Evolution of Emergency Management and Private Sector Preparedness

1. Evolution of Emergency Management and Private Sector PreparednessAccredited Standards~ Key Steps in Their Broader Adoption and Use Mr. Ashley P. Moore Senior Preparedness Policy Advisor Standards & Technology Branch Incident Management Systems Integration Division National Preparedness Directorate Federal Emergency Management Agency

2. Emergency Management and Private Sector Preparedness Standards • Emergency Management • NFPA 1600 (2007) Standard on Disaster Emergency Management and Business Continuity Programs • Evolving: EMAP-Emergency Management Accreditation Program (ANSI PINS) • Emergency Management and Private Sector Preparedness • NFPA 1600 (2007) Standard on Disaster Emergency Management and Business Continuity Programs • ASIS SPC.1-2009 Organizational Resilience: Security, Preparedness and Continuity Management Systems - Requirements with Guidance for Use • BSI 25999 Business Continuity Management • Evolving: ISO 223 Societal Security

3. The Office of Management and Budget (OMB) issued Circular A-119 Circular A-119 “Federal Participation the Development and Use of Voluntary Consensus Standards and in Conformity Assessment Activities” (February 1998) Guidance on Participation in the Development and Use of Non-Government Standards Dated: December 2007 Version 1.0 The Circular reiterates the Act’s requirements for the use of voluntary standards and provides guidance to promote consistent application of the Act across federal agencies and departments. In addition to being the law, it is the best interest of the Department of Homeland Security (DHS) to participate the development of non-government standards (NGSs) and to adopt and use them to the extent feasible, practical, and economical. Federal Role, Authority & Guidance

4. Emergency Management Emergency Management Accreditation Program-EMAP (ANSI Accredited SDO) Establishes a Standard and Duty of Care for State and Local Emergency Management Program and Planning Assessment First Responder Standards Public & Private Sector Preparedness NFPA 1600 BSI – 25999 ASTM – EM & IM ASIS – BCM ISO ISO/PAS 22399 ISO 223 Federal Representation to SDO’s Private Sector Partnership with EM Cross Sector Interdependencies with Critical Infrastructure Community Resiliency

5. The CaseforPreparedness

6. 9/11 Commission Recommendation

7. Intelligence Reform and Terrorism Prevention Act of 2004

8. Hurricane Katrina, and Rita 2005Small Businesses • Small businesses are a major part of any economy, accounting in the U.S. for approximately 75 percent of all net new jobs. • Small businesses are also the most vulnerable to a disaster. • In fact, Hurricane Katrina touched more than 80,000 small businesses across the Gulf Coast region in 2005. • Some experts believe that 60 percent of those businesses are not coming back. • Small businesses in the upper Texas Gulf Coast region were also hit very hard by Ike. • There is a great need for financial assistance for these businesses. • Experts generally agree that without financing and assistance, these businesses may not return, which could cause great economic upheaval since many of the communities affected by the storm rely on small businesses for much of their revenue. • Of particular concern is that many small businesses sustained more than 50 percent damage, and may be required to rebuild elevated structures or pay increased rent to cover the costs incurred by the property owner to rebuild in compliance with current codes. • Such endeavors are extremely costly and may be out of reach for small businesses that have already lost significant revenue from downtime and lost inventory.

9. Implementing the 9/11 Commission Recommendations Act (2007)Public Law 110-53 Title IX: Private Sector Preparedness

10. Hurricane IKE 2008 • Small locally owned businesses were hit particularly hard by Ike. • The majority of experts interviewed by the U.S. Department of Commerce’s Economic Development Administration (EDA) stated that there is a great need for financing to get these businesses back up and running. • There were concerns that if immediate steps are not taken to provide assistance to these businesses, they may never come back. • This could cause great economic upheaval because many of the affected communities rely on small businesses for much of their revenue and the businesses are essential to their local economies. 2005 2008 34 Counties 22 Counties 3 Years Later The map above indicates the counties of Texas that suffered the effects of two major hurricanes within three years. The counties marked in red experienced actual physical damage from the storms. Those in orange did not, but because of the interdependence of the economy, they still deal with significant indirect economic effects from the disruption in neighboring counties.

