes place, as well as the latest news on fraud and anti-fraud measures. 

Government paper on flood resilience highlights vulnerability of critical infrastructure

The government's new policy paper on flood resilience has found that hundreds of critical infrastructure sites are at serious risk from floods. 

The government published the long-awaited National Flood Resilience Review on September 8, 2016. The Review looked at assessing flood risk, reducing the likelihood of flooding, and making the country as resilient as possible to flooding.

Heritage Lottery Fund launches new £8million resilience programme

The Heritage Lottery Fund (HLF) has launched a new £8million annual investment programme to help charities build their resilience. The programme will offer grants of £3,000 and £250,000.

The application guidelines suggest several areas which could be of interest to charity facilities managers and others responsible for strategy for charity property.

HLF says the grants could be used for:

New guide for managing visitor safety in historic buildings

The Visitor Safety in the Countryside Group (VSCG) has published a new guide on visitor safety designed for people managing historic properties.

Charity Commission warns about mandate fraud

The Charity Commission has warned charities about the risks of “mandate fraud” - when fraudsters impersonate a genuine supplier to gain money.

What is Business Continuity Management?

Business Continuity Management (BCM)  is an holistic management process that
• identifies potential impacts that threaten your charity,
• provides a framework for building resilience and the capability for an effective response that safeguards
   - the interests of your beneficiaries and stakeholders, 
   - your charity's reputation & brand,
   - your organisation's income-generating activities.

BCM must be owned and fully integrated into your organisation as an embedded management process.

Why is BCM becoming more important?

• Legislation and Regulations: the Civil Contingencies Act, FSA
• Experienced events: e.g. H1N1, Y2K, 9/11, 7/7, severe weather 2011, 2012, 2013
• Supply Chain Complexity: longer supply-chains, off-shore manufacturing, outsourcing of services
• Digital technology: greater reliance on i.t. and data
• Insurance: increasing requirement for evidence of bcm by insurance companies 
• Corporate Governance: risk management requirements, trustees' concerns
• Stakeholder Concerns: protection your service-users

Risks - What are charities concerned about? 

Implementing BCM in your organisation

How to start on BCM:

1. Discuss BCM at senior level and assign responsibility
2. Assess Risks: identify critical activities and key risks
3. Plan: work out how your organisation will maintain critical activities
4. Document your plans
5. Communicate: train staff and stakeholders, test your proposed responses
6. Maintain: keep your plan up-to-date


We asked our members to find out what their key concerns were.  This table shows the results:

  Documentation and Communication are vital!


Compiling  a record of your business continuity plan is vital.  If the worst happens, people need to know where to look for crucial information and what their next actions should be. Your business continuity plan could be as simple as a document that is distributed to key staff in hard copy and online.

Possible Contents:
A copy of your detailed business continuity plan
Contact details for all staff - including mobile phone numbers
Contact details for emergency contractors - e.g. plumbers, glaziers, emergency numbers for utilities
Insurance details
Bank details

No matter how careful your analysis and planning, nothing serves to highlight core issues like running a test.

Guidance and Standards

The Government has prepared a Business Continuity Management Toolkit which you can use to get started. The link is here: https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/137994/Business_Continuity_Managment_Toolkit.pdf
(This is a 19 page pdf document.)

The British Standards Institute: ISO 22301 Business Continuity Management 
ISO 22301 is the international standard for business continuity management. It builds on the previous British Standard, BS 25999, and other regional standards.

The Business Continuity Institute has a selection of resources on its website.  The link is here:

In the USA the National Fire Protection Association has issued FPA 1600 Standard on Disaster/Emergency Management and Business Continuity Programs http://www.nfpa.org/assets/files/pdf/nfpa1600.pdf

Australia: Standards Australia: • HB 221-2004 – Business Continuity Management Handbook • HB 292-2006 – A practitioner’s guide to business continuity management • HB 293-2006 – Executive guide to business continuity management I.T.: BS ISO/IEC 17799:2005 
Code of practice for information security management


HSE simplifies RIDDOR

The Health and Safety Executive (HSE) has simplified the mandatory reporting of workplace injuries for businesses.