Transcript Slide 1

PS-Prep™ Program
The Voluntary PS-Prep™ Accreditation and Certification
Program
[Insert date here]
Presenter’s Name
Presentation Date
Contents at a Glance
 The Impact of Disasters
 History of the PS-Prep™ Program
 What is PS-Prep™?
 Why Prepare?
 The PS-Prep™ Standards
 Why Prepare to a Standard?
 Benefits of Preparedness
 The Preparedness Continuum
Presenter’s Name
Presentation Date
2
Contents at a Glance
 Small/Medium-Sized Businesses & PS-Prep™
 Corporate Entities & PS-Prep™
 Non-Profit Organizations & PS-Prep™
 Why Certify?
 PS-Prep™ and Critical Infrastructures
 Final Thoughts
 PS-Prep™ Resources
 Contact
Presenter’s Name
Presentation Date
3
Disasters: Not If, but When
Recent Disasters
8.9 earthquake and
tsunami strike Japan
2011
 “The 21st-century incidents
are increasing in frequency,
scale, and consequence, and
the private sector needs to be
prepared to bounce back and
help our nation recover.”
Three days of storms and
tornadoes hit North Carolina to
Michigan
Major wildfire spreads across
eastern America
— Bob Connors, Director of
Preparedness at Raytheon
Corporation
Tornado strikes Joplin, MO
….did these affect you?
(bcmusing.wordpress.com)
Presenter’s Name
Presentation Date
4
What is PS-Prep™?
 A voluntary program designed to build awareness and give
private-sector entities the ability to safeguard their organizations
against the effects of any type of disruption;
 Congressionally mandated that DHS create a preparedness
program by the 9/11 Commission Act of 2007; and
 Composed of three DHS-adopted standards;
 Encourages nationwide preparedness, resilience, and recovery
in the event of an emergency.
Presenter’s Name
Presentation Date
5
Why Prepare?
 “Private organizations across the country—from businesses to
universities to non-profit organizations—have a vital role to play
in bolstering our disaster preparedness and response
capabilities. These new standards will provide our private-sector
partners with the tools they need to enhance the readiness and
resiliency of our nation.”
— Janet Napolitano, Secretary of the U.S. Department of
Homeland Security
Presenter’s Name
Presentation Date
6
Need for Preparedness
 While 80% of companies have North
American operations located in regions
exposed to hurricanes, nearly 50% reported
they are not well-prepared for a hurricane.
 While 90% of companies have North
American operations located in regions
exposed to floods, more than 60% indicated
they are not well-prepared for a flood.
 While more than 80% of companies have
North American operations located in
regions exposed to earthquakes, more than
70% revealed they are not well-prepared for
an earthquake.
 Small businesses account for 99.95% of
companies with employees, 50% of all
private-sector workers, and nearly 45% of
the nation's payroll.
Percentage of Organizations Prepared for the
Disaster Most Prone to Their Area
100
80
60
Unprepared
40
Prepared
20
0
Hurricanes
Earthquakes
Floods
Number of Cyber Attacks per Year
40000
30000
20000
10000
0
YR 2005
YR 2007
(Source: 2008 National Disaster Business Risk Study.
Commissioned by FM Global)
Presenter’s Name
Presentation Date
7
Need for Preparedness (cont’d.)
 The 9/11 Commission Report identified the private sector as
having significant risks in being able to respond to and recover
from disruption; and
 Private-sector leaders should consider the impact of disruptions
and possible consequences for employees, families, and
neighborhoods/communities.
- Possibility of incurring revenue loss and unanticipated
costs if unprepared; and
- Interrupted operations could impact organizational
relationships and tarnish reputations.
Presenter’s Name
Presentation Date
8
Why Prepare to a Standard?
 PS-Prep™ uses a standards-based approach to business continuity
and recovery that will allow organizations to unify their preparedness
activities under standards.
