Voluntary Private Sector Preparedness Certification Program ANSI Homeland Security Standards Panel Seventh Plenary Meeting Dennis Schrader October 2, 2008 Introduction Thanks Who I am Currently serve as Deputy Administrator for FEMA’s NPD Overview of NPD areas of activity Public works and construction in the Navy General Motors manufacturing supervisor Healthcare industry for 16 years What are FEMA’s challenges Process began over 12 years ago Oklahoma City and Murrah Federal Building in 1995 September 11 attacks in 2001 Showed we needed to build a culture of preparedness in out Nation Hurricane Katrina Showed the need for Americans and businesses to prepare themselves for emergencies Bottom Line FEMA is working to empower citizens, businesses, non-governmental organizations and communities to respond Here today to talk about the Voluntary Private Sector Preparedness Program Secretary Michael Chertoff designated FEMA Administrator R. David Paulison as the official responsible for establishing the program. I serve on the Executive Council for the Program Also on the Executive Council: Bob Stephan, IP; Jay Cohen; S&T; Al Martinez-Fonts, PSO

Goal Improve private sector preparedness in disaster management, emergency management, and business continuity to enhance nationwide resilience in an all hazards environment Goal of the program: Enhance nationwide resilience in an all hazards environment by improving private sector preparedness in disaster management, emergency management, and business continuity. Private sector goals should be: Identify risks by performing vulnerability assessments Develop contingency and response plans Coordinate with suppliers and CI/KR customers to identify and manage the effects of an incident-related disruption Goal should be to ensure capability of the private sector to deliver goods and services when the need arises

Key Guiding Principles Participation is voluntary Provide method to independently certify preparedness of private sector entities Administered by non-government entity DHS must designate one or more standards to be used in assessing private sector preparedness Integrate/leverage existing regulatory requirements and existing efforts, if feasible Certification of private sector entities will be performed by non-government certifying bodies Small business consideration Key Guiding Principles Participation in the program is entirely voluntary DHS will evaluate and designate one or more standards to be used in assessing private sector preparedness. Accreditation and credentialing will be managed by a non-government body – In June 2008, DHS signed a contract with the ANSI-ASQ National Accreditation Board, or ANAB. DHS must designate one or more standards – Will use existing preparedness standards as a starting point Will work with Standards Development Organizations such as the National Fire Protection Association and International Standards Organization to develop additional standards if needed It is important to recognize the efforts of private sector entities who have already taken initiatives for preparedness such as the health care industry, insurance and financial institutions: Certification of private sector entities will be performed by accredited third-party certifying bodies Work closely with strategic partners to address the concerns of small business

Program Implementation Concept Target criteria selecting a comprehensive disaster management, emergency management, and business continuity standard. Establish accreditation and certification program Select standards for use Accrediting body establishes program, working with certifying bodies Certification of private entities begins Refine target criteria in collaboration with stakeholders SDOs incorporate enhanced target criteria in periodic standards revisions How will we do this? Target Criteria – You will hear more about this later today Establish Initial Target Criteria for preparedness standards Begin Developing Target Criteria for Enhanced Standards (more comprehensive than those for existing standards) Establish Accreditation and Certification Program Provision for Small Businesses Select Standards for Use Accrediting Body establishes program, working with Certifying Bodies Certifying Bodies begin certifying private entities Refine Target Criteria for Enhanced Standards in collaboration with stakeholders CIKR Sectors Standards Development Organizations (SDOs) Other government agencies Others outside government SDOs Incorporate Enhanced Target Criteria in Periodic Standards Revisions Collaborative Process DHS is committed to a collaborative process that will fully engage the private sector through a range of partnerships and forums such as this. Early input to program through public/private collaboration: Alfred P. Sloan Foundation convened key stakeholders Discussed impact of voluntary preparedness standards on the private sector Objective to help Guide DHS program development Standards Development Organizations include: National Fire Protection Association (NFPA 1600) International Standards Organization (ISO/PAS 22399) British Standards Institute Global (BS 25999-2) Canadian Standards Association (CSA Z1600)