1. KEITH CANTANDO, CBCP CORPORATE SECURITY - PROGRAMS PROGRESS ENERGY KEITH.CANTANDO@PGNMAIL.COM PS-Prep (DHS – Voluntary Private Sector Preparedness Accreditation and Certification)

2. Implementing Recommendations of the 9/11 Commission Act of 2007 (Public Law 110-53) Mandated Action –Directs DHS to establish a “Voluntary Private Sector Preparedness Accreditation and Certification Program” –Select preparedness standards for accreditation and establish accreditation and certification program Improve Private Sector Preparedness in: –Disaster management –Emergency management –Business continuity Key Program Requirements –Voluntary Participation –Provide a method to independently certify preparedness of private-sector entities (third-party certification) –Integrate and leverage existing regulatory requirements and programs, if feasible

3. Program Coordination, Management, and Oversight Structure The Act identifies specific DHS program offices with oversight over PS-Prep: –Administrator of FEMA –Assistant Secretary for Infrastructure Protection –Assistant Secretary for the Private Sector –Under Secretary for S&T (DHS Standards Executive) DHS designated FEMA as the program lead

4. Certification Program Model

5. Adopted Standards On June 15, 2010, DHS announced adoption of the following standards: –NFPA 1600-Standard on Disaster / Emergency Management and Business Continuity Programs, “ …a common set of criteria for preparedness, disaster management, emergency management, and business continuity.” (2007 and 2010 editions) –BS 25999-Business Continuity Management. “…defines requirements for a management systems approach to business continuity, and integrates risk management disciplines and processes.” –ASIS SPC.1-2009 -Organizational Resilience: Security, Preparedness, and Continuity Management Systems “…defines requirements for a management systems approach to organizational resilience.”

6. Critical Infrastructure Sector-Specific Engagements

7. A Comprehensive Preparedness Program

8. PS-Prep Consideration Checklist

9. The Case for Preparedness Why prepare? –Resilience –Continuity –Sustainability Why prepare to a standard? –Supports a comprehensive framework for planning and execution –Provides for a systematic approach that supports planning beyond and across the silos of individual departments or business units –Sustains a repeatable process planning, evaluating and monitoring Why certify? –Provides for an independent 3 rd party validation

10. Electrical Sector DHS chose Electric Sector to model the Framework Guide Draft released 11/29/2010 EEI provided industry comments and consulted with DHS on PS Prep Guide Progress Energy representation:  Vinny Dolan –(President, PGN Florida) – EEI CEO Task Force  Keith Cantando (Corporate Security) – EEI BC Steering Committee

11. EEI BC Steering Committee Update Next steps for EEI Steering Committee- education awareness and self assessments Not proposing any certification at this time! Water and Nuclear sectors are next to have guidelines developed – December 2010 through February 2011 DHS has asked BC Steering Committee to review updates to preparation framework We should begin to see DHS ramp up the Ps-Prep marketing campaign in the February – March timeframe

12. Progress Energy Programs Business Critical Infrastructure (BCI) Program  Audited against PS Prep certification  Rated as effective  Exceeded Industry Peers in program maturity Storm Plans Mutual Aid compacts State and Federal regulatory requirements

13. Progress Energy’s Position Continue to mature and benchmark BCI Program Take credit for programs and agreements in place PS Prep Certification will require recurring financial and personnel resources At this time – there is not a defined level of value to be achieved Program is voluntary, Law would be required to make mandatory

14. PS-Prep Online Resources PS-Prep Resource Center www.fema.gov/privatesector/preparedness  Managed by FEMA  Links to Three Standards  Federal Register Notices  Press Releases and Fact Sheets  Critical Infrastructure Learning Series http://dhs.gov/ciwebinars  Partnering for Critical Infrastructure Preparedness  Voluntary Preparedness Standards  ANAB website http://www.anab.org  Information for certifying bodies  Information for private sector entities interested in certification

15. Questions?