BUSINESS CONTINUITY AND PREPAREDNESS PLANNING
ADD YOUR RESOURCES AND COMMENTS:
Origination: 02-20-2015 UTC 10:00
Last Updated: 12-7-2017 UTC 11:00
The business resource discussion can be found at the IdeaScale USCSRH website here:
Also see A Statistical Glimpse of Small Business Preparedness Challenges Here:
http://uscsrh.ideascale.com/a/idea-v2/122547
Planning for Emergencies:
Small Business Administration:
FEMA, Business Planning Resources:
FEMA, Incident Management Plan:
http://www.ready.gov/business/implementation/incident
FEMA, Resource Management Plan:
http://www.ready.gov/business/implementation/resource
FEMA, Emergency Response Planning:
http://www.ready.gov/business/implementation/emergency
FEMA, Crisis Communications Plan:
http://www.ready.gov/business/implementation/crisis
FEMA, Business Continuity Planning:
http://www.ready.gov/business/implementation/continuity
FEMA, Education and Training Plan:
http://www.ready.gov/business/implementation/training
(2014) FEMA, COOP Multi-Year Planning Guide:
http://www.fema.gov/pdf/about/org/ncp/coop_multi_year_plan_guide.pdf
(2014) DEPT OF AGRICULTURE-USDA, “COOP Planning”:
http://www.gsa.gov/portal/getMediaData?mediaId=191963
Example Business Continuity and Recovery Contingency Plans:
(2012) EXAMPLE Foreign Affairs EM and COOP (excellent reference):
http://www.state.gov/documents/organization/139467.pdf
(2011) EXAMPLE IRS COOP Plan:
http://www.irs.gov/pub/irs-utl/incidentresponsetest-and-exerciseguidance.doc
HHS, Disaster Recovery Contingency Overview:
FEMA, IT Recovery Plans:
BUSINESS PREPAREDNESS FORMS, TEMPLATES, TOOLS AND KITS
Forms and Template Resources:
(2014) FEMA Basic Risk Assessment Table:
http://www.fema.gov/media-library-data/1389015304392-877968832e918982635147890260624d/Business_RiskAssessmentTable_2014.pdf
(2014) FEMA, Program Coordinator and Committee Worksheet:
http://www.fema.gov/media-library-data/1388777333190-cb4f082c6a185160ea07609b2664e353/Business_ProgramCommittee_Worksheet_2014.pdf
(2014) FEMA Basic Emergency Supply List:
http://www.fema.gov/media-library-data/1390846764394-dc08e309debe561d866b05ac84daf1ee/checklist_2014.pdf
(2014) FEMA, COOP Multi-Year Planning Template:
http://www.fema.gov/media-library-data/1393947474558-f38b6ada217b16fc8aa67e207362f6f9/MYSPMP%20Template.pdf
(2014) FEMA, Pandemic Influenza COOP Template:
http://www.fema.gov/media-library-data/1396880633531-35405f61d483668155492a7cccd1600b/Pandemic%20Influenza%20Template.pdf
(2014) FEMA, Essential Records COOP Template:
http://www.fema.gov/media-library-data/1403723708235-8739cde2b1a3542c3b40c7481886c620/Essential%20Records%20Plan%20Packet%202014.pdf
(2014) FEMA, Reconstitution Plan Template:
http://www.fema.gov/media-library-data/1414675982118-ffbd0962b65bdbf74ad96c13154bc5b5/Reconstitution%20Template.pdf
(2014) FEMA, Quick Insurance Policy Contact Sheet:
http://www.fema.gov/media-library-data/1389017324674-9b45706d0f7cb9bccef9c3e4dd4a64dd/Business_InsuranceDiscussionForm_2014.pdf
(2013) Template Corresponding to (CGC-1&2):
http://www.fema.gov/media-library-data/1389194640607-1a5f9a6d6557846f6e5924eea089f798/Non%20Federal%20Continuity%20Plan%20Template%20and%20Instructions.pdf
(2013) COOP Planning Template:
http://www.fema.gov/media-library-data/1386609058805-b084a7230663249ab1d6da4b6472e691/COOP-Planning-Template.pdf
(2013) FEMA, Devolution of Operations Plan Template:
