The Binomial Bookstore

DISASTER & RECOVERY PLANNING:
A GUIDE FOR FACILITY MANAGERS
(Third Edition)
by Joseph Gustin

“The key to understanding the complexities of disaster preparedness and business continuity
lies in focusing upon the issue of prevention, or mitigation. The completely revised third
edition of this best-selling reference speaks to the issues of prevention, as well as
"controlling" the effects of a disaster on a company's operations. Critical areas covered
include contingency planning, loss prevention, facility evacuation, employee training, chain of
command, checklists, computer and data protection, bomb threat response, standby power,
self-inspection, and more. Topics added or expanded in the third edition include workplace
violence, regulatory influence including the Disaster Mitigation Act of 2000, and effective
mitigation strategies, and managing the disaster and recovery effort. Also discussed in depth
is the role of the media to provide the facility manager with a framework for enlisting the
media's assistance in recovery planning. Every facility should have a copy of this important
reference on hand.”

- - - - - - - - -

CONTENTS

Acknowledgements
Foreword
Preface
Introduction

Chapter 1 - Disaster Planning And Recovery Issues
DISASTER STRIKES
VITALS
CLASSIFYING DISASTERS
TYPES OF DISASTERS
DISASTER PLANNING ISSUES
Occupant Issues
Building Issues
Business Issues
Disaster Planning And Recovery Software
Addressing The Issues
DEVELOPING THE RECOVERY PLAN
Free Magazine On Contingency Planning Available

Chapter 2 - Regulatory Influences
COMPLIANCE ISSUES
General Industry Emergency Response and Preparedness Requirements
OTHER COMPLIANCE ISSUES
The Americans With Disabilities Act

Chapter 3 - Emergency Preparedness
KEY ELEMENTS IN EMERGENCY PREPAREDNESS
PLANNING FOR POTENTIAL DISASTERS
Response Effectiveness And Leadership
The Chain of Command
Communications
Accounting For Personnel
The Emergency Response Team
Information Resources Available
Training
Association of Contingency Planners
Personal Protection
Medical Assistance
DRI Certifies Disaster Recovery Planners
Security
Summary
FEMA Web Site

Chapter 4 - The Nature of Disasters
TYPES OF DISASTERS
Natural Disasters
Burger King Braves Hurricane Andrew
The Blizzard of ‘93
The Flood of ‘93
Man-Made Disasters
Three Mile Island
The World Trade Center Bombing

Chapter 5 - Fire/Life Safety
PREVENTION ISSUES AND RESPONSE MEASURES
FIRE PROTECTION SYSTEMS
Signaling
Notifying Emergency Personnel
Automatic Notification Systems
Control Mechanisms
Fire Extinguishers
Assessing Fire Protection Systems
GENERAL WORK ENVIRONMENT
Walkways
Floor And Wall Openings
Stairs And Stairways
Means of Egress
Exit Doors
Electrical System Components
Flammable And Combustible Materials
BUILDING CLASSIFICATIONS
Assemblies
Business
Correctional And Detention
Education
Healthcare
Industrial
Residential
Mercantile
Storage
HAZARD CLASSIFICATION

Chapter 6 - Bomb Threats
THE NATURE OF BOMBS
BOMB THREATS
Planning For The Bomb Threat
The Physical Security Plan
The Bomb Incident Plan
SECURITY AGAINST BOMB INCIDENTS
Building Design
Landscaping
Security Patrols
Entrance And Exit Doors
Window Protection
ATF Bomb Threat Checklist
Access Control
ATF Suspect Package Alert
RESPONDING TO BOMB THREATS
EVACUATION AND SEARCH
Search Units
Search Techniques
MEDIA RELATIONS
SUMMARY

Chapter 7 - Evacuation
EVACUATIONS
Means of Egress
Types of Evacuation
Evacuation Factors
BOMB THREATS
Option 1: Ignore The Bomb Threat
Option 2: Order An Immediate Evacuation
Option 3: Search And Evacuate
EVACUATION AND SEARCH UNITS
Evacuation And Search Unit Training
ADDITIONAL CONSIDERATIONS
Reporting Locations
Confirming Evacuation
Maintaining The Evacuation Route

