1. August 31, 2011 SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks

2. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Key Findings 2  How many organizations currently have a formal disaster preparedness plan in place? In 2001, only slightly more than one-half of organizations had a formal disaster preparedness plan in place (e.g., a plan for what to do in case of an emergency or disaster) (54%). This percentage has increased to 76% in 2011.  Was any part of an organization’s disaster preparedness plan implemented or revised as a result of the Sept. 11 terrorist attacks? In 2011, more than one-half of organizations (61%) indicated implementing or revising their disaster plan specifically as a result of the Sept. 11 attacks. This was a slight increase from 2005, when 56% reported implementing or revising their plan because of the attacks.  Do organizations feel prepared for a potential threat or disaster (e.g., terrorist attack, natural disaster, epidemic, workplace violence)? Although the percentage of organizations that feel prepared increased in 2011, only 33% of organizations believe they are prepared to a great or very great extent and 42% feel prepared to a moderate extent.  What security provisions has your organization made as a result of the Sept. 11 attacks? Nearly one-half of organizations (48%) have offered or required more training on crisis/disaster management and developed business continuity plans (47%). Other provisions implemented as result of the 2001 attacks included developing communication plans for emergency situations (42%); installing and/or upgrading video cameras or closed-circuit television surveillance equipment (37%); and monitoring e-mails and Internet use by employees (33%).  Which organizations are better prepared? In general, larger organizations appear to be better prepared and more likely to have a disaster plan in place. The 2011 anniversary of the Sept. 11 events presents an opportunity for smaller organizations to consider their level of preparedness for a disaster.

3. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Percentage of organizations with a formal disaster preparedness plan (i.e., a plan for what to do in case of an emergency or disaster) 3 Note: Respondents who answered “not sure” were excluded from the 2011 analysis. (n = 306) (n = 268) (n = 6,855) (n = 5,460)

4. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 4 Comparison by Organization Staff Size Compared with smaller organizations, larger organizations (those with more than 2,500 employees) are more likely to have a formal disaster preparedness plan in place. Number of employees 25,000+ employees 2,500-24,999 employees 500-2,499 employees 100-499 employees 1-99 employees Organization has a formal disaster preparedness plan in place. 95%98%80%70%58% Large organizations (2,500 or more employees) > Smaller organizations (fewer than 2,499 employees) Percentage of organizations with a formal disaster preparedness plan (i.e., a plan for what to do in case of an emergency or disaster)

5. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 5 Percentage of organizations that have implemented or revised their disaster preparedness plan specifically as a result of the Sept. 11 attacks (n = 176) Note: Respondents who answered “not sure” were excluded from the analysis.

6. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Overall, how prepared is your organization for any potential threats or disasters (e.g., terrorist attack, natural disasters, epidemics, workplace violence)? 6 Note: 2005 and 2001 data do not equal 100% because of rounding. (n = 268) (n = 6,855) (n = 5,460)

7. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Overall, how prepared is your organization for any potential threats or disasters (e.g., terrorist attack, natural disasters, epidemics, workplace violence)? 7 Comparison by Organization Staff Size Compared with smaller organizations, larger organizations (more than 2,500 employees) are more likely to be prepared for any potential threat or disaster. Number of employees25,000+2,500 - 24,999500 - 2,499100 - 4991 - 99 Great extent prepared58%38%20%15%23% Small extent prepared0%9%16%30% Large organizations (2,500 or more employees) > Smaller organizations (Fewer than 2,499 employees)

8. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 What security provisions has your organization implemented or revised specifically as a result of the Sept. 11 attacks? 8 Note: n = 227. Total does not equal 100% because of multiple responses. Offering and requiring more training about crisis/disaster management48% Developing a business continuity plan47% Developing communication plans for emergency situations42% Installing and/or upgrading video cameras or closed-circuit television surveillance equipment 37% Monitoring e-mails and Internet use33% Developing backup data storage and/or backup facilities in order to restore the original data in an event of loss 30% Installing high-tech identification equipment such as badge scanners30% Requiring all visitors to wear identification badges26% Adding cyber locks (electronic padlocks) that allow security personnel to track who enters and leaves each building 25% Requiring all employees to wear an identification badge18%

9. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 How strongly do you agree with this statement: “One or more of my organization’s worksites is a potential target for a terrorist attack because of the nature of work my organization conducts.” 9 n = 302

10. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 How strongly do you agree with this statement: “One or more of my organization’s worksites is a potential target for a terrorist attack because of its proximity to other locations that could be targets.” 10 n = 305

11. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Demographics: Organization Industry 11 n = 302 IndustryPercentage Manufacturing18% Professional, scientific and technical services12% Health care and social assistance11% Finance and insurance10% Public administration6% Educational services5% Accommodation and food services (accommodation; food services and drinking places)4% Retail trade4% Arts, entertainment and recreation3% Construction (construction of buildings; heavy and civil engineering construction; specialty trade contractors) 3% Transportation and warehousing3% Wholesale trade3%

12. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Demographics: Organization Industry (continued) 12 n = 302 IndustryPercentage Administrative, support, waste management and remediation services2% Information2% Religious, grantmaking, civic, professional and similar organizations2% Utilities2% Agriculture, forestry, fishing and hunting1% Mining1% Real estate, rental and leasing1% Management of companies and enterprises0% Personal and laundry services0% Private households0% Repair and maintenance0% Other services except public administration7%

13. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Demographics: Organization Sector 13 n = 296

14. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Demographics: Organization Staff Size 14 Note: n = 287. Total does not equal 100% because of rounding.

15. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011 Demographics: Other 15 Does your organization have U.S.-based operations (business units) only or does it operate multinationally? U.S.-based operations only74% Multinational operations26% n = 298 Is your organization a single-unit company or a multi-unit company? Single-unit company: A company in which the location and the company are one and the same 32% Multi-unit company: A company that has more than one location 68% n = 301 Are HR policies and practices determined by the multi-unit corporate headquarters, by each work location or both? Multi-unit headquarters determines HR policies and practices 46% Each work location determines HR policies and practices 3% A combination of both the work location and the multi-unit headquarters determine HR policies and practices 51% n = 213

16. SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks ©SHRM 2011  Response rate = 11%  Sample composed of 306 randomly selected HR professionals from SHRM’s membership  Margin of error +/- 5%  Survey fielded June 9-22, 2011 16 Methodology For more poll findings, visit www.shrm.org/surveyswww.shrm.org/surveys Follow us on Twitter: http://twitter.com/SHRM_Researchhttp://twitter.com/SHRM_Research SHRM Poll: Disaster Planning in Organizations 10 Years After the Sept. 11 Terrorist Attacks