 Preparing to a standard:
 Provides a management system that includes policies, processes,
procedures, performance measures, and quality improvement
practices;
 Allows for uniform and consistent planning;
 Improves business continuity within departments and throughout the
organization; and
 Instills confidence in your organization among customers and
stakeholders.
Presenter’s Name
Presentation Date
9
The Standards
• Developed by preparedness experts;
• Peer-reviewed;
• Created and published by accredited Standards
Developing Organizations (SDOs); and
• Adopted by DHS for PS-Prep™.
Presenter’s Name
Presentation Date
10
ASIS SPC.1-2009
American Society for Industrial Security (ASIS International)
Organizational Resilience and Security Preparedness and Continuity Management
 “This Standard specifies requirements for an organizational
resilience (OR) management system to enable an organization
to develop and implement policies, objectives, and programs
taking into account legal requirements and other requirements to
which the organization subscribes…”
 “This Standard is applicable to any organization that wishes to:
 Establish, implement, maintain, and improve an OR
management system; and
 Assure itself of its conformity with its stated OR management
policy.”
Presenter’s Name
Presentation Date
11
BS 25999
British Standards Institute
Business Continuity Management
 “This British Standard specifies requirements for setting up and
managing an effective business continuity management system
(BCMS). This emphasizes the importance of:
 Understanding business continuity needs and the necessity for
establishing policy and objectives for business continuity;
 Implementing and operating controls and measures for managing
an organization’s overall business continuity risks;
 Monitoring and reviewing the performance and effectiveness of the
BCMS; and
 Continual improvement based on objective measurement.”
 “The requirements specified in this British Standard are generic and
intended to be applicable to all organizations.”
Presenter’s Name
Presentation Date
12
NFPA 1600: 2007 & 2010
National Fire Protection Association
Disaster and Emergency Management and Business Continuity
 “This Standard shall provide disaster and emergency management and
business continuity programs, the criteria to assess current programs
or to develop, implement, and maintain aspects for prevention,
mitigation, preparation, response, and recovery from emergencies.”
 “It describes common elements, techniques, and processes using a
total program approach…[and] presents the latest rules for:
 Emergency management mitigation;
 Preparedness;
 Response;
 Recovery;
 Business Continuity.”
Presenter’s Name
Presentation Date
13
How Your Business Benefits
Minimize Impact to Essential
Operations, increasing entity’s
opportunity to continue to
operate.
Protect Data and Information
to ensure decisions can continue
to be made to facilitate
organization recovery.
Create a Plan of Action for
handling disruptions that is
shared with employees and
practiced through exercises.
Gain Industry Recognition by
promoting preparedness with
suppliers and clients alike.
Minimize Financial Losses by
proactively planning and
accounting for recovery
resources before they are
needed.
Increase Reliability by proving
your organization’s ability to
mitigate all-hazard conditions.
Presenter’s Name
Presentation Date
14
The Preparedness Continuum
 Becoming prepared is an ongoing process of making
improvements over time;
 You can start by learning best practices and incorporating
processes that pertain to your critical operations;
 Continue to enhance your level of preparation by strengthening
your internal processes with a management system to align with
a chosen standard; and
 Upon fulfilling the chosen standard, your organization might
decide to obtain third-party certification.
Presenter’s Name
Presentation Date
15
The Preparedness Continuum
 PS-Prep™ can provide tools,
contacts, and connections, no
matter the size of your
business. The intent is to see
improvement in preparedness.
Presenter’s Name
Presentation Date
16
Small/Medium-Sized Businesses
 The small-business community represents the largest single body of
stakeholders in the private-sector preparedness enterprise.
 Preparing your business for an emergency can:
 Improve its ability to respond and recover;
 Mitigate risk and offer safeguards for the investment you have made
in the business;
 Promote a strategic decision that will influence how you will handle
employees, customers, suppliers, and your workspace in the event
of an emergency;
 Tell your customers and stakeholders what you value; and
 Distinguish you from your competition.
