May 17, 2012

Cloud Computing Terminology List Now Available

 In a recent article written by Jody Gilbert and posted on the TechRepublic website, you will find a valuable listing of some common Cloud-related terms and their meanings.

We assume that the technology of Cloud computing has either already been a topic of discussion or else soon will be for our business continuity and risk management team members.  For each of our readers’ organizations, this topic of cloud computing and cybersecurity will most likely mean something unique to each company, and, to that point, we believe that the list organized by Jody Gilbert represents a fairly good starting point and rundown of Cloud computing terms that everyone is most likely to come across.

For some business continuity planning professionals, such a  terminology list may already be part of the compliance technology component written into their compliance plan(s) or compliance report(s).

Please take advantage of this list and share with us if you think the list is lacking in any terminology that should be added or if you believe there is a better way to get this kind of information out to those individuals in your organization that may already be in need of this information.

CLICK HERE to read the full article on this topic.

Interactive Flood History Map of U.S. Now Available

With Spring season nearly upon us, floods are a real risk for many companies and a challenge for business continuity planners.

To mitigate this risk, both business continuity and risk management  planners and/or consultants can help your company by performing an effective business impact analysis (BIA) of a flood impacting your business, and, hopefully develop and implement an effective proactive plan to minimize or mitigate potential losses from a flood actually happening and disrupting your business.  

A good BIA analysis requires accurate and timely input of relevant data to be effective.  It is for this reason that we make the suggestion that members of the business continuity and disaster recovery teams within their companies visit the FloodSmart.gov website. 

This website is also the official site of the National Flood Insurance Program and is a great source of planning information regarding a variety of flood risk categories, such as:

      What Causes Flooding

      Defining Flood Risks

      Understanding Flood Maps

      Flood Risk Scenarios

      The Cost of Flooding

      And, More …….

The interactive map of historical flooding patterns on this website can also be a great resource for evaluating potential trends into the future regarding this flood risk and your company’s location(s).

Remember to put this website into your company’s risk library of resources.

PS-Prep: Clarfify the Facts and De-Mystify the Rumors

By: Lisa DuBrock, Contributing Editor

A wise woman once told me, “People learn in different ways”. Perhaps there is some meaning for PS-Prep in that statement.

To date, much has been said about FEMA’s PS-Prep Program since its inception a little over two (2) years ago, and much has been left for either further interpretation or expectation of more details and information to follow….

And, given the magnitude of the PS-Program, it is easy to understand where professionals and non-professionals alike are raising concerns and even skepticism over the many issues and ongoing open questions about this program.

From the many personal inquiries that I’ve received, along with those presented by the readership of the continuitycompliance.org website, and in an effort to provide that readership with another  understanding of what PS-Prep is, here is a link to a new article recently written by Brian Zawada, Director of Consulting Services, for the Avalution Consulting Group, entitled PS-Prep: Myth or Fact.

What I particularly like about this article is the table that encompasses the middle 1/3 of the article.  It clearly lays out many of the questions and comments I hear everyday with regards to PS-Prep.

Hopefully as the program matures, some of the questions cited in this article will be settled.  However, it is also likely that new questions will be asked as well.

It is our intent to keep our readers updated with the latest information regarding PS-Prep, and to accurately present what is being said at conferences and on blog sites across the country on this topic.  With that knowledge, better decisions can be and will be made regarding whether or not PS-Prep can bring value to your organization.

Reading for New Business Continuity Professionals

The ContinuityCentral.com website recently posted a collection of articles for newcomers to the business continuity and risk management community.

We suggest that existing business continuity and disaster recovery management teams utilize this collection of reading material for new members and for refreshing ideas and methodologies of older members of the team as well.

CLICK HERE to view the entire listing of articles.

Risk Management Remains Key to Supply Chain Success

The accounting and consulting firm of PriceWaterhouseCoopers, recently released its latest annual CEO survey report and can be viewed by clicking here.

Along with business continuity and risk management teams, we believe it is also good for supply chain managers and executives to have at least a good feeling of where the CEO of their organization sits regarding their support when it comes to business continuity, risk and supply chain management.  This survey helps to better understand what the average CEO is thinking about relative to these critical areas of organizational risk.

CEOs, not unexpectedly, have many business concerns, a number of them supply chain related.  And, to no one’s surprise, reducing operating costs remains the number 1 initiative on the CEO’s plate

The report cites at least the following other major categories of concern:

  • Energy Costs: 54% in 2010 versus 50% in 2009  
  • Potential Protectionism as a Barrier to Trade: 49% in 2010 versus 39% in 2009 
  • Climate Change Issues: 37% in 2010 versus 26% in 2009  
  • Scarcity of Commodities: 35% in 2010 versus 30% in 2009
  • Supply Chain Security: 35% in 2010 versus 33% in 2009

If your organization is facing some critical strategic decisions this year regarding outsourcing and supply chain management issues, then we recommend for you to not only read the entire survey report, but also view a good synopsis of the highlights of the report, written by the Supply Chain Digest editorial staff and available for viewing by clicking here

All of this information should also be added to your organization’s in-house reference library for future use.

