Improving Organizational Resilience measures under the Private Sector Preparedness (PS-Prep) program
Additional information
on the US Government PS-Prep program for improved resilience can
be obtained from the US Government FEMA website at
http://www.fema.gov/media/fact_sheets/vpsp.shtm.
A brief
outline of these requirements follows:
Voluntary Private Sector
Preparedness (PS-Prep) Accreditation and Certification
Program
The Voluntary Private Sector Preparedness Accreditation and
Certification Program (PS‑Prep) was mandated following Title IX of the
Implementing Recommendations of the 9/11 Commission Act of 2007 (the
Act.). In
this Act, Congress instructed the Department of
Homeland Security (DHS) to devise, develop and implement a voluntary
program of accreditation and certification of private entities using
standards adopted by DHS that promote improved resilience,
including disaster management, emergency management and business
continuity programs. The main purpose of the Program is to
enhance nationwide resilience is a potentially uncertain and difficult
environment by encouraging private sector preparedness. Prior to the
Private Sector Preparedness program, there was no comprehensive set of
standards by which American businesses and other private sector entities
can assess their preparedness for all hazards. Having a plan to reduce
the impact from hazards on businesses that also provides protection to
employees will ensure that a business is resilient enough to be able to
recover and reopen following a disaster or other emergency.
Designation of
Standards
Congress directed DHS to designate one or more standards for assessing
entities under the program. The standards will be used by accredited
certifying entities to evaluate and certify compliance by private sector
entities with the standards adopted by DHS.
DHS published a notice in the Federal Register in Oct. 2009, announcing
its intent to adopt three standard. The three standards were approved
in June 2010, mainly based on scalability, balance of interest and
relevance to this program:
-
ASIS International SPC.1-2009
Organizational Resilience: Security Preparedness, and Continuity
Management System – Requirements with Guidance for use (2009
Edition). Available at no cost.
-
British Standards Institution 25999
(2007 Edition) - Business Continuity Management. (BS 25999:2006-1
Code of practice for business continuity management and BS 25999:
2007-2 Specification for business continuity management) The British
Standards Institution is making both parts available for a reduced
fee of $19.99 each.
-
National Fire Protection Association
1600-Standard on Disaster / Emergency Management and Business
Continuity Programs, 2007 and 2010 editions. Available at no cost.
Each of these standards comprehensively deals with preparedness and can
be applied to the majority of private sector entities. The DHS have
announced that it will continue to accept comments on PS-Prep, the three
adopted standards, and/or proposals to adopt any other similar standard
that satisfies the target criteria of the December 2008 Federal Register
notice which announced the program. DHS will review any comments
received or proposals for DHS adoption of additional standards and, when
merited, will publish a Federal Register notice providing the results of
that review or notifying the public of an intention to adopt additional
standards.
DHS considered several types of preparedness standards, including
standards that are likely to apply to a particular industry or sector of
the economy. In all, DHS evaluated twenty five standards (21 of which
were recommended by the public) using Target Criteria, published in the
December 24, 2008, Federal Register notice (73 FR 79140) in which DHS
announced the PS-Prep Program and sought public comment on all aspects
of its implementation. As the program develops, DHS remains committed to
ensuring that PS-Prep is developed and standards are selected in close
coordination with the private sector and other interested stakeholders.
DHS has engaged the public on programmatic issues through a series of
Federal Register Notices, public meetings and other interactions with
private sector firms, associations, and others.
Small Business Considerations
The Act recognized that small businesses need to be treated differently
in the PS-Prep program, and requires DHS to give special consideration
to small business concerns (as defined by Section 3 of the Small
Business Act (15 U.S.C. 632)). The December 24, 2008, Federal Register
Notice (73 FR 79140) contained an extensive discussion of DHS’
approaches to best reflect the interests of small businesses and the
purpose of the PS-Prep Program. The DHS is continuing to seek comments
from small businesses and others on the adoption of these standards and
their impact on future decisions to seek certification under the PS-Prep
Program.
Understanding the Certification Process
Over the next several months, the ANSI-ASQ National Accreditation Board
(ANAB), the accreditation body selected by DHS to develop and oversee
the certification process, will manage the accreditation and accredit
qualified third parties to carry out the certification in accordance
with the accepted procedures of the program. Private sector
organizations, including businesses and critical infrastructure and key
resources (CIKR) entities, may apply for certification to the applicable
requirements of preparedness standard(s) adopted by DHS. Certification,
in the context of this program, is confirmation that an accredited third
party certification organization has validated an entity's
conformance to a standard. Once an organization is certified, there
will be a periodic reassessment and audit process so the certification
organization can continue to have confidence in the organization's
conformity to emergency preparedness and business continuity management
system. The certifying organizations will be accredited by ANAB. DHS
will maintain and make public a listing of any private sector entity
certified as being in compliance with PS-Prep, if that private sector
entity consents to such listing.
Program Monitoring
DHS will monitor the effectiveness of the program on an ongoing
basis. DHS will review the accreditation and certification program
annually to ensure its effectiveness, to include the operations and
management of any of the accreditation and certification bodies and the
designated standards. The DHS has announced that it will make
improvements and adjustments to PS-Prep as necessary and as it considers
appropriate. |