http://www.fema.gov/media-library-data/1386609058808-b084a7230663249ab1d6da4b6472e691/Devolution-Planning-Template-July-2013.pdf
GSA Safety Form:
http://www.usa-federal-forms.com/usa-fedforms-gsa-gsa/gsa-3415-nonfillable.pdf
Business Preparedness Tools and Kits:
FEMA Business disaster and Preparedness kits:
https://www.fema.gov/small-business-toolkit/protect-your-property-or-business-disaster
(2014) FEMA Basic Business Impact Analysis Worksheet:
(2014) FEMA Basic Continuity Resource Worksheet:
(2013) FEMA CPG 201 THIRA 2nd ed.:
(2013) CAT for Non-Fed Entities:
http://www.fema.gov/media-library-data/1383669319984-f220831c906dc65bfcd1677c2a107dfe/Continuity%20Assistance%20Tool.pdf http://www.fema.gov/pdf/about/org/ncp/cat.pdf
(2012) USFA Mass Incident Deployment Resources:
(2010) FEMA CPG 101 EOP Guide:
http://www.fema.gov/pdf/about/divisions/npd/CPG_101_V2.pdf
(2010) FEMA CPG 101 Process Analysis Tool:
http://www.fema.gov/pdf/about/divisions/npd/CPG_101_v2_past.pdf
(2009) FEMA Emergency Relocation Group (ERG) Planning Guide:
https://www.fema.gov/pdf/about/org/ncp/erg_guide.pdf
GPO, “COOP-GoKit”:
http://gpo.gov/pdfs/about/COOP_GoKit.pdf
OSHA, Small Business Handbook (and toolkit with checklists):
https://www.osha.gov/Publications/smallbusiness/small-business.pdf
Business Risk Assessment Tool:
BUSINESS OCCUPANT EMERGENCIES
OEP Resources, Guides and Plans:
OSHA Publications:
https://www.osha.gov/pls/publications/publication.html
DHS, OEP Guide:
http://www.dhs.gov/sites/default/files/publications/ISC%20-Occupant%20Emergency%20Programs%20Guide%20FINAL.PDF
NIH, OEP Informational:
http://oacu.od.nih.gov/safety/1430.pdf
NIH, OEP Manual:
http://oma1.od.nih.gov/manualchapters/management/1430/index.html
GSA, OEP Guide:
http://www.gsa.gov/graphics/pbs/OEP_Guide.pdf
NASA, OEP Guide:
http://www.nasa.gov/centers/hq/pdf/706305main_occupant_emergency_plan_guidance.pdf
FPS, Federal Protective Service OEP Brief:
https://www.fbiic.gov/public/2008/jan/OEP/OEP_Intro_Brief.pdf
THREAT, HAZARD AND RISK MANAGEMENT
Human Threat, Hazard and Risk Management:
(2015) USCSRH, Threat Mitigation and Risk Assessment Reference Hub:
(2015) USCSRH, School and Place of Worship Violence Prevention Reference Hub:
(2015) USCSRH, Risk Assessment Reference:
http://uscsrh.ideascale.com/a/dtd/POST-3-EMERGENCY-OPERATIONS-RISK-ASSESSMENTS/64705-29117
(2015) FEMA, Determining your Risk:
https://www.fema.gov/determine-your-risk
FEMA Risk Management Series Safe Rooms and Shelters:
http://www.fema.gov/media-library-data/20130726-1523-20490-3889/fema453_cvr_toc.pdf
(2008) FEMA P-459 Building Protection from Terrorists:
http://www.fema.gov/media-library-data/20130726-1628-20490-1286/fema459_complete.pdf
FBI Active Shooter Reference:
http://www.fbi.gov/about-us/cirg/active-shooter-and-mass-casualty-incidents
FBI Workplace Violence Reference:
http://www.fbi.gov/stats-services/publications/workplace-violence
DHS Active Shooter Education Materials:
https://www.dhs.gov/publication/active-shooter-educational-materials
DHS Active Shooter Preparedness:
http://www.dhs.gov/active-shooter-preparedness
(2014) U.S. Secret Service-Preventing Targeted Violence:
http://www.secretservice.gov/ntac/ntac_threat.pdf
(2014) U.S. Secret Service-Point of Sale:
http://www.secretservice.gov/Securing_Sales_Brochure.pdf
http://www.secretservice.gov/HolidaySeason-2014.pdf
(2013) U.S. Secret Service-Making Schools Safer:
http://www.secretservice.gov/join/ntac/resource/ntac_saferschoolsmay2013.pdf
(2010) U.S. Secret Service-Campus Attacks:
http://www.secretservice.gov/ntac/CampusAttacks041610.pdf
(2008) U.S. Secret Service-Bystander Study-Targeted Violence:
http://www.secretservice.gov/ntac/bystander_study.pdf
(2004-08) U.S. Secret Service-Institution Insider Threat (Financial, Cyber, Com):
http://www.secretservice.gov/ntac/its_report_040820.pdf
http://www.secretservice.gov/ntac/final_government_sector2008_0109.pdf http://www.secretservice.gov/ntac/final_it_sector_2008_0109.pdf
http://www.secretservice.gov/usss_strategic_plan_2008_2013.pdf
(2005) U.S. Secret Service-Critical Infrastructure and System Sabotage:
http://www.secretservice.gov/ntac/its_report_050516.pdf
(2002) U.S. Secret Service-Guide to Managing Threat Assessment in Schools:
http://www.secretservice.gov/ntac/ssi_guide.pdf
(1999) U.S. Secret Service-Recommended Threat Assessment Textbook:
http://www.secretservice.gov/ntac/ntac_bsl99.pdf
EPA, Risk Resources:
Natural Hazards and Risk Management:
FEMA, Protecting your business from hazards hub:
https://www.fema.gov/protecting-your-businesses
(2013) FEMA Catalog of FEMA Earthquake Resources:
http://www.fema.gov/media-library-data/1394506756491-eac042da03e84513b9d034c7debcd6f8/FEMA%20P-736B%20Final%20508.pdf https://www.fema.gov/earthquake
(2012) FEMA Catalog (Wind Flood Wildfire):
http://www.fema.gov/media-library-data/20130726-1625-20490-8569/fema_p787.pdf
EXAMPLE (OLD) PROGRAMS AND GUIDANCE (1996) FEMA SLG101 (All Hazard EOP guide):
http://www.fema.gov/pdf/plan/slg101.pdf
CDC Hazards Preparedness Index:
http://www.bt.cdc.gov/hazards-all.asp
http://www.bt.cdc.gov/hazards-specific.asp
BUSINESS CYBER-SECURITY
Cyber-security Resources:
NIST, Special Security Publications:
http://csrc.nist.gov/publications/PubsSPs.html
(2014) DHS, Cyber Resilience Self-Assessment User Guide:
https://www.us-cert.gov/sites/default/files/c3vp/csc-crr-method-description-and-user-guide.pdf
(2014) DHS, Cyber Resilience Guidance:
https://www.us-cert.gov/sites/default/files/c3vp/csc-crr-question-set-and-guidance.pdf
(2014) TrustWave “Global Security Report”:
http://www.secretservice.gov/Trustwave_WP_Global_Security_Report_2014.pdf
(2014) Symantec Corp. “Internet Security Threat Report":
http://www.symantec.com/content/en/us/enterprise/other_resources/b-istr_main_report_v19_21291018.en-us.pdf
(2014) McAfee “Estimating Global Cost of Cybercrime”:
http://csis.org/files/attachments/140609_rp_economic_impact_cybercrime_report.pdf
(2012) NIST Computer Security Incident Handling Guide:
http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
(2005) US-CERT, “Protecting Aggregate data”:
https://www.us-cert.gov/sites/default/files/publications/Data-Agg-120605.pdf
BUSINESS FACILITY PREPAREDNESS IMPROVEMENT
Building Codes and Improvement Resources:
(2015) FEMA, Hazards, Risks, and Assessments of Buildings, Resources Hub:
https://www.fema.gov/building-science-publications-multi-hazard
(2015) Safe Rooms for Tornadoes and Hurricanes (Guidance for Community and Residential Safe Rooms) FEMA P-361, Third Edition / March 2015:
https://www.fema.gov/media-library/assets/documents/3140 http://www.fema.gov/media-library-data/1427459107161-81f0dd5f7a9dcbccbb3fe2c21118fcda/FEMA_P-361_2015_508.pdf
(2007) FEMA P-543 Improving Facility Safety from Flooding and High Winds:
http://www.fema.gov/media-library-data/20130726-1557-20490-1542/fema543_complete.pdf
