February 5, 2012

PRIVATE SECTOR UPDATE — DHS Presents State of America’s Homeland Security

Photo courtesy of DHS

PS-Prep strategy planning groups, along with all business continuity and risk management members of teams in organizations of all sizes should be interested in listening to Janet Napolitano, Department of Homeland Security Secretary (DHS), as she delivers the second annual State of America’s Homeland Security address, on Monday, January 30 2012 at 1:00 PM EST.

Increasing our nation’s security and resilience remains a goal achieved through strong connections between DHS and our nation’s private sector.

Click here to watch Janet Napolitano’s presentation LIVE on Monday, January 30 2012 at 1:00 PM EST.

Business Continuity and Emergency Management Plan Testing — Need Help Pitching the Need?

Photo courtesy of blog.abn.org.au

Many of the readers of this website belong to emergency management and business continuity planning teams.  And, hopefully, those disaster preparedness focused teams are testing their emergency, continuity and disaster recovery plans regularly.

But if not, or if those risk management centered groups are looking for some useful information to assist the testing of those BC/DR plans, then, an article written by Jim Satterfield is a valuable resource to turn to when you need content and reasons to convince your fellow BC/DR team members – or even upper management — that funding and support is justified to test your plans.

As Satterfield says, “Everyone has a role in a crisis. Some are strategic, some are tactical. How decisions are made in a crisis is critical to the outcome. Because of this, the following holds true:

  1. Practicing emergency response helps assure that the response can proceed predictably during a crisis or disaster;
  2. Participation in exercises familiarizes everyone with the vulnerabilities, impacts, plans, mitigation strategies, incident management and crisis communications;
  3. Testing allows problems or weaknesses to be identified and used to stimulate necessary and appropriate changes; and
  4. Errors committed and experience gained during testing will provide valuable insights and lessons learned that can be factored into the planning/updating process.”

The full posting by Satterfield is in two parts, so be sure to read the entire posting, and, if applicable, pass this info on to those associates in your organization or even those disaster recovery and first responder teams in your community’s Emergency and Crisis Management Response areas.  And if your organization is in the private sector, please get this info to in-house team members of the PS-Prep strategy planning leaders.

Click here to read Part 1 and Click here  to read Part 2 of Satterfield’s postings.

New Members Named to 2012 ASIS Commission on Standards and Guidelines

ASIS recently announced the selection of members that have been named to the 2012 ASIS Commission on Standards and Guidelines.  This commission has the responsibility to advance the practice of security management through the development of standards and guidelines within a voluntary, nonproprietary and consensus-based process, utilizing the knowledge, experience and expertise of ASIS membership, security professionals and the global security industry.

One of those members named to the commission is Lisa DuBrock, CPA, Managing Partner, Radian Compliance, LLC, and, a contributing editor and writer for this website.  Lisa provides our readership with her views on the topics of business continuity management systems and PS-Prep related standards and guidelines such as BS25999-2, SPC.1:2009, NFPA 1600:2010,  and ASIS/BSI BCM.01:2010.

We congratulate Lisa DuBrock along with the other members of the 2012 ASIS Commission on Standards and Guidelines.

Click here to read the full press release of this announcement.

Business Continuity Planners May Face “Frictionless Sharing” Risks from New Facebook Apps

Photo courtesy facebook.com

While information security and privacy rights protection teams within organizations continue to monitor the potential privacy risks that Facebook may be presenting to their employees, a new announcement was made today indicating that Facebook is now adding over 60+ new applications within their auto-share technology.

Click here to read a Facebook company blog covering this news as released by Facebook’s director of platform Cal Sjogreen.

As you will read, Facebook users can now immediately begin adding these new apps to their timelines.

As Sjogreen states, “…the apps are all set up to use the “frictionless sharing” function on the social network, meaning that users only have to give an app permission to share information once. After that, the app updates automatically to a user’s profile, letting their friends know instantly what they may be eating, studying or listening to at any given moment.”

While it may be too early to accurately assess any additional risks these apps may present to existing business continuity plans, it may be a good idea to inform information security specialists, risk managers and HR privacy managers of this event.

PS-Prep strategy planning teams in the private sector, in local community disaster preparedness groups and even risk mitigation discussions among family and friends may warrant a close watching of this recent announcement.

Emergency Responder Knowledge Base Website Resource Available Online 24/7

The concept now well known as “Information Sharing” had its early adoption during the implementation, in October 2003, of “Project Responder”.

This original project was jointly sponsored by the Oklahoma City Memorial Institute for the Prevention of Terrorism (MIPT) and the U.S. Department of Homeland Security (DHS), and, was meant to assist emergency and first responder teams.

The project later evolved again – into the development and now widespread use of the Responder Knowledge Base (RKB) website (www.rkb.us).

The Responder Knowledge Base website is funded by DHS’s Federal Emergency Management Agency (FEMA), and is designed specifically to provide emergency personnel and organizations with a single source of integrated information on not only products, standards, certifications, and training, but also grants, publications, and equipment.

The RKB currently makes all of this information, and more, available to almost 78,000 registered users – a number that continues to grow.

If your organization or community emergency response personnel are not yet fully aware of this great resource, click here to give them more information and reasons to join.

Private sector organizations sponsoring PS-Prep strategy planning teams should also take advantage of this valuable resource.