FEMA Personal Preparedness Reminder Encouraged When Changing to Daylight Savings Time

Our attention today is brought to a recent quote by FEMA Administrator Craig Fugate, where he states, “The public is the most important member of the nation’s emergency management team, and so I encourage everyone, as they spring forward this year (March 14th), to also take a few minutes to check their smoke alarms and talk through what your family would do during an emergency.”   

As business continuity professionals we realize that preparing for an emergency in the United States is more than just a corporate responsibility.  We should send that message out to every associate employee of our organization(s) so that they should be reminded of the need to ensure that their families are also prepared for a possible emergency.

The Federal Emergency Management Agency (FEMA) offers everyone a source of information on preparing for emergencies, and we suggest that our readers go to the Ready.gov website to learn more about what they as individuals can do, and also, for our business continuity and risk management leaders to see what can be done for businesses.

A few simple steps like checking smoke alarms, putting an emergency kit together or gathering family members to write at least a family communications plan would go a long way toward keeping families safe. 

For more information about home smoke alarms and fire sprinklers, you can also visit: www.usfa.dhs.gov/smokealarms.

Top Security Threats in Cyberspace

From all of the articles we review, and from information received from many of our supporters, we believe that 2010 will yet be another year of ongoing threats and data breaches in cyberspace. 

Hopefully, your risk management team members have kept up with the many predictions for what to expect in 2010 regarding security threats to their organizations. 

To perhaps assist that process and compare notes with your information technology specialists and the security systems which they have planned to run without disruption, we offer a recent article written by Anil Mallya and posted on the InformationWeek website.

The article is entitled “The Top 10 Security Threats in Cyberspace”.

As stated in this article, the primary threats faced by Internet user today are:

  1. Malware
  2. The Insider
  3. Security Testing Methodology
  4. Careless Employees
  5. Social Engineering
  6. Mobile Devices
  7. Third Party Application Vulnerabilities and Zero Day Exploits
  8. Cyber Espionage
  9. Cloud Computing Security Threats

      10. Cyber Warfare 

To read the entire article including more details about the list above, CLICK HERE

Recent Gun Rights Advocacy Stances Should Be On Corporate Security Radar

Business continuity management team members must work very closely with their fellow internal corporate security team members concerning the recent activities and demonstrations by those supporting the “Open Carry” movement.  While we recognize that on the surface, it doesn’t sound like much of a traditional security issue, as much as it is politics/NRA/second amendment topic, the potential is that  it certainly can develop into a real challenge for corporate security managers in companies across the United States.

This topic was addressed very well in a recent article written by Goeff Kohl, Editor-in-Chief for the SecurityInfoWatch.com website.  While this topic has been debated for some time now, Mr. Kohl was motivated to write his article based on the fact that the open carry movement was now moving forward with demonstrations to more strongly express its principles on this matter.  This fact was clearly brought to his attention in an article published by The New York Times, on March 7, 2010 and titled “Locked, Loaded, and Ready to Caffeinate”.

 Bottom line is that for the corporate security manager, this movement may well have direct implications.  Certainly the presence of policies about guns on the premises of its business is just one of the issues that must be faced.  Then there is the difference in those policies between employees and customers on the premise.   In addition, the fact that Federal and State laws may well be in conflict with OSHA requirements to maintain a safe work environment is still another concern.

We believe that this issue is an important agenda item for all corporate security manager meetings.  And, in the event that further analysis may determine that a potential business disruption may occur from this issue, then this item should certainly be elevated to be discussed by all business continuity and risk management team members as well.

Click here to read Geoff Kohl’s complete article.

Will PS-Prep Drive A Need for More Business Continuity Plans for U.S. Companies?

For those managers and members of business continuity and risk management teams always ready to stay up to date on recent developments and discussions that could support their efforts to convince upper management to fund and promote the benefits of having an effective business continuity plan in place and tested in their organization, we offer an article recently written by one of this websites often quoted writers on this topic. 

This article, written by Linda Tucci, and posted on the SearchCompliance.com website, recognizes a potential positive role that FEMA’s PS-Prep program may have in helping American businesses better understand what the U.S. government expects of them in the event of man-made or natural disasters.   The article also includes some relevant observations from business continuity professionals who express their opinions on this very controversial topic.

Click here to read more and arrive at your own answer to the question presented in the title of this article, “Will Private Sector Preparedness Plans Spur Business Continuity Action?”

Growing Organizational Use of Mobile and Wireless Devices Demands Policy Updates

As a growing number of mobile and wireless devices become a part of business processes in so many organizations, it seems obvious that more companies must now be addressing the need to manage these new process components.

We imagine that this situation is already on the radar screens of information security and corporate compliance managers in those organizations and thus is an important part of many meetings where those present are held responsible for mitigating this critical risk management issue for those organizations.

In a recent article posted by Susan Hall on the ITBusiness Edge website, however, we seem to find just the opposite to be the case.  This article claims that many companies have not yet chosen to actually create a mobile or wireless policy for their companies.

If you are one of those companies and perhaps you are facing an internal informational technology security audit where this risk has been identified and now you need to mitigate this risk ASAP, then we recommend reading this article.

In it you will find links to sample policies on wireless networking, wireless security access, and how to use wireless technology securely, and, hopefully this information  will assist the writing and implementation of necessary new policies or updates to the existing policies within your organization.