Chapter 8 - Earthquakes
THE NATURE OF EARTHQUAKES
Structural Versus Nonstructural Components
Causes of Nonstructural Damage
Methods For Reducing Nonstructural Hazards
Earthquake Info Available
EMERGENCY PLANNING GUIDELINES
Human Response
Earthquake Plans
Training
Information Gathering Checklist
Organizational Characteristics
Exercises
Personal Emergency Kits
Master Earthquake Planning Checklist
Master Nonstructural Earthquake Protection Checklist

Chapter 9 - Violence In The Workplace
CRIME IN THE WORKPLACE: AN OVERVIEW
Categories of Workplace Violence
EMPLOYER RESPONSE
Employer Requirements
The Written Safety Program
The Policy Statement
Recognizing The Warning Signs of Violence
Workplace Violence Prevention—Responsibilities
Workplace Violence Prevention—Employee Training
Handling Threats
Employee Relations Considerations
Security Measures
Workplace Security
The Violence Protection Program: A Basic Action Plan
WORKPLACE VIOLENCE AS A LIABILITY ISSUE
Hiring New Workers
Retaining Employees
Limiting Exposure to Liability
Recovery After An Incident
Chapter 10 - Computer And Data Protection
COMPUTER AND EDP SYSTEMS PROTECTION
Fire Hazards
External Hazards
Risk Assessment
TELECOMMUNICATIONS PROTECTION

Chapter 11 - Standby Power Systems
EMERGENCY PREPAREDNESS AND STANDBY POWER SYSTEMS
Determining Standby Power Requirements
System Types
Determining The Appropriate System
SUMMARY

Chapter 12 – Loss Prevention Strategies
DEVELOPING YOUR STRATEGY
Scope of The Disaster
Nature of Business Operations
Time Frames
Cost
LOSS PREVENTION
Develop The Loss Prevention Policy
Identify And Evaluate Hazards
Determine Recovery Priorities
Develop Loss Prevention Program
CONTINGENCIES FOR DATA/SYSTEM AVAILABILITY
Recovery Options
Backup Options
LOSS PREVENTION TECHNIQUES
Flood Loss
Hot Work Losses
CONTINGENCY PLANNING
Develop Scenarios
Develop Strategies
Computer Security Responsibilities
Alternate Site
Plan Testing, Training, Exercises
COMPUTER SECURITY INCIDENT HANDLING SUMMARY

Chapter 13 - Crisis Planning and Damage Control
CRISIS PLANNING
The Crisis Plan
THE MEDIA’S ROLL IN RECOVERY EFFORTS
Press Releases
Radio and Television “Spots”
Automated Voice Mail/Telephone Answering Devices

Chapter 14 - Mitigation
Mitigation
Preparedness
Response
Recovery
Summary

Chapter 15 - Putting The Plan Together
PUTTING IT TOGETHER
STEP 1: ESTABLISH A PLANNING TEAM
Form the Team
Establish Authority
Issue A Mission Statement
Establish A Schedule And Budget
STEP 2: ANALYZE CAPABILITIES AND HAZARDS
Where The Company Stands
Outside Resources
Identify Codes And Regulations
Identify Critical Products, Services And Operations
Identify Internal Resources And Capabilities
Identify External Resources
Insurance Review
Conduct A Vulnerability Analysis
Historical Factors
Geographic Factors
Technological Factors
Human Error Factors
Physical Factors
Regulatory Factors
Estimating Probability
Assessing Potential Impact
STEP 3: DEVELOPING THE PLAN
Executive Summary
Emergency Management Elements
Response Procedures
Support Documents
Resource Lists
The Development Process
Identifying Challenges And Prioritizing Activities
Writing The Plan
Establishing A Training Schedule
Coordinating With Outside Agencies
Maintaining Contact With Other Corporate Offices
Plan Approval And Distribution
STEP 4: IMPLEMENTING THE PLAN
Integrating The Plan Into Company Operations
Conducting Training, Drills And Exercises
Evaluate And Modify The Plan

Chapter 16 - Managing The Disaster And Recovery Effort
EMERGENCY MANAGEMENT CONSIDERATIONS
Direction And Control
Communications
Life Safety
Property Protection
Community Outreach
Recovery And Restoration
Administration And Logistics
Appendix I - Sources of Assistance And Information
Appendix II - Self-Inspection Checklists
Appendix III - Mitigation Plan Worksheets
Index

- - - - - - - -

EXCERPT FROM THE PREFACE

“Flooding ravages the Midwest. Businesses, homes, farms and property are destroyed.
Damages top a billion dollars! A hurricane blasts through South Florida, causing more than
$25 billion in damages. An earthquake rips through California causing more than $2 billion in
damages. A blizzard ravages the East Coast, taking more than 150 lives and racking up
millions of dollars in damages.

