Continuity_Compliance, Author at Continuity Compliance

To Certify or Comply? — That is the Question Many Ask When Organizations Pursue a PS-Prep Standard

February 6, 2013 By Continuity_Compliance Leave a Comment

Lisa DuBrock, CPA, CBCP, MBCI --- a contributing writer to this website --- has recently written an article published in the Winter 2013 Edition of the Edison Electric Institute Newsletter --- which edition was dedicated solely to updates and stories about key business continuity issues in the electric power industry. The Edison Electric Institute (EEI) is the association of United States shareholder-owned electric power companies. Its members serve 95 percent of the ultimate customers in the shareholder-owned segment of the industry, and represent approximately 70 percent of the U.S. … [Read more...]

Risk Management Concerns Escalate as Board Oversight Expectations Grow

February 1, 2013 By Continuity_Compliance Leave a Comment

By: Ben J. Carnevale, Contributing Editor Not many of our readers would argue with the position that there is a rising trend of discussion among our company executives on a need for increased levels of risk management capabilities and focus of improvement expected from regulators, credit rating agencies, institutional investors, customers, and the courts in the United States and the global village where more and more companies are now doing their business. The fact is that in the aftermath of the global financial crisis a growing number of companies and their boards will soon – if not … [Read more...]

e-Discovery Trends Predicted for Prominence in 2013

January 25, 2013 By Continuity_Compliance Leave a Comment

The topic of e-Discovery remains a major point of discussion for enterprises who must operate in growing litigation driven, regulatory enforced commercial environments, facing ongoing concerns for cost reduction and finally trying to integrate the latest demand for social media and other cyber security related technologies into their work force. And with all of these challenges now beginning to effect organizations of lesser size and with more limited resource capabilities to address these potential threats, it is valuable for those of our readership affected by such e-Discovery dynamics to … [Read more...]

Emergency Management Enhanced by Public-Private Partnerships

January 25, 2013 By Continuity_Compliance Leave a Comment

By: Ben J. Carnevale, Editor This website has promoted the benefits of the Private Sector Preparedness (PS-Prep) program from the beginning of its existence, and continues to believe that the private sector is also a vital part of our country’s emergency management team response and disaster recover capabilities. Along with FEMA and DHS, we also believe that the nation's vast network of business, industry, academia, trade associations, and other non-governmental organizations are equal - and equally responsible - partners in nearly every phase of dealing with potential threats --- … [Read more...]

Social Media Risk Management Becomes Focus of New FFIEC Guidance Draft Document

January 25, 2013 By Continuity_Compliance Leave a Comment

The ever growing challenge of social media risk management remains a topic of concern and focus for not only financial institutions but also for many organizations now using social media in a variety of ways, including marketing, providing incentives, facilitating applications for new accounts, inviting feedback from the public and engaging with existing and potential customers --- for example, by receiving and responding to complaints. Very recently, the Federal Financial Institutions Examination Council (FFIEC) released proposed guidance on the applicability of consumer protection and … [Read more...]

NetWars Cyber City Project Near Completion

January 14, 2013 By Continuity_Compliance Leave a Comment

Very soon (est. March 2013) construction on the NetWars Cyber City project will be completed. NetWars Cyber City is a small-scale city located close by the New Jersey Turnpike complete with a bank, hospital, water tower, train system, electric power grid, and a coffee shop, developed by the SANS Institute as part of a project to help train cyber warriors to defend against online attacks and teach them how to secure a city's vital physical infrastructure(s). This SANS project objective is best explained by the statement "….when you lose control of cyberspace, you lose control of the … [Read more...]

Prepare My Business begins 2013 Campaign of Free Preparedness Webinar Offerings

January 14, 2013 By Continuity_Compliance Leave a Comment

For the third consecutive year, the US Small Business Administration has joined with Agility Recovery to co-sponsor the Prepare My Business Campaign, a free educational resource for businesses of all types and sizes to become better prepared for disasters, both large and small. The 2013 campaign kicks off with the first of the free monthly educations webinars on January 15th called "2012 Year In Review: Valuable Lessons & Best Practices." By registering and attending this free webinar, you can join Deputy Associate Administrator of SBA Disaster Assistance Joe Loddo and Agility CEO Bob … [Read more...]

Cyber Attacks and Critical Infrastructure Protection

January 14, 2013 By Continuity_Compliance Leave a Comment

If your company is classified as a critical infrastructure facility, and, your disaster preparedness team is looking for updates on the status of cyber attack threats against industrial control systems, our staff recommends adding a copy of a recent report entitled “Malware Infections in the Control Environment " (ICS-CERT, December 2012) to your company’s cybersecurity threats related reading resource library. This Department of Homeland Security (DHS) report revealed that industrial control systems, which are used to monitor and control critical infrastructure facilities, were hit … [Read more...]

Critical Infrastructure Protection and Resilience Month

December 14, 2012 By Continuity_Compliance Leave a Comment

President Obama has proclaimed December 2012 as Critical Infrastructure Protection and Resilience Month to recognize the importance of protecting our Nation’s infrastructure resources and enhancing our national security and resilience. The Department of Homeland Security (DHS) defines critical infrastructure as”… the assets, systems, and networks, whether physical or virtual, so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, public health or safety, or any combination thereof.” The … [Read more...]

Security Snafus — The Worst of 2012 So Far…

December 14, 2012 By Continuity_Compliance Leave a Comment

As portrayed at a recent protest in central Brussels via a photo credited to REUTERS / Yves Herman depicts a protester wearing a Guy Fawkes mask (symbolic of the hactivist group Anonymous), the first six (6) months of 2012 ranged from the embarrassing hack of a conversation between the FBI and Scotland Yard to an overabundance of data breaches. (Click here to view more details). Click here to view those security snafus for the rest of the year. Ellen Messmer, a writer for Network World, has recently posted a gathering of the worst security snafus organized by month of 2012 inclusive … [Read more...]

To Certify or Comply? — That is the Question Many Ask When Organizations Pursue a PS-Prep Standard

Risk Management Concerns Escalate as Board Oversight Expectations Grow

Emergency Management Enhanced by Public-Private Partnerships

NetWars Cyber City Project Near Completion

Cyber Attacks and Critical Infrastructure Protection

Critical Infrastructure Protection and Resilience Month

Security Snafus — The Worst of 2012 So Far…

Security Updates

Cyber Security and Its Importance to an Organization