June 17, 2009
These NewsBriefs are produced and delivered weekly by
Attainium to keep our friends and clients
current on topics relating to Business Continuity, Disaster Recovery and Crisis Management.
According to industry analyst Gartner, even if business continuity (BC) and disaster recovery (DR) are not
specified in a law or regulation, issues of data integrity and availability and internal controls can result
in additional demands for updated BC measures to ensure the continuous availability of information. While
compliance requires satisfying the letter of the law, BC requires going beyond the minimum requirements,
to having in place plans and training - based on industry, geography and business impact analysis (BIA) -
to keep your organization going under any circumstances.
Gartner offers this matrix of BC laws and regulations by industry.
(Item #1)
Title XIX of Public Law 110-53 is about to be implemented by the Department of Homeland Security;
it's aimed at helping businesses assess their BC and DR preparations.
(Item #2)
This interview with an expert on BC regulations could answer some of your questions.
(Item #3)
How do you ensure - and demonstrate - compliance?
(Item #4)
Here's a simple 5-step guide to email compliance.
(Item #5)
Read about the current developments and future trends in compliance in this white paper.
(Item #6)
As always, we look forward to hearing about your concerns
with regards to business continuity. If you have a topic
you'd like to see covered, please email me at
bmellinger@attainium.net
Best Regards,
Bob Mellinger
President
Attainium Corp
Quote of the Week
"Companies are increasingly focused on data integrity
as they look for ways to go beyond basic compliance
to achieve the benefits of embedded governance."
- Tom Tobin -
Articles
1. Laws Influence Business Continuity and Disaster Recovery Planning Among Industries
A multitude of laws and regulations specify or imply requirements for business continuity and disaster recovery planning.
These requirements vary among industry sectors, affecting the development, focus and execution of business continuity plans.
http://www.gartner.com/DisplayDocument?doc_cd=128123
2. DHS Selects ANSI-ASQ National Accreditation Board To Support Voluntary Private Sector Preparedness Certification Program
This program is directed by Public Law 110-53, Implementing the Recommendations of the 9/11 Commission Act of 2007,
requiring the department to establish a common set of criteria for private sector preparedness in disaster management,
emergency management and business continuity. The goal of this voluntary program is to develop a comprehensive set
of business continuity standards by which American businesses can assess their preparedness for all hazards.
http://www.fema.gov/news/newsrelease.fema?id=45280
3. Evolving Standards and Regulations - The New Business Continuity Landscape
This interview with Mr. Alan Berman, a noted author and worldwide speaker on the subject of business continuity
regulations, answers questions on laws, regulations, and business continuity.
http://www.disaster-resource.com/articles/08exe_p14.shtml
4. How to Ensure Compliance
This article is actually the 3rd page of an article about compliance. We're pointing here, however,
because its focus is on HOW you can ensure compliance. At this point, everyone knows that compliance
is required, but not everyone can figure out how to demonstrate that compliance when necessary.
http://www.informit.com/articles/article.aspx?p=427373&seqNum=3
5. Email Compliance - A Simple 5 Step Guide
With 26 billion e-mails whizzing round the world in any one day, and the numbers going up,
email compliance is a matter that many companies often put on the back burner. The consequences
of this approach can result in litigation, financial penalties, HR problems as well as damage
to company reputation.
http://www.itsecurity.com/features/feature-email-security-non-technical-101606/
6. Corporate governance and business continuity and availability
This white paper from Hewlett Packard focuses on reliability and availability (from an operational perspective),
compliance with laws and regulations, and the safeguarding of assets and its implication to business continuity
management programs and practices.
http://h20223.www2.hp.com/enterprise/downloads/Corporate%20Governance%20White%20paper.pdf
|