FEMA, Building Codes and Standards:
https://www.fema.gov/building-code-resources https://www.fema.gov/additional-resources
FEMA, Mitigation Best Practices:
https://www.fema.gov/mitigation-best-practices
FEMA, Flood Territorial Map Risk Analysis Resources:
https://www.fema.gov/guidelines-and-standards-flood-risk-analysis-and-mapping
FEMA, Improvement program:
http://www.ready.gov/business/program/corrective
FEMA, Program Review Resources:
BUSINESS CONTINUITY RESOURCES
Continuity of Operations (COOP):
HHS, Emergency Preparedness & Continuity of Operations:
http://www.hrsa.gov/emergency/index.html
COOP for First Responders:
http://www.fema.gov/media-library-data/1410876985961-4c4bb391b6bd398849991f340aadb688/COOP%20for%20First%20Responders.pdf
CDC Business Emergency Response Publications:
http://www.cdc.gov/niosh/topics/emres/business.html
University of Florida Disaster Handbook:
http://www.disaster.ifas.ufl.edu/
ARC, American Red Cross, “Guide to Business Continuity Planning CD-ROM”:
http://www.redcross.org/images/MEDIA_CustomProductCatalog/m4240208_BusContCDROMEsheet.pdf
(2014)
FEMA Basic Business Continuity Plan:
http://www.fema.gov/media-library-data/1389019980859-b64364cba1442b96dc4f4ad675f552e4/Business_ContinuityPlan_2014.pdf
(2014) FEMA Basic Emergency Response Plan:
http://www.fema.gov/media-library-data/1388775706419-f977cdebbefcd545dfc7808c3e9385fc/Business_EmergencyResponsePlans_10pg_2014.pdf
(2014) FEMA Basic Emergency Response Resource Requirements:
http://www.fema.gov/media-library-data/1388776013801-03b8eb0458eebb58be60fad872a50f23/Business_EmergencyResponseResources_2014.pdf
(2014) FEMA Business Preparedness Mentor Guide:
http://www.fema.gov/media-library-data/1389297782391-3d4fb51ed7246e355a6f79152225dc34/business_mentor_guide_2014.pdf
(2014) FEMA Business Preparedness User Guide:
http://www.fema.gov/media-library-data/1392217307183-56ed30008abd809cac1a3027488a4c24/2014_business_user_guide.pdf
(2014) FEMA: Continuity of Operations DNCP:
http://download.1105media.com/gig/Events/download/2014/Presentations/AB2-9_Kretz.pdf
(2014) FEMA, “Continuity Webinar Series”:
http://www.fema.gov/media-library-data/1410876611469-6ed3a9f5e6e1cc518ad47a9ebd8f8af7/COOP%20Webinar%20Serires.pdf
(2014) FEMA, Essential Records COOP:
http://www.fema.gov/media-library-data/1410876045729-63f035340a9f7fc30b9e881911391dd9/COOP%20Essential%20Records.pdf
(2014) FEMA Telework COOP:
http://www.fema.gov/media-library-data/1410875825235-6e7eccb0ed3d181fda03dcb780626e18/COOP%20Telework%20Planning.pdf
(2014) FEMA, “Continuity of Operations Capabilities”:
https://www.fema.gov/continuity-operations/continuity-operations-capabilities
(2013) Continuity Guidance Circular 1 (CGC 1):
http://www.fema.gov/media-library-data/44876e4a34c9b25086532be26954b1b2/CGC%201%20Signed%20July%202013.pdf
(2013) FEMA, Leadership COOP Program Management:
http://www.ready.gov/program-management
Leadership Preparedness Training Approval:
http://www.fema.gov/media-library-data/da237a57eb0f81ccbec247b104019d3e/Training%20Guide%20-%20%20Gaining%20Leadership%20Buy%20In.pptx
Gaining Senior Leadership Preparedness Approval:
http://www.fema.gov/media-library-data/e869bed9b9d898288271c763140edd3b/Gaining%20Senior%20Leadership%20Buy%20In%20.pptx
(2013) FEMA, IS-520 - COOP for Pandemic Influenza: http://www.training.fema.gov/is/courseoverview.aspx?code=IS-520
