MEMBERS AREA


 

 

 Business Continuity - Private Sector

Business Continuity is becoming widely accepted within Government, Business Private Sector, as well as individually with accepted emergency planning and practices.  Recognizing the need to prepare for large, medium and small scale events; many Federal, State, and regional communities begin planning efforts with Private sector businesses which may provide assistance with many specific safeguards and standards.

Date Articles
   

US Private Sector Business Continuity Standards

Name of Standard Purpose/Description
NFPA 1600 Standard on Disaster / Emergency Management and Business Continuity Programs
OSHA 3327 Guidance on Preparing Workplaces for an influenza Pandemic (2007) - Guidance booklet from Department of Labor
FFIEC Business Continuity Planning Booklet FFIEC responsible for establishing standards to which financial institutions are held. Applies to US Banks and their providers
FERC COOP: Continuity of Operations Plan (2007) FERC reacted to 9/11/01 by making a statement providing regulatory guidance on certain energy infrastructure reliability and security matters, recognizing that electric, gas, and oil companies may need to adopt new procedures to safeguard their systems.  This regulatory requirement is mandatory.
FFIEC:  Interagency Statement on Pandemic Planning (2007) Outlines actions and strategies financial institutions consider developing pandemic plans and strategies.  Applies to US financial institutions and their service providers
NERC CIP 002-009 (2006) NERC CIP standards are comprised of eight standards (including cyber asset identification, security management controls, personnel and training, electronic security perimeters, physical security, system security management, incident reporting and response, and recovery plan for critical cyber assets), each of which is mandatory for electric power and utility companies.  This regulatory requirement is mandatory.
SEC 17 CFR 240 (2005) SEC regulations require that financial transaction histories be maintained for all electronic securities transactions, and backup power be in place to maintain continuity.Applies to the US securities broker-dealer industry
GLBA: Gramm-Leach-Bliley Act (1999) The GLBA provisions are intended to protect consumers' personal financial information held by financial insitutions and gives authority to eight federal agencies and the states to administer and enforce.  Applies to all US financial institutions which include not only banks, securities firms, and insurance companies, but also companies providing many other types of financial products and services to consumers.
Health Insurance Portability and Accountability Act (HIPAA) (1996) HIPAA, an act that passed to ensure that customers are able to switch between health insurance providers as smoothly as possible without unavailability, total loss, or loss of integrity of their health data, dictates that organizations must have a contingency plan in place in order to conform to the Act.  This regulatory requirement is mandatory.

CRMC-ACP supports business continuity planning efforts of organizations in the Denver metro area and the Rocky Mountain region through its education, networking, and information sharing programs.  This page lists some of the Internet resources available to assist local organizations with their business continuity planning efforts.

"Powered By G. Lockhart Associates, Inc. "


Hot Topics