PS-Prep™ Program

1. PS-Prep™ Program The Voluntary PS-Prep™ Accreditation and Certification Program [Insert date here]

2. Contents at a Glance • The Impact of Disasters • History of the PS-Prep™ Program • What is PS-Prep™? • Why Prepare? • The PS-Prep™ Standards • Why Prepare to a Standard? • Benefits of Preparedness • The Preparedness Continuum

3. Contents at a Glance • Small/Medium-Sized Businesses & PS-Prep™ • Corporate Entities & PS-Prep™ • Non-Profit Organizations & PS-Prep™ • Why Certify? • PS-Prep™ and Critical Infrastructures • Final Thoughts • PS-Prep™ Resources • Contact

4. Disasters: Not If, but When • “The 21st-century incidents are increasing in frequency, scale, and consequence, and the private sector needs to be prepared to bounce back and help our nation recover.” — Bob Connors, Director of Preparedness at Raytheon Corporation (bcmusing.wordpress.com) 8.9 earthquake andtsunami strike Japan Three days of storms and tornadoes hit North Carolina to Michigan Major wildfire spreads across eastern America Tornado strikes Joplin, MO ….did these affect you? Recent Disasters 2011

5. What is PS-Prep™? • A voluntary program designed to build awareness and give private-sector entities the ability to safeguard their organizations against the effects of any type of disruption; • Congressionally mandated that DHS create a preparedness program by the 9/11 Commission Act of 2007; and • Composed of three DHS-adopted standards; • Encourages nationwide preparedness, resilience, and recovery in the event of an emergency.

6. Why Prepare? • “Private organizations across the country—from businesses to universities to non-profit organizations—have a vital role to play in bolstering our disaster preparedness and response capabilities. These new standards will provide our private-sector partners with the tools they need to enhance the readiness and resiliency of our nation.” — Janet Napolitano, Secretary of the U.S. Department of Homeland Security

7. Need for Preparedness • While 80% of companies have North American operations located in regions exposed to hurricanes, nearly 50% reported they are not well-prepared for a hurricane. • While 90% of companies have North American operations located in regions exposed to floods, more than 60% indicated they are not well-prepared for a flood. • While more than 80% of companies have North American operations located in regions exposed to earthquakes, more than 70% revealed they are not well-prepared for an earthquake. • Small businesses account for 99.95% of companies with employees, 50% of all private-sector workers, and nearly 45% of the nation's payroll. (Source: 2008 National Disaster Business Risk Study. Commissioned by FM Global)

8. Need for Preparedness (cont’d.) • The 9/11 Commission Report identified the private sector as having significant risks in being able to respond to and recover from disruption; and • Private-sector leaders should consider the impact of disruptions and possible consequences for employees, families, and neighborhoods/communities. - Possibility of incurring revenue loss and unanticipated costs if unprepared; and - Interrupted operations could impact organizational relationships and tarnish reputations.

9. Why Prepare to a Standard? • PS-Prep™ uses a standards-based approach to business continuity and recovery that will allow organizations to unify their preparedness activities under standards. • Preparing to a standard: • Provides a management system that includes policies, processes, procedures, performance measures, and quality improvement practices; • Allows for uniform and consistent planning; • Improves business continuity within departments and throughout the organization; and • Instills confidence in your organization among customers and stakeholders.

10. The Standards • Developed by preparedness experts; • Peer-reviewed; • Created and published by accredited Standards Developing Organizations (SDOs); and • Adopted by DHS for PS-Prep™.

11. ASIS SPC.1-2009American Society for Industrial Security (ASIS International) Organizational Resilience and Security Preparedness and Continuity Management • “This Standard specifies requirements for an organizational resilience (OR) management system to enable an organization to develop and implement policies, objectives, and programs taking into account legal requirements and other requirements to which the organization subscribes…” • “This Standard is applicable to any organization that wishes to: • Establish, implement, maintain, and improve an OR management system; and • Assure itself of its conformity with its stated OR management policy.”

12. BS 25999 British Standards Institute Business Continuity Management • “This British Standard specifies requirements for setting up and managing an effective business continuity management system (BCMS). This emphasizes the importance of: • Understanding business continuity needs and the necessity for establishing policy and objectives for business continuity; • Implementing and operating controls and measures for managing an organization’s overall business continuity risks; • Monitoring and reviewing the performance and effectiveness of the BCMS; and • Continual improvement based on objective measurement.” • “The requirements specified in this British Standard are generic and intended to be applicable to all organizations.”

13. NFPA 1600: 2007 & 2010 National Fire Protection Association Disaster and Emergency Management and Business Continuity • “This Standard shall provide disaster and emergency management and business continuity programs, the criteria to assess current programs or to develop, implement, and maintain aspects for prevention, mitigation, preparation, response, and recovery from emergencies.” • “It describes common elements, techniques, and processes using a total program approach…[and] presents the latest rules for: • Emergency management mitigation; • Preparedness; • Response; • Recovery; • Business Continuity.”

14. How Your Business Benefits Minimize Impact to Essential Operations, increasing entity’s opportunity to continue to operate. Protect Data and Information to ensure decisions can continue to be made to facilitate organization recovery. Create a Plan of Action for handling disruptions that is shared with employees and practiced through exercises. Gain Industry Recognition by promoting preparedness with suppliers and clients alike. Minimize Financial Losses by proactively planning and accounting for recovery resources before they are needed. Increase Reliability by proving your organization’s ability to mitigate all-hazard conditions.

15. The Preparedness Continuum • Becoming prepared is an ongoing process of making improvements over time; • You can start by learning best practices and incorporating processes that pertain to your critical operations; • Continue to enhance your level of preparation by strengthening your internal processes with a management system to align with a chosen standard; and • Upon fulfilling the chosen standard, your organization might decide to obtain third-party certification.

16. The Preparedness Continuum • PS-Prep™ can provide tools, contacts, and connections, no matter the size of your business. The intent is to see improvement in preparedness.

17. Small/Medium-Sized Businesses • The small-business community represents the largest single body of stakeholders in the private-sector preparedness enterprise. • Preparing your business for an emergency can: • Improve its ability to respond and recover; • Mitigate risk and offer safeguards for the investment you have made in the business; • Promote a strategic decision that will influence how you will handle employees, customers, suppliers, and your workspace in the event of an emergency; • Tell your customers and stakeholders what you value; and • Distinguish you from your competition.

18. Corporate Entities • Large entities have the unique capability of using crises as opportunities. Resilient corporations are likely to recover faster than the competition, gaining market share and customer loyalty. • Preparing your business for an emergency can: • Reinforce corporate survival by sustaining core operations and revenue streams through the lifecycle of a crisis; • Protect revenue and cash flows by protecting key assets and sustaining central operations; • Protect key assets, including inventories, property, equipment, data, documents, and intellectual property; and • Protect and support employees.

19. Non-Profit Organizations • With more than 1.6 million non-profit organizations in the United States, efforts to prepare for disaster must meet immensely diverse needs. Many have not implemented even the most basic continuity-of-operations plan. • Preparing your non-profit for an emergency can: • Safeguard employees, volunteers, beneficiaries, the community at large, and other internal and external stakeholders; • Strengthen engagement with corporate partners more effectively; • Appease concerns of members of your organization’s board or other managing body about the level of preparedness; and • Protect organizational assets.

20. Why Certify? • Third-party certification may not be the answer for all businesses, but those organizations that find it brings market value may choose to certify to one of the three standards. • Certification makes you proactive in safeguarding your operations against unforeseen hazards; • Certification minimizes your business operation risk; • Certification identifies inefficiencies; • Certification leverages marketing opportunities for differentiation; • Certification illustrates good corporate citizenship; and • Certification places your organization among a prestigious business community.

21. PS-Prep™ and Critical Infrastructure • The Department of Homeland Security (DHS) Office of Infrastructure Protection is collaborating with businesses to: • Identify guidelines, best practices, relevant regulations, and agreed-upon codes of practice that already apply to the sector; • Cross-map to adopted standards; and • Develop framework guides by sector entities and certifying bodies in applying standards.

22. PS-Prep™ and Critical Infrastructure • Sectors can use PS-Prep™ to mitigate risk in all-hazard environments. Framework guides set forth the basic scalable structure for developing a comprehensive preparedness plan in critical infrastructures. • Framework guides provide effective methodology for: • Reducing the impact of business disruptions; • Improving supply chain resilience; and • Strengthening internal processes.

23. PS-Prep™ and Critical Infrastructure • Agriculture and Food • Defense Industrial Base • Energy • Healthcare and Public Health • National Monuments and Icons • Banking and Finance • Water • Chemical • Critical Manufacturing • Dams • Emergency Services • Nuclear Reactors, Materials, and Waste • Information Technology • Communications • Postal and Shipping • Transportation Systems • Government Facilities

24. Critical Infrastructure Framework Guide • The Framework Guide outlined the following elements: • Introduction; • Getting Prepared; • Getting Certified; and • The Sector Perspective. • In addition, the PS-Prep™ Sector Data Set works in tandem with the PS-Prep™ Framework Guide.

25. Resources • FEMA Voluntary Private-Sector Preparedness Accreditation and Certification Program (PS-Prep™) Resource Centerwww.fema.gov/privatesector/preparedness • ANSI-ASQ National Accreditation Boardhttp://www.anab.org/accreditation/preparedness.aspx • Ready Businesshttp://www.ready.gov/business/ • U.S. Small Business Administrationhttp://www.sba.gov/content/disaster-preparedness • Red Cross—Ready Rating www.readyrating.org • Insurance Institute for Business and Home Safety www.disastersafety.org/business_protection

26. Contact Phone: (202) 646-3850 Email: PS-Prep@dhs.gov