|
|
Business
Continuity - Private Sector
Business Continuity
is becoming widely accepted within Government, Business Private Sector, as
well as individually with accepted emergency planning and practices. Recognizing the need to prepare for
large,
medium and small scale
events; many Federal, State, and regional communities begin planning efforts
with Private sector
businesses which may provide assistance with many specific safeguards and
standards.
US Private
Sector Business Continuity Standards
|
Name
of Standard |
Purpose/Description |
|
NFPA 1600 |
Standard on Disaster /
Emergency Management and Business Continuity Programs |
|
OSHA 3327 |
Guidance on Preparing
Workplaces for an influenza Pandemic (2007) - Guidance booklet from
Department of Labor |
|
FFIEC Business
Continuity Planning Booklet |
FFIEC responsible for
establishing standards to which financial institutions are held. Applies
to US Banks and their providers |
|
FERC COOP: Continuity
of Operations Plan (2007) |
FERC reacted to 9/11/01
by making a statement providing regulatory guidance on certain energy
infrastructure reliability and security matters, recognizing
that electric, gas, and oil companies may need to adopt new procedures
to safeguard their systems. This regulatory requirement is mandatory. |
|
FFIEC:
Interagency Statement on Pandemic Planning (2007) |
Outlines actions and
strategies financial institutions consider developing pandemic plans and
strategies. Applies to US financial institutions and their service
providers |
|
NERC CIP 002-009
(2006) |
NERC CIP standards are
comprised of eight standards (including cyber asset identification,
security management controls, personnel and training, electronic
security perimeters, physical security, system security management,
incident reporting and response, and recovery plan for critical cyber
assets), each of which is mandatory for electric power and utility
companies. This regulatory requirement is mandatory. |
|
SEC 17 CFR 240 (2005) |
SEC regulations require
that financial transaction histories be maintained for all electronic
securities transactions, and backup power be in place to maintain
continuity.Applies to the US securities broker-dealer industry |
|
GLBA:
Gramm-Leach-Bliley Act (1999) |
The GLBA provisions are
intended to protect consumers' personal financial information held by
financial insitutions and gives authority to eight federal agencies and
the states to administer and enforce. Applies to all US financial
institutions which include not only banks, securities firms, and
insurance companies, but also companies providing many other types of
financial products and services to consumers. |
|
Health Insurance
Portability and Accountability Act (HIPAA) (1996) |
HIPAA, an act that passed
to ensure that customers are able to switch between health insurance
providers as smoothly as possible without unavailability, total loss, or
loss of integrity of their health data, dictates that organizations must
have a contingency plan in place in order to conform to the Act. This
regulatory requirement is mandatory. |
CRMC-ACP supports
business continuity planning efforts of organizations in the Denver metro
area and the Rocky Mountain region through its education, networking, and
information sharing programs. This page lists some of the Internet
resources available to assist local organizations with their business
continuity planning efforts.
"Powered By G. Lockhart Associates, Inc. "
|
Hot Topics
|