Presenter’s Name
Presentation Date
17
Corporate Entities
 Large entities have the unique capability of using crises as
opportunities. Resilient corporations are likely to recover faster than
the competition, gaining market share and customer loyalty.
 Preparing your business for an emergency can:
 Reinforce corporate survival by sustaining core operations and
revenue streams through the lifecycle of a crisis;
 Protect revenue and cash flows by protecting key assets and
sustaining central operations;
 Protect key assets, including inventories, property, equipment, data,
documents, and intellectual property; and
 Protect and support employees.
Presenter’s Name
Presentation Date
18
Non-Profit Organizations
 With more than 1.6 million non-profit organizations in the United
States, efforts to prepare for disaster must meet immensely diverse
needs. Many have not implemented even the most basic continuity-ofoperations plan.
 Preparing your non-profit for an emergency can:
 Safeguard employees, volunteers, beneficiaries, the community at
large, and other internal and external stakeholders;
 Strengthen engagement with corporate partners more effectively;
 Appease concerns of members of your organization’s board or other
managing body about the level of preparedness; and
 Protect organizational assets.
Presenter’s Name
Presentation Date
19
Why Certify?
 Third-party certification may not be the answer for all businesses, but
those organizations that find it brings market value may choose to certify
to one of the three standards.
 Certification makes you proactive in safeguarding your operations
against unforeseen hazards;
 Certification minimizes your business operation risk;
 Certification identifies inefficiencies;
 Certification leverages marketing opportunities for differentiation;
 Certification illustrates good corporate citizenship; and
 Certification places your organization among a prestigious business
community.
Presenter’s Name
Presentation Date
20
PS-Prep™ and Critical Infrastructure
 The Department of Homeland Security (DHS) Office of
Infrastructure Protection is collaborating with businesses to:
 Identify guidelines, best practices, relevant regulations, and
agreed-upon codes of practice that already apply to the
sector;
 Cross-map to adopted standards; and
 Develop framework guides by sector entities and certifying
bodies in applying standards.
Presenter’s Name
Presentation Date
21
PS-Prep™ and Critical Infrastructure
 Sectors can use PS-Prep™ to mitigate risk in all-hazard
environments. Framework guides set forth the basic scalable
structure for developing a comprehensive preparedness plan in
critical infrastructures.
 Framework guides provide effective methodology for:
 Reducing the impact of business disruptions;
 Improving supply chain resilience; and
 Strengthening internal processes.
Presenter’s Name
Presentation Date
22
PS-Prep™ and Critical Infrastructure
 Agriculture and Food
 Dams
 Defense Industrial Base
 Emergency Services
 Energy
 Healthcare and Public Health
 Nuclear Reactors, Materials, and
Waste
 National Monuments and Icons
 Information Technology
 Banking and Finance
 Communications
 Water
 Postal and Shipping
 Chemical
 Critical Manufacturing
 Transportation Systems
 Government Facilities
Presenter’s Name
Presentation Date
23
Critical Infrastructure Framework Guide
 The Framework Guide outlined the following elements:
 Introduction;
 Getting Prepared;
 Getting Certified; and
 The Sector Perspective.
 In addition, the PS-Prep™ Sector Data Set works in tandem with
the PS-Prep™ Framework Guide.
Presenter’s Name
Presentation Date
24
Resources
 FEMA Voluntary Private-Sector Preparedness Accreditation and
Certification Program (PS-Prep™) Resource Center
www.fema.gov/privatesector/preparedness
 ANSI-ASQ National Accreditation Board
http://www.anab.org/accreditation/preparedness.aspx
 Ready Business
http://www.ready.gov/business/
 U.S. Small Business Administration
http://www.sba.gov/content/disaster-preparedness
 Red Cross—Ready Rating
www.readyrating.org
 Insurance Institute for Business and Home Safety
www.disastersafety.org/business_protection
Presenter’s Name
Presentation Date
25
Contact
Phone: (202) 646-3850
Email: [email protected]
Presenter’s Name
Presentation Date
26
Presenter’s Name
Presentation Date