Continuity Guidance for Governmental Entities and the Private Sector

May 25, 2010 Patrick Massey Director, National Preparedness Division FEMA Region 10

Four Pillars…

 An organization’s continuity capability – its ability to perform its essential functions continuously – rests upon key components or pillars, which are in turn built on the foundation of continuity planning and continuity program management

An organization’s resiliency is directly related to its continuity capability

Elements of a Viable Continuity Capability           Essential Functions Orders of Succession Delegations of Authority Continuity Facilities Continuity Communications Vital Records Management Human Capital Test, Training and Exercises Devolution of Control and Direction Reconstitution

Continuity Guidance Circular – 1: Continuity Guidance for States, Tribes, and Local Governments - Continuity Program Management information - Elements and components of a viable continuity capability - Coordination of interdependencies - Continuity plan operational phases and implementation

Continuity Guidance Circular – 2: Mission Essential Functions (MEFs) Identification Processes for States, Tribes, and Local Governments Outlines how to:  Identify and prioritize Mission Essential Functions (MEFs)  Conduct a Business Process Analysis (BPA)  Conduct a Business Impact Analysis (BIA)  Assess strategies to reduce risk

Mission Essential Functions (MEFs): 4.

5.

6.

7.

8.

1.

2.

3.

Maintain Continuity of Government Provide Visible Leadership Defend the Country – Fight Wars Maintain Effective Relations Maintain Law and Order Provide Emergency Services Maintain Economic Stability Provide Basic Essential Services http://www.fema.gov/about/org/ncp/coop/index.shtm

Continuity Training

 FEMA Emergency Management Institute (EMI) Independent Study:   Continuity Awareness (IS-546) - 2 hours Introduction to Continuity (IS-547) - 5 hours      Continuity Manager’s Course (Train-the-Trainer) (B/E/L-548) Continuity Planning Workshop (Train-the-Trainer) (B/E/L-550) Continuity Building Design for Homeland Security (T-T-T) (B/E/L-156) Continuity Exercise Design Course (IS-136/G-139) Devolution Planning Workshop (E/L 551) http://www.training.fema.gov

Continuity Excellence Series

Established in April 2008  Designed for continuity professionals throughout Federal, State, Territorial, Tribal, and local governments.

 Dedicated to enhancing the excellence in the development and implementation of Continuity programs  

Level I -- Professional Continuity Practitioner Level II -- Master Continuity Practitioner

Continuity Assistance Tool (CAT) The CAT provides guidance and assistance for States, Territories, Tribal, and Local Government Jurisdictions and Private Sector Organizations to identify continuity program strengths and areas for improvement.

 Released in July 2009  Available at: www.fema.gov/about/org/ncp /coop/evaluations

Continuity Assistance Tool (CAT) • • • Each section includes: Definition Attributes – Goal/objective statement Characteristics – Detailed questions to help achieve the attribute – Critical characteristics are denoted by an asterisk – Each characteristic references the source page of CGC-1 – Each characteristic has simple Yes, No, or N/A checkboxes – Each characteristic has room for comments www.fema.gov/about/org/ncp/coop/evaluations

Voluntary Private Sector Preparedness Accreditation and Certification Program (PS-PREP) -PS-PREP is a voluntary program for the private sector to enhance nationwide resilience in an all-hazards environment by improving private sector preparedness.

-ANSI-ASQ National Accreditation Board (ANAB) chosen to manage and oversee.

-3 rd party certification through accrediting entity for larger business.

-Possibly 1 st party (self) certification for small businesses.

Authority: Title IX of the Implementing Recommendations of the 9/11 Commission Act of 2007 (PL 110-53)

PS-PREP 3 Standards met the Fundamental Qualifying Principals Requirements:  National Fire Protection Association (NFPA) 1600, Standard on Disaster/Emergency Management and Business Continuity Programs, 2007 Edition  British Standards Institute (BSI) BS 25999, Business Continuity Management Standard  ASIS International ASIS SPC.1-2009,Organizational Resilience: Security Preparedness, and Continuity Management Systems

PS-PREP Key Comments  The three standards encountered no critical opposition from stakeholders across the country  Participants and respondents support standards, in general, but having the time and resources to certify may pose a problem because stakeholders are: ◦ ◦ ◦ Already engaged in similar activities Uncertain on the business case/logic for certification Concerned about the cost associated with certification

PS-PREP Program Timeline www.fema.gov/privatesectorpreparedness

Questions?