11. Private Sector Preparedness,Risk Management, & BC Standards • Preparedness • Loss Avoidance • Risk Transfer - Insurance IdentifyAnalyzeReduce Transfer Individual Risk Preparedness Planning Transfers across all domains Business Risk • Owner • Corporate Management • Executive Board • Operator/Manager • Employee • Faith Based • NGO’s • Communities-Urban/Community • Development • Businesses Business and Community Risk Build and Enhance Community Resilience

12. The Challenge What next? Integrated supply chains Natures Catastrophic Events Outsourcing Off shoring Local production Complexity Contagious Disease Outbreaks e.g. Pandemic flu War against terror IT Security & Failure Sever Storms/Flooding Fire Over time

13. Business Continuity Buffer Zone Distinctly Focused on BC Preparedness and Planning Unforeseen Hazards

14. Blast Effects: Perception vs. Reality

15. Private Sector Business Preparedness & Continuity: The Planning Buffer Zone No Sense of Community and Resiliency

16. Private Sector Business Preparedness & Continuity:The Planning Buffer Zone and Cross-Sector Interdependencies: Risk Analysis Factors Vulnerability Considerations Critical Infrastructure, Roads, Streets, Hwys, Seaports Demographic Factors Hazard Identification, Risk Assessment, and Impact Analysis Addressing Risk Assessment, Impact Analysis as the Center of Gravity” Population: Death and Injury Built Environment Other surrounding Infrastructure Damage to Infrastructure Network Grids Technological Infrastructure Environmental Terrain Topographic Current Data on Magnitude And Intensity Demographic Factors Private Sector–“Your Business”

17. Organizational Management Risk EM & BC Preparedness Regulated vs. Non Regulated BC Human Capital People Information CFR & OHSA Public Safety Information Classification & Handling Regulations NFPA 101 Life Safety Code Technology Facilities CFR/OSHA Public Safety PCI DSS Data Security Compliance State/Local Structure & Safety Codes FFIEC Compliance

18. Legal Risk Mgmt & EM/BC ANSI Standards Program and Planning Frameworks EM and BC Framework Program • Program Administration • Program Coordinator • Advisory Committee • Program Evaluation Planning • Laws and Authorities • Risk Assessment • Incident Prevention • Mitigation • Resource Management and Logistics • Mutual Aid/Assistance • Planning • Incident Management • Communications and Warning • Operational Procedures • Facilities • Training • Exercises, Evaluations, and Corrective Actions • Crisis Communication and Public Information • Finance and Administration

19. Standards Evolution

20. NFPA 1600: 1995 Policy Disaster Management Coordinator Disaster Management Committee Legislation and Industry Code of Practice Hazard Identification and Risk Assessment Mitigation Organizational Roles and Responsibilities Resources Response Recovery The Plan Approval and Coordination Training and Evaluation NFPA 1600: 2010 Leadership and Commitment Program Coordinator Program Committee Program Administration Performance Objectives Laws and Authorities Finance and Administration Records Management Planning and Design Risk Assessment Incident Prevention Mitigation Planning Process Common Plan Requirements Resource Management Mutual Aid/Assistance Communications and Warning Operational Procedures Emergency Response Business Continuity and Recovery Crisis Communications, Public Information, and Education Incident Management Emergency Operations Centers (EOCs) Training and Education Testing and Exercises Program Improvement Program Review Corrective Action U.S. EM/BC Standards Evolution The NFPA Standards Council established the Disaster Management Committee in January 1991. The Committee was given the responsibility to develop documents relating to preparedness for, response to, and recovery from disasters resulting from natural, human, or technological events. The first document that the committee focused on was NFPA 1600, Recommended Practice for Disaster Management. NFPA 1600 was presented to the NFPA membership at the 1995 Annual Meeting in Denver, Colorado.

21. NFPA1600—2010

22. ANSI and EMAP • June 2008 EMAP Becomes a Standards Development Organization • Feb 2009 EMAP Submits an ANSI Project Initiation Notification Statement (PINS) to develop an ANSI Accredited Voluntary Consensus Base Emergency Management Standard • Timeframe: Published by Jan-Mar 2010

23. Comprehensive Common Sense Approach to Business/Community Preparedness and Resilience Collaborative Disaster/Emergency Management EMAP & NFPA 1600 (2010) EMAP & NFPA 1600 (2010) EMAP & NFPA 1600 (2010) EMAP & NFPA 1600 (2010) EMAP & NFPA 1600 (2010) EMAP & NFPA 1600 (2010)

24. Questions "The superior man, when resting in safety, does not forget that danger may come. When in a state of security he does not forget the possibility of ruin. When all is orderly, he does not forget that disorder may come. Thus his person is not endangered, and his States and all their clans are preserved." ...Confucius (551 BC - 479 BC)