Photo courtesy of kevincarbonaro.com

Information Risk, Data Breach and Career Domain Websites Launched by ISMG

The Information Security Media Group (ISMG) recentlyannounced the debut of three (3) new international media sites:

  1. InfoRiskToday – which site addresses information security, risk management, fraud and compliance concerns that affect all organizations and industry sectors.
  2. DataBreachToday – will provide news, insights and education on data breach prevention, response and notification.
  3. CareersInfoSecurity – will provide a single-stop for the latest news, insights, training and education on career strategies, skills and trends for information security and risk management professionals at all levels.

Concurrent with the launch of these three new sites, ISMG also will debut soon a new, updated design for its existing sites: BankInfoSecurity; CUInfoSecurity; GovInfoSecurity and HealthcareInfoSecurity.

Click here  to read more about these new and free resource opportunities to be presented to business continuity, emergency / risk management and PS-Prep strategy planning team members.

IS-317 Independent Study Course Now Offered by CERT

 

Photo courtesy of ravica.com

What better way to strengthen your personal preparedness skills in 2012, than taking advantage of a free self-learning course by your local Community Emergency Response Team (CERT) which will help you and your fellow team members at work, or the community first-responders or disaster preparedness fellow members in your community be better prepared whenever facing a disruptive incident or event.

“Introduction to Community Emergency Response Teams”, IS-317, is an independent study course, offered by CERT, that serves as an introduction to CERT for those wanting to complete training or as a refresher for current team members. It has six modules with topics that include an Introduction to CERT, Fire Safety, Hazardous Material and Terrorist Incidents, Disaster Medical Operations, and Search and Rescue. It takes between six and eight hours to complete the course. Those who successfully finish it will receive a certificate of completion.

This training will certainly help you become a stronger member in your workplace, community and family as we all need to improve our readiness levels in 2012.

IS-317 can be taken by anyone interested in CERT. However, to become a CERT volunteer, one must complete the classroom training offered by a local government agency such as the emergency management agency, fire or police department.

Click here to learn more about the local education and training opportunities available to you.

If applicable, please pass this information along to those business continuity, risk management, PS-Prep strategy planning and disaster preparedness team members at work – this information could be used as an additional resource of learning materials to complement those organizational readiness and BC/DR Plan manuals at work.

Personal Preparedness Course Now Offered by EMU

This website supports all efforts to advance levels of preparedness for individuals, communities, organizations and governments.  With this point in mind, our staff points your direction to a recent announcement that Eastern Michigan University  (EMU) now offers a course for certified emergency planning.

According to disaster preparedness expert Charlie Newsome, president of a Michigan based security company, First Response Solutions Inc., nine out of 10 people have no emergency contingency plan for their families.  Unfortunately, recent findings also indicate a low percentage of companies also have emergency contingency plans their companies let alone for their employees.

Eastern Michigan University officials, aware of this gap in forethought, devised a course for certified emergency planning with the help of Ann Coss, a principal in Personal Recovery Concepts, Inc.

EMU course planners said that in desperate times, it is essential that families are prepared to aid their own in the case that municipal services like police and fire cannot fulfill their duties.  The university’s training course provides training for individual, business and first-responder preparations that people might overlook during times of calm.

Our staff agrees that this proactive approach and hopes that this decision could be an incentive to have other educational entities offer similar courses to their students.

Click here  to view a video discussing the issues, events and concerns surrounding this decision by EMU.

Click here  to view how you and your family can become more personally prepared to face the unexpected – whether it be a minor issue or a major incident.

If you found this information applicable, please pass it along to those business continuity, risk management and PS-Prep strategy planning groups in your community and where you work.

FEMA’s Emergency Management Institute Celebrates 60 Years

Photo courtesy of Dan Schmidt (NFA Photographer)

FEMA’s Emergency Management Institute  (EMI) is commemorating 60 years of emergency training in 2011.

EMI traces its heritage back to 1951 as the former Civil Defense Staff College that was created to develop and conduct emergency training at all levels of government in response to the Cold War.  This tremendous task of conducting national civil defense training was later transferred to Battle Creek, Michigan, in 1954.

In 1980, the Staff College moved to its current location in Emmitsburg, Maryland, and, was renamed the “Emergency Management Institute.” The new name reflected a change in its training mission to that of a broader responsibility — EMI trains and educates emergency personnel to effectively and efficiently respond to disasters regardless if it is natural or manmade in origin.

Many of our reader’s business continuity and risk management plans will often have a reference or dependency on utilizing the resources of the EMI.

If applicable, please pass this information along to those disaster recovery and disaster preparedness – possibly even PS-Prep strategy planning — team members in your organization or your community.

Click here  for more information about this anniversary as well as what other capabilities or emergency preparedness or management resources may be available and useful to those BC/DR teams.

Business Continuity Management Terms Glossary Update Recently Released by BCI

photo courtesy of gsouto-digitalteacher.blogspot.com

Now approaching nearly a year ago, our staff advised our readers about the Business Continuity Institute’s (BCI) glossary of business continuity related terms.  That 2011 version has been updated, re-written and re-published by the BCI and is now available for download in pdf format.

Lyndon Bird, FBCI, a technical editor for the BCI, has managed the delivery of this updated version of this 2012 “Business Continuity Management Terms” document.

Definitions given in this newly released update of that glossary now include terms from the BCI’s GPG2010 and the BS 25999 standard, along with some additional comments in some cases ‘to improve clarity and understanding’ from the version update release in January 2011.

Click here  to view and download a pdf version of this Business Continuity Management Terms dictionary.

If applicable, please pass this information along to those business continuity, organizational resilience and PS-Prep strategy planning team members in your organization.  This content may also be a valuable resource for your community’s local disaster preparedness teams to review and include in their ongoing preparedness training level exercises.