“Each year, disasters take their toll. Lives are lost and people are injured. Buildings are
damaged and property is lost. Business operations come to a grinding halt. As a result, the
costs for doing business soar. And everybody—from the boardroom to shareholders to the
assembly line to consumers—pays the price for disaster.

“But something can be done. Injuries can be limited and the costs of damages can be
reduced. And businesses can resume their normal operations more quickly. Each of these
"feats" can be accomplished by not only anticipating disasters, but also by effectively
planning for the various response measures that can minimize their impact and ensure
continuity of operations.

“DISASTER & RECOVERY PLANNING: A GUIDE FOR FACILITY MANAGERS is written
from the perspective of prevention. Its purpose is two-fold. First, it focuses upon identifying
those factors and issues that create the potential for hazard. Second, it defines the strategies
that all companies can use to address the issues of disaster response and recovery.

“While this book is written for facility managers, it also targets other professionals who are
charged with the responsibility for designing, installing and maintaining various programs and
systems within a company. These include safety compliance officers, risk managers,
consultants, engineers, maintenance executives and human resources managers.

“DISASTER & RECOVERY PLANNING can also be used by an organization's highest
echelon - CEOs, building owners and their senior staff. It can guide them in heightening their
sensitivity to the issues of prevention, as well as assist them in meeting their own specific
responsibilities for ensuring the safety and well-being of their employees, tenant-occupants or
companies.”

- - - - - - - -

EXCERPT FROM THE INTRODUCTION

“As noted in the first edition of DISASTER AND RECOVERY PLANNING: A GUIDE FOR
FACILITY MANAGERS, there is no formal regulation that mandates a disaster and recovery
plan. However, the various issues involved in disaster preparedness presume regulatory
compliance. The various safety issues that are part and parcel of disaster and recovery
planning mandate compliance to federal and state regulation, while local jurisdictional
authority determines adherence to various municipal codes and standards.

“As one of the external factors that is brought to bear on an organization, the impact of
regulatory influences goes beyond directing a company's planning efforts. In many cases, the
regulatory influences determine a company's overall direction. For example, one only needs
to look at the responsibility that employees and building owners have for reasonably
accommodating the physical and/or mental limitations of their employees, tenants or
occupants to see that this is true. The penalties for noncompliance with the various provisions
of the Americans with Disabilities Act (ADA) can result in consequences that are both severe
and onerous.

“The key to understanding the complexities of disaster preparedness and business continuity
lies in focusing upon the issue of prevention, or mitigation. And, Disaster and Recovery
Planning speaks to the issues of prevention, as well as "controlling" the effects of a disaster
on a company's operations.

“Each chapter discusses an essential element of preparedness. For example, Chapter 1
describes the critical issues relating to occupants, the building and business components.
Each of these issues is defined in terms of addressing the specific requirements of each.
Chapter 2 presents an in-depth review of the various regulatory influences, that, despite the
absence of any defined regulation mandating disaster and recovery planning, impact upon a
company.

“Chapter 3 addresses the issue of emergency preparedness - the genesis of the disaster and
recovery plan. The key elements of emergency preparedness are identified, as well as defined
in terms of relevance to disaster and recovery planning.

“Several new chapters have been introduced including a chapter on workplace violence;
Chapter 14 discusses the Disaster Mitigation Act of 2000 and its impact on resumption.
Sample worksheets are included in the new Appendix III to aid in the disaster/mitigation and
recovery process. The chapter on loss prevention strategies has been updated to include the
restoration of IT resources.

“The disaster declarations and emergency declarations have been updated through the end of
Calendar Year 2003. Examples of the major disasters listed in the two previous editions have
been included - the Midwest floods of 1993 and the blizzards of 1993 have not been
surpassed as of this writing.

“As it did in the first two editions, DISASTER RECOVERY AND PLANNING: A GUIDE FOR
FACILITY MANAGERS presents major aspects of disaster preparedness and recovery
planning that are either not well covered, or simply not covered at all in other guides. For
example, the role of the media in recovery planning is discussed in detail. Specific
procedures for working with the various forms of media are outlined, so that facility managers
are provided with a framework for enlisting the media's assistance in recovery planning.

