210 likes | 525 Views
Continuity of Operations Course Treatment. Presenter. John Orlando, PhD—Program Director Master of Science in Business Continuity Master of Science in Information Assurance jorlando@norwich.edu 802-485-2729 158 Harmon Drive Northfield, VT 05663.
E N D
Presenter • John Orlando, PhD—Program Director • Master of Science in Business Continuity • Master of Science in Information Assurance • jorlando@norwich.edu • 802-485-2729 • 158 Harmon Drive • Northfield, VT 05663
Higher Education has Largely Ignored Business Continuity • Focus on Emergency Management • Over 100 emergency management programs • www.training.fema.gov/emiweb/edu/collegelist • Naval Post-Graduate School EM Curriculum • BC not fit traditional higher education divisions • Business, Computer Science, Engineering?
New BC Programs • Norwich University • Master of Science in Business Continuity Management • Boston University • Master of Science in Business Continuity, Security, & Risk Management • New Jersey Institute of Technology • MS in Emergency Management and Business Continuity
Need for Business Continuity Programs • 80% of critical infrastructure in private hands • Regulations in some industries • Healthcare • Finance • Utilities
Norwich University MSBC • Comprehensive exploration of the field • Plan development • Risk Management • Organizational Resiliency • Implementation, testing, exercising • Online • 18 months of continuous coursework
Continuity of Operations • Business continuity: Private • Continuity of Operations: Public • Considerable need • Katrina: • Police • Court System
Implementing Recommendations of the 9/11 Commission Act of 2007 • DHS will actively encourage the development of business continuity programs in the US • ASIS/ANSI working on a BC standard
National Security and Homeland Security Presidential Directive 51 • Continuity programs must “be incorporated into daily operations of all executive departments and agencies.” • FEMA given job of training • Federal Continuity Directive 1
Two FEMA Certifications • Professional Continuity Practitioner • Master Continuity Practitioner
Norwich Course Treatments • Continuity of Governmental Operations • Professional Continuity Practitioner • Public Sector Incident Response • Master Continuity Practitioner
Deliverables • A complete syllabus, including: • Course description • Learning outcomes • Texts • Course structure • Grading system • 15 weekly topics
One week’s content • Overview of the topic • Objectives for the week • Lecture in text or voice-over PowerPoint format • List of required and recommended readings • Discussion questions • Essay question
COOP vs. Business Continuity • Similar methodology • Different terminology • Different goals • Business Continuity: protect profit • Customers are constituency • COOP: Protect public functions • Citizens are constituency
Based on BS 25999 Program Management Lifecycle
Federal Continuity Directive 1 COOP Program Management Lifecycle
BCM Protects • Employees • Data • Information & Communications Technology • Facilities • Reputation • Supply Chain of the organization
COOP Protects • Leadership • Staff • Communications & Technology • Facilities of the community
BCM Identifies Critical Processes in terms of money • Business Impact Analysis
COOP Identifies Essential Functions in terms of National Goals • Mission Essential Functions (MEFs): The limited set of agency-level government functions that must be continued after a disruption of normal activities. • Primary Mission Essential Functions: A subset of agency MEFs that directly support the National Essential Functions. • National Essential Functions: The eight functions the President and national leadership will focus on to lead and sustain the nation during a catastrophic emergency.
Coordination • BCM: Mostly focused on the organization • COOP: More focus on coordination with other governmental agencies.