(2013) CDC Public Health Emergency Preparedness (PHEP):
http://www.cdc.gov/phpr/documents/PHEP_BP1_PM_Specifications_and_Implementation_Guidance_v1_1.pdf -
(2013) NIH “Emergency Preparedness Handbook”:
http://www.ors.od.nih.gov/ser/depc/info/Documents/NIH%20Emergency%20Preparedness%20Handbook%20June%202013.pdf
(2011) FEMA, Leadership Support for Continuity Guide:
http://www.fema.gov/media-library-data/71df1efbd873f0c3a1ef6bf02b15ca02/STTL%20-%20Leadership%20Support%20for%20Continuity.pdf
(2011) FEMA, National Preparedness Goal:
http://www.fema.gov/media-library-data/20130726-1828-25045-9470/national_preparedness_goal_2011.pdf
(2011) CDC Public Health Preparedness Capabilities (PHPC):
http://www.cdc.gov/phpr/capabilities/DSLR_capabilities_July.pdf
(July 2010) Continuity Guidance Circular 2 (CGC 2)
http://www.fema.gov/pdf/about/org/ncp/coop/cont_guidance2.pdf
(2010) NIH Division of Emergency Preparedness and Coordination, COOP program:
http://www.ors.od.nih.gov/ser/depc/Documents/em_coop.ppt
(2010) FEMA, Incident Management Handbook:
http://www.aphis.usda.gov/emergency_response/downloads/hazard/Incident%20Management%20Handbook6-09.pdf
(2008) Federal Continuity Directive 1 (FCD 1):
http://www.fema.gov/pdf/about/org/ncp/fcd1.pdf
(2008) Federal Continuity Directive 2 (FCD 2) - Mission Essential Functions (MEF) to Support the (NEF):
http://www.fema.gov/pdf/about/org/ncp/fcd2.pdf http://www.fema.gov/pdf/about/offices/fcd2_b.pdf
(2008) NASA, Contingency Planning Guidance:
http://www.nasa.gov/pdf/419925main_ITS-HB_0040-%20_.pdf
(2007) DHS/FEMA, Target Capabilities List:
http://www.fema.gov/pdf/government/training/tcl.pdf
(2007) FEMA, “COOP Tribal”:
http://www.fema.gov/media-library-data/1410876421857-7f547ea7638d604fa0bb2a69685798d1/Tribal%20COOP%20Overview.pdf
(2006) National Industrial Security Program Operating Manual (NISPOM) http://www.dss.mil/documents/odaa/nispom2006-5220.pdf
(2004) FEMA, Business Crisis and Continuity Management Framework:
http://www.training.fema.gov/hiedu/docs/emt/shawtextbook011105.pdf
(2004) FEMA Public Assistance Preliminary Damage Manual:
http://www.fema.gov/media-library-data/20130726-1826-25045-5711/fema_publication_326___pda_guide.pdf
(2001) FEMA/FED Preparedness Circular 66, TT&E:
http://www.fema.gov/pdf/library/fpc66.pdf
(2001) FEMA/FED Preparedness Circular 67, Alt Facilities COOP:
http://www.fema.gov/pdf/library/fpc67.pdf
(1999) FEMA/FED Preparedness Circular 65, Exe. Branch COOP:
http://fas.org/irp/offdocs/pdd/fpc-65.htm
Contracted Business COOP Support Service Providers:
ARC FREE OPTIONS:
American Red Cross Disaster Preparedness Academy:
http://www.redcross.org/images/MEDIA_CustomProductCatalog/m7440239_Orange_County_-_Disaster_Preparedness_Academy.pdf
American Red Cross Ready Ratings:
www.readyrating.org
IBM BUSINESS CONTINUITY AND RESILIENCY SERVICES:
Business Continuity Service Options:
http://www-935.ibm.com/services/us/en/it-services/business-continuity/
Business Continuity Managed Options:
http://www-935.ibm.com/services/us/en/it-services/business-continuity/business-continuity-management/index.html
Business Continuity Risk Reduction:
http://public.dhe.ibm.com/common/ssi/ecm/bu/en/buw03030usen/BUW03030USEN.PDF
Business Continuity Storage System Functions:
http://www.redbooks.ibm.com/redbooks/pdfs/sg247759.pdf
OTHER CORPORATIONS:
DRI International (Risk Reduction and more):
https://www.drii.org/