“Disaster and recovery planning is an integral part of a company's long range plan. It supports
business operations while ensuring business continuity - and that is where its significance
lies. The effective disaster and recovery plan is of strategic importance to employees,
occupants, tenants, other business entities, customers and clients and the community in
general.”

- - - - - - - -

EXCERPT FROM CHAPTER 1

DISASTER PLANNING AND RECOVERY ISSUES

“Disasters of all kinds can cause loss of life, property and can even cripple companies and
institutions. What exactly classifies a disaster? What issues need to be addressed in a
disaster response and recovery plan? In this chapter, we will review the most common forms
of disaster, then identify the key issues that must be addressed in an effective disaster
response and
recovery plan.

DISASTER STRIKES

“The September 11, 2001 attack on Manhattan’s Twin Towers, the Pentagon and a rural field
in southwestern Pennsylvania is the most widely known and recognized example of disaster -
in the form of terrorism - in history. It is certainly the worst incident of domestic terrorism in
United States history. Not only were buildings destroyed, and cities shattered, but the
country and the entire global community sat horrified as it watched the grisly scenes of
carnage and devastation. Thousands of lives - men and women tending to their business,
some with children in tow - are frozen in time. As time passes and wounds heal, we are all
left to ponder the events leading up to that fateful September day. While we are all scarred,
we adjust and we adapt.

“However, if there is any lesson to be learned from the September 11th tragedy, it is to
expect the unexpected. Disaster can happen at any time and in any place, whether in New
York City, Washington, DC, a rural field, or in Oklahoma City. Disaster planning and
preparedness is a responsibility that everyone assumes and that everyone must share,
whether the disaster is the result of terrorism or a natural occurrence. It is crucial for the
safety and health of everybody from corporate entities to private persons. It is essential for the
economic stability and wellbeing of the country and businesses. And it is important to prevent
the images and pictures of disasters’ victims from fading into history.

VITALS
“According to the Federal Emergency Management Agency (FEMA), there were more than
50 major disaster declarations in 2003. That year also saw 19 emergency declarations and
46 fire management assistance declarations.

“The year 2002 also saw its share of disasters. A total of 48 major disaster declarations, one
emergency declaration and more than 70 fire suppression authorizations were declared by
FEMA.

“In fact, the years between 1989 and 2001 exacted catastrophic losses. More than $13 billion
in agency funding was allocated to disaster relief.

“While not all emergency situations are disasters, every emergency situation carries the
potential for disaster to occur. Effective planning, coupled with ongoing training in emergency
response procedures and techniques, provide a blueprint for companies to effectively prepare
for crisis situations, thereby minimizing any loss to property - and most importantly,
minimizing loss of human life. A well-planned and comprehensive disaster plan leads the
way. It is the hallmark of successful business recovery.

CLASSIFYING DISASTERS

“Disasters can be classified as either natural, technological, or human-engineered. Natural
disasters, or “Acts of God,” include floods, earthquakes, hurricanes, tornadoes,
wind/rain/snowstorms, etc., along with the concomitant fires, structural collapses, and power
and energy failures that oftentimes follow the natural disaster.

“Technological, or human-engineered disasters, include terrorism and other forms of crime,
including industrial sabotage, as well as occurrences that result from human error -
transportation accidents, including road, rail and air accidents, and judgment errors in various
work procedures and operations.

“Regardless of a disaster’s nature, planning that addresses emergency preparedness and
response is essential to minimizing the threat to human life, property damage and business
operations.

TYPES OF DISASTERS

“There are innumerable incidents, events, or situations that fall under the definition of disaster.
Any one of these occurrences carries the potential for causing property and business loss,
as well as personal injury and loss of life. Examples include:
- Fires.
- Floods.
- Wind/Rain/Snowstorms.
- Earthquakes/Hurricanes/Tornadoes.
- Structural/Roof collapse.
- Power failures.
- Hazardous/Toxic chemical and vapor release.
- Elevator breakdown.
- HVAC failure.
- Telephone/Telecommunications failure.
- Crime/Bomb threats/Terrorism.
- Transportation accidents, including air, rail and road.
- Data and information storage and retrieval collapse.
- Medical/Health emergencies.

“And while each of these events demands specific approaches to minimizing its effect, each
event must be addressed in terms of the facility’s occupant, building and business issues.”

- - - - - - - -
2004, 304 pages (approx.). Order #DR652.
- - - - - - - -

The Binomial Bookstore

Business Continuity & Disaster Recovery

Rothstein Associates Inc.