Risk Management In the Private Sector

1. Risk Management In the Private Sector Session 5 Slide Deck Session 5

2. Objectives 5.1 Understand the Role of Business Crisis and Continuity Management as a Strategic Business Function Built on a Foundation of Risk Management. 5.2 Explain the Legal Requirements of a BCCM Program. 5.3 Understand the Purpose and Components of a Comprehensive BCCM Program Framework as Presented that Serves as the Model for this Session. 5.4 Discuss the Definitions of the BCCM Program Framework. 5.5 Explain the General Motivation and Role of the Private Sector Prior to 9/11/2001 with Respect to BCCM Program Development. Session 5

3. Objectives (Continued) 5.6 Discuss Some of the Public and Private Sector Initiatives Intended to Promote Cooperation Between the Public and Private Sectors Prior to and in the Aftermath of the Tragic Events of 9/11. 5.7 Explain the Changed and Evolving Role of the Private Sector Post-9/11/2001 with Respect to BCCM Program Development and Integration with the Public Sector. 5.8 Explain the Impact of Hurricane Katrina of Private Sector Preparedness and the Evolving Role of the Private Sector as a Partner in National Preparedness. 5.9 Discuss the Evolving Structure and Process for “Voluntary” Certification of Private Sector Preparedness. Session 5 Slide 5-

4. A BCCM PROGRAM The business management practices that provide the focus and guidance for the decisions and actions necessary for a business to prevent, mitigate, prepare for, respond to, resume, recover, restore, and transition from a disruptive (crisis) event in a manner consistent with its strategic objectives. Session 5 Slide 5-

5. Session 5 Slide 5-

6. Session 5 Slide 5-

7. Three factors which have historically blocked close partnerships between government and business • Distrust of each other’s motives • Lack of understanding about how the other side functions •  Inability of either side, particularly the business sector, to speak with ‘one voice Session 5 Slide 5-

8. Three Basic Principles of Project Impact • Preventive actions must be decided at the local level. • Private sector participation is vital. • Long-term efforts and investments in prevention measures are essential. Session 5 Slide 5-

9. Key Components of Disaster Recovery Business Alliances • They are community-based and community-driven. • They involve strong public/private-sector collaboration. • They are based upon a Hazard and Risk Assessment. • They recognize the importance of land-use planning and building codes as mitigation tools. • They recognize the role of incentives. • They integrate professional training opportunities, public awareness, and education for all sectors of the community into the whole process. Session 5 Slide 5-

10. Critical Infrastructure Assurance Office Major Initiatives • Coordinate and implement the national strategy. • Assess the U.S. Government's own risk exposure and dependencies on critical infrastructure. • Raise awareness and educate public understanding and participation in critical infrastructure protection efforts. • Coordinate legislative and public affairs to integrate infrastructure assurance objectives into the public and private sectors. Session 5 Slide 5-

11. NRF Roles for the Private Sector Session 5 Slide 5-

12. NRF Essential Private Sector Responsibilities • Planning for the protection of employees, infrastructure, and facilities. • Planning for the protection of information and the continuity of business operations. • Planning for, responding to and recovering from incidents that impact their own infrastructure and facilities. • Collaborating with emergency management personnel before an incident occurs to ascertain what assistance may be necessary and how they can help. • Developing and exercising emergency plans before an incident occurs. • Where appropriate, establishing mutual aid and assistance agreements to provide specific response capabilities. • Providing assistance (including volunteers) to support local emergency management and public awareness during response and throughout the recovery process. Session 5 Slide 5-

13. NIPP Government Assistance to the Private Sector • Providing owners and operators timely, analytical, accu­rate, and useful information on threats to CI/KR. • Ensuring industry is engaged as early as possible in the development of initiatives and policies related to NIPP implementation and, as needed, revision of the NIPP Base Plan. • Ensuring industry is engaged as early as possible in the development and revision of the SSPs and in planning and other CI/KR protection initiatives. • Articulating to corporate leaders, through the use of public platforms and private communications, both the business and national security benefits of investing in security measures that exceed their business case. • Creating an environment that encourages and supports incentives for companies to voluntarily adopt widely accepted, sound security practices. Session 5 Slide 5-

14. NIPP Government Assistance to the Private Sector • Working with industry to develop and clearly prioritize key missions and enable their protection and/or restoration. • Providing support for research needed to enhance future CI/KR protection efforts. • Developing the resources to engage in cross-sector interde­pendency studies, through exercises, symposiums, training sessions, and computer modeling, that result in guided decision support for business continuity planning. • Enabling time-sensitive information-sharing and restora­tion and recovery support to priority CI/KR facilities and services during incidents in accordance with the provisions of the Robert T. Stafford Disaster Relief and Emergency Assistance Act. Session 5 Slide 5-

15. BENS Recommendations 1 Public-private collaboration, to plan, train, exercise, implement, and evaluate joint actions required to facilitate effective communication, decision-making, and execution. • Creating new ways to institutionalize public-private collaboration at the State and major metropolitan area levels • Facilitating greater public-private collaboration at the regional and Federal levels • Building a “Business Emergency Management Assistance Compact (BEMAC)” structure Session 5 Slide 5-

16. BENS Recommendations 2 Surge capacity for private-sector goods and services, and the capabilities resident in private-sector supply chains to manage the delivery of goods and services (whether pro bono or contracted) to and within disaster areas. • Improving government emergency-purchasing protocols • Revising deficient donations management systems • Modernizing logistics processes across the board Session 5 Slide 5-

17. BENS Recommendations 3 The legal and regulatory environment, which can help or dramatically hinder efficient delivery of private-sector support during a disaster. • Enact a nationwide body of “disaster law.” • Modify the Stafford Act to include the private sector. • Hold hearings to determine which Task Force recommendations can be implemented under existing law and which require new legislation. Session 5 Slide 5-

18. INTECEP Briefing Document Key Points • The program is to provide a method to assess the preparedness of private-sector entities, including businesses. • The certification program is to be voluntary with businesses and other organizations choosing to utilize its processes only if they see value in doing so. • The certification program will operated in the private sector outside of government by private-sector organizations. • The criteria for assessing preparedness are to be based on one or more standards reflecting existing practices in activities such as disaster/emergency management and business continuity.  • Businesses may be credited in the certification process for their existing preparedness certification efforts to avoid unnecessary duplication. Session 5 Slide 5-