Association of Contingency Planners –International:
http://www.acp-international.com/
Business Continuity Institute (USA):
http://thebci.org/index.php/home/us-chapter-home
Agility Recovery Solutions:
www.agilityrecovery.comIBHS
Open for Business:
www.disastersafety.org
EDUCATION, TRAINING AND EXERCISE
Business Preparedness Standards Resource:
ASIS BUSINESS CONTINUITY GUIDELINES AND THE U.S. CHAMBER OF COMMERCE. A Practical Approach to Emergency Preparedness, Crisis Management, and Disaster Recovery:
https://www.uschamber.com/sites/default/files/legacy/issues/defense/files/guidelinesbc.pdf
Business Preparedness Education:
FEMA COOP Level-I & Level-II courses/training:
http://training.fema.gov/programs/coop/
(April 2015) E550 FEMA COOP Training Course:
FEMA Business Crisis and Continuity Management:
http://www.training.fema.gov/hiedu/docs/busind/bccm%20-%20course%20syllabus.doc
(2014) DHS/FEMA (new) PS-Prep options with certification:
https://www.fema.gov/about-ps-preptm http://www.fema.gov/program-resources http://www.fema.gov/pdf/privatesector/FEMA_PS-Prep_One-Pager_Generic.pdf
NATIONAL FIRE PROTECTION ASSOCIATION (NFPA 1600: Standard on Disaster/Emergency Management and Business Continuity Programs):
http://www.nfpa.org/aboutthecodes/AboutTheCodes.asp?DocNum=1600
ASIS SPC.1-2009 (Organizational Resilience Security, Preparedness, Continuity Management Systems):
http://www.ndsu.edu/fileadmin/emgt/ASIS_SPC.1-2009_Item_No._1842.pdf
ISO 22301:2012 Societal security, Business continuity management systems:
Business Preparedness Training, Exercise and Evaluation:
(2013) FEMA, Continuity Exercise Design:
(2013) FEMA, Telework Telework Exercise and Template:
Telework Handbook:
(2011-13) DHS & FEMA National Exercise Programs and HSEEP:
https://www.fema.gov/exercise http://www.fema.gov/media-library-data/20130726-1914-25045-8890/hseep_apr13_.pdf
(2006) NIST Guide to TT&E Programs for IT Plans and Capabilities:
http://csrc.nist.gov/publications/nistpubs/800-84/SP800-84.pdf
FEMA, Testing and Exercise Options:
EXECUTIVE ORDERS, DIRECTIVES AND POLICY
National Support for Preparedness:
(2012) White House, National Strategy for Global Supply Chain Security:
http://nmio.ise.gov/docs/National%20Strategy%20for%20Global%20Supply%20Chain%20Security.pdf
(2011) WH, “NSTIC Strategy”:
http://www.whitehouse.gov/sites/default/files/rss_viewer/NSTICstrategy_041511.pdf
(2011) WH, “International Strategy for Cyberspace”:
http://www.whitehouse.gov/sites/default/files/rss_viewer/international_strategy_for_cyberspace.pdf
(2007) National Continuity Policy Implementation Plan:
http://www.fema.gov/media-library-data/1384886826028-729844d3fd23ff85d94d52186c85748f/NCPIP.pdf
(2007) "National Continuity Policy," (supersedes PDD 67):
http://www.fema.gov/pdf/about/org/ncp/nspd_51.pdf
(2007) NSPD-51/HSPD-20:
http://fas.org/irp/offdocs/nspd/nspd-51.htm
(2007) Congress National Continuity Report:
http://fas.org/sgp/crs/secrecy/RS22674.pdf
(2006) U.S. Government Federal COOP:
http://www.federalnewsradio.com/pdfs/fedsources.pdf
(2006) GAO, COOP Report:
http://www.gao.gov/assets/270/269589.pdf
(2003) WH, “National Strategy to Secure Cyberspace”:
https://www.us-cert.gov/sites/default/files/publications/cyberspace_strategy.pdf - (2000) Disaster Mitigation Act (DMA2K):
http://www.fema.gov/media-library-data/20130726-1524-20490-1790/dma2000.pdf
(1988) EO 12656 “Assignment of Emergency Preparedness Responsibilities”: