Workshop Session 1
Novice/Intermediate/Advanced

Terrorism Awareness and Risk Assessment: The All Hazards Approach

Scott Casey
Colo. State Patrol

Mike Ryan
Colo. State Patrol

Rich Smith, CBCP
Colo. State Patrol

This presentation will provide an awareness level lecture on ongoing terrorism activities in the United States.
The participants will learn about the terrorist attack cycle, and how they, as a commercial business, can disrupt the cycle to protect their facilities and employees. A number of active terrorist groups will be identified and their typical organizational structure will be discussed
The second portion of the presentation will explain how the All Hazards assessment program works and fits in to the overall business continuity program of the facility. The risk assessment program covers; blast mitigation, physical security, cyber-security, emergency response procedures, continuity planning, proximity hazards and specific site threat analysis
The class is taught by members of Rubicon, the elite anti-terrorist team for the Colorado State Patrol.

Scott Casey has 15 years in law enforcement, drug interdiction and K9 handling. He also had prior experience in facilities management.  Casey develops blast mitigation and emergency response plans for the team.
Mike Ryan has six years of law enforcement experience and Special Forces experience with the US Army. Ryan develops current threat analysis information and a physical security plan for each target site.
Rich Smith has five years of law enforcement experience, eight years of continuity planning and 12 years of emergency management experience. Smith is a CBCP and assesses the facility infrastructure and cyber security.

Workshop Session 2
Advanced

Resiliency Workshop

Charles Wallen
FSTC

The term “resiliency” is an increasingly common component of business continuity, disaster recovery and risk management jargon. While we have moved to this new more expansive term, the actual practices used to manage operational risk remain largely undefined, disjointed and inefficient. Organizations lack a consistent systematic resiliency management process, a common set of metrics or a uniform terminology.
Escalating physical and cyber threats, complex technologies, interdependent supply chains and the global marketplace have made the job of managing disruptions increasingly difficult. Recognizing the need for better risk management methodologies and a clear specification for resiliency, FSTC has been working with Carnegie Mellon’s Software Engineering Institute to develop a resiliency model (RM).
This workshop will provide an overview of the RM and the emerging management discipline of “resiliency engineering”. The discussion will focus on the use of the model to determine where one’s organization is and where it needs to be in managing operational risk effectively.There will be a hands-on exercise that will allow participants to not only experience the use of the Resiliency Model, but will provide a simulation of the process used to measure an organization’s resiliency capability. Participants will gain an appreciation of the power of taking a resiliency engineering approach to managing operational risk to drive down cost and consistently improve efficiency.

Charles Wallen is the managing executive of the Financial Services Technology Consortium’s Business Continuity Standing Committee, which is actively working to address shared business continuity and technology recovery opportunities.

Workshop Session 3
Novice/Intermediate/Advanced

Developing the Recovery Strategy: The Next Step

Barney Pelant, MBCP
Barney F. Pelant & Assc.

Once the business impact analysis (BIA) has been completed, the next logical step in the development of a business continuity program is the formation of the business recovery strategy. The results of this effort provide us the infrastructure for carrying out the successful recovery of the organization in case of a disastrous event or business interruption.
This infrastructure is also the foundation for the procedures that we develop next, a.k.a. our business recovery plan. This session is a former breakout session that has been expanded by popular request to a workshop.
During the workshop we will examine a proven methodology for taking the findings of the BIA and developing successful strategies. Learn important and logical steps to take when structuring the business recovery strategy. You’ll take home answers and solutions that you can implement immediately.

Barney Pelant is owner and director of Barney F. Pelant & Associates. His professional background includes more than 30 years focusing on business continuity planning, disaster prevention and recovery. Pelant’s technical experience ranges from the design and development of domestic and international business centers, to the development of contingency plans to ensure their ongoing viability. His consulting experience includes roles as consultant and director of contingency services (consulting services) for SunGard Recovery Services, and senior manager - business continuity planning for Ernst & Young.

Workshop Session 4
Novice/Intermediate/Advanced

A Brand New World: Virtual Emergency Operations Centers

Regina Phelps
EMS Solutions

Jan Sysmans
WebEX Comm.

We all know what a physical Emergency Operations Center (EOC) looks and feels like. The physical EOC is the “nerve center” of the company’s recovery operations and houses subject matter experts from different areas of the business. The primary function of any EOC is to establish and manage the Four C’s: Control, Communication, Collaboration, and Coordination.
A virtual EOC takes the physical EOC (people and processes) and moves it into “cyberspace” through a variety of technology tools. Currently there are two major issues driving the need for a virtual EOC: The threat of an avian flu pandemic and companies whose key employees are dispersed across large geographic areas making collaboration difficult.
This workshop will share with you everything your company needs to know to establish a virtual EOC – how to develop one, what are the advantages and pitfalls, technology options that will give you the best results and ways to combine the physical and the virtual. The goal of the workshop is to teach the skills to develop a successful virtual command center. Put your seat belts on – it’s a brave new world!

Regina Phelps, CEM, RN, BSN, MPA is an internationally recognized expert in the field of emergency management and contingency planning. She is founder of Emergency Management & Safety Solutions, a consulting and training firm.
Jan Sysmans, director, marketing at WebEx Communications, is responsible for WebEx’s business continuity and disaster recovery program.

Workshop Session 5
Novice/Intermediate/Advanced

Avian Flu Pandemic Interactive Simulation

William Comtois
Varicom

William Pepino
TAMP

This is a highly interactive session where a hypothetical company will manage its business while in the midst of a severe Avian flu pandemic.
The session will be conducted in an accelerated time scale to span approximately two or three months in real time. By way of the computer simulation, participants will be presented with a litany of external events that have direct and significant impact to their business. In turn, the participants will be required to discuss and agree to actions that would need to be taken.
The presenter will assist the participants through a series of tough decisions and on-the-fly trade-offs that would likely be encountered by company leaders during an actual pandemic. Along the way, participants will gain insight into how they could better prepare for and manage such a crisis. The session will be concluded with a group discussion and summary of lessons learned.
The simulation utilized for this session will be an interactive crisis simulation program proven in a variety of applications ranging from crisis team management for Fortune 100 companies, first responder training and business continuity plan testing.

William Comtois is a co-founder and the managing director of Varicom, Inc. In his current position, he bears overall responsibility for Varicom’s delivery of solutions, alliance partnerships and client relationships in the areas of business resiliency and safety.
Bill Pepino is a vice president and senior level business continuity planning professional with TAMP Systems.

Workshop Session 6
Novice/Intermediate/Advanced

Ready, Set, Exercise!
How to Develop and Conduct a Successful Contingency Plan Exercise

Steven Goldman
Goldman Mgmt. Consultants

Successful crisis management and disaster recovery takes more than a plan: it requires realistic testing and validation. How do you do that properly? Are your exercises smoke and mirrors or do they provide as-close-to-real situations as possible? How does your program compare? How can you improve? During this hands-on workshop, you will learn how to set up and conduct a successful crisis/BCP/DRP exercise. Students will master the aspects of effective exercise preparation and execution, including:

 Types of drills and exercises
 Elements of a successful exercise
 Scope, objectives, and extent of play
 Scheduling and coordination
 The scenario team
 Scenario ideas
 Resources and props
 How to conduct, evaluate, and critique
 Imagination, creativity, and leadership
 Goldman’s highly acclaimed Exercise Planning Checklist.

You will learn how to avoid common pitfalls during the development process and how to anticipate and resolve potential problems. Exercise conduct, evaluation and critiquing strategies will be discussed.

Steve Goldman has developed, conducted, and evaluated drills and exercises ranging from two-hour tabletops to massive three-day exercises involving hundreds of responders from dozens of companies and government agencies.

Disaster Recovery Journal
1862 Old Lemay Ferry Rd.
Arnold, MO 63010
(636)282-5800 Fax: (636)282-5802
www.drj.com | drj@drj.com