Disaster & recovery planning : a guide for facility managers: 5th

Foreword........................................................................................................ xvii Preface..............................................................................................................xix Chapter 1—Disaster Planning and Recovery Issues..................................1 DISASTER STRIKES...................................................................................1 VITALS.........................................................................................................2 CLASSIFYING DISASTERS......................................................................2 TYPES OF DISASTERS..............................................................................3 DISASTER PLANNING ISSUES..............................................................5 Occupant Issues...................................................................................5 Building Issues.....................................................................................7 Business Issues.....................................................................................8 Addressing the Issues.......................................................................10 DEVELOPING THE RECOVERY PLAN..............................................13 Chapter 2—Regulatory Influences..............................................................17 COMPLIANCE ISSUES...........................................................................17 General Industry Emergency Response and Preparedness Requirements............................................................19 OTHER COMPLIANCE ISSUES............................................................31 The Americans with Disabilities Act..............................................31 Chapter 3—Emergency Preparedness.........................................................35 KEY ELEMENTS IN EMERGENCY PREPAREDNESS.......................35 PLANNING FOR POTENTIAL DISASTERS.......................................36 Response Effectiveness and Leadership........................................36 The Chain of Command...................................................................36 Communications...............................................................................38 Accounting for Personnel.................................................................41 The Emergency Response Team......................................................42 Training...............................................................................................43 Personal Protection...........................................................................44 Medical Assistance............................................................................48 viii Security...............................................................................................50 Summary............................................................................................50 Chapter 4—The Nature of Disasters...........................................................51 TYPES OF DISASTERS............................................................................51 Natural Disasters...............................................................................51 Hurricane Katrina.............................................................................53 Hurricane Andrew............................................................................54 The Blizzard of ‘93.............................................................................57 Man-Made Disasters.........................................................................59 Three Mile Island...............................................................................60 September 11, 2001............................................................................61 The World Trade Center Bombing.................................................63 Chapter 5—Fire/Life Safety..........................................................................65 PREVENTION ISSUES AND RESPONSE MEASURES.....................65 FIRE PROTECTION SYSTEMS..............................................................66 Signaling.............................................................................................67 Notifying Emergency Personnel.....................................................67 Automatic Notification Systems.....................................................67 Control Mechanisms.........................................................................68 Fire Extinguishers..............................................................................69 Assessing Fire Protection Systems..................................................71 GENERAL WORK ENVIRONMENT....................................................72 Walkways...........................................................................................73 Floor and Wall Openings.................................................................74 Stairs and Stairways..........................................................................74 Means of Egress.................................................................................76 Exit Doors...........................................................................................77 Electrical System Components........................................................77 Flammable and Combustible Materials.........................................79 BUILDING CLASSIFICATIONS............................................................81 Assemblies..........................................................................................82 Business..............................................................................................83 Correctional and Detention.............................................................83 Education............................................................................................83 Healthcare...........................................................................................84 Industrial............................................................................................84 ix Residential..........................................................................................85 Mercantile...........................................................................................85 Storage.................................................................................................85 HAZARD CLASSIFICATION................................................................86 Chapter 6—Bomb Threats and Terrorism................................................89 THE NATURE OF BOMBS....................................................................89 BOMB THREATS.....................................................................................89 Planning for the Bomb Threat.......................................................90 The Physical Security Plan.............................................................91 The Bomb Incident Plan..................................................................91 Lines of Authority: The Chain of Command.............................91 Government/Community Resources............................................92 SECURITY AGAINST BOMB INCIDENTS........................................92 Building Design.................................................................................93 Landscaping.......................................................................................93 Security Patrols..................................................................................93 Entrance and Exit Doors.................................................................93 Window Protection...........................................................................93 Access Control...................................................................................94 MAIL CENTER SECURITY....................................................................96 Vulnerability......................................................................................96 Motivation..........................................................................................98 DEVELOPING THE BOMB THREAT RESPONSE PLAN..............99 The Planning Team..........................................................................99 The Command Center.....................................................................99 Evacuation........................................................................................100 BOMB THREAT RESPONSE PLAN – CONSIDERATIONS.........100 Command Center Organization...................................................102 Physical Security—Placed Bombs v Mailed Bombs.................103 RESPONDING TO BOMB THREATS................................................103 Written Threats...............................................................................104 Telephone Threats..........................................................................104 Search Team Deployment.............................................................105 BOMB SCREENING PROGRAM........................................................107 Vulnerability Assessment..............................................................107 The Mail Center Security Coordinator.......................................108 Lines of Communication...............................................................109 x Screening Procedures.....................................................................109 SUSPECTED MAIL BOMBS— SCREENING RESPONSE PROCEDURES......................................... 110 Package Verification....................................................................... 114 Suspicious Package Isolation Area ............................................ 114 Holding/Carrying Containers...................................................... 116 BIOLOGICAL AND CHEMICAL THREATS...................................117 ANTHRAX..............................................................................................117 THE TREATMENT FOR ANTHRAX................................................ 119 MEDIA RELATIONS............................................................................. 119 SUMMARY..............................................................................................122 Chapter 7—Dirty Bombs............................................................................123 BACKGROUND......................................................................................123 THE IMPACT OF DIRTY BOMBS........................................................ 124 SOURCES OF RADIOACTIVE MATERIALS.....................................125 WHAT TO DO FOLLOWING A DIRTY BOMB EXPLOSION.........125 Chapter 8—Chemical, Biological and Radiological Weapons and the Facility Manager—An Overview........................................129 INTRODUCTION...................................................................................129 GOALS .....................................................................................................129 WEAPONS CLASSIFICATION............................................................130 THE RISKS............................................................................................... 139 IMPLICATIONS FOR THE FACILITY MANAGER........................... 140 Chapter 9—Evacuation................................................................................143 EVACUATIONS.....................................................................................143 Means of Egress...............................................................................143 Types of Evacuation........................................................................144 Evacuation Factors..........................................................................145 BOMB THREATS....................................................................................147 Option 1: Ignore the Bomb Threat................................................147 Option 2: Order an Immediate Evacuation.................................148 Option 3: Search and Evacuate......................................................148 EVACUATION AND SEARCH UNITS..............................................148 Evacuation and Search Unit Training..........................................149 ADDITIONAL CONSIDERATIONS...................................................149 xi Reporting Locations........................................................................152 Confirming Evacuation..................................................................152 Maintaining the Evacuation Route...............................................154 Chapter 10—Earthquakes...........................................................................155 THE NATURE OF EARTHQUAKES...................................................155 Structural Versus Nonstructural Components...........................156 Causes of Nonstructural Damage.................................................159 Methods for Reducing Nonstructural Hazards..........................160 EMERGENCY PLANNING GUIDELINES........................................165 Human Response............................................................................166 Earthquake Plans.............................................................................167 Training.............................................................................................167 Information Gathering Checklist Organizational Characteristics...............................................170 Exercises............................................................................................171 Personal Emergency Kits................................................................172 Master Earthquake Planning Checklist........................................172 Master Nonstructural Earthquake Protection Checklist.................................................................173 Chapter 11—Violence in the Workplace................................................175 CRIME IN THE WORKPLACE: AN OVERVIEW..........................175 Categories of Workplace Violence..............................................175 WORKPLACE VIOLENCE—THE COST...........................................177 EMPLOYER RESPONSE.......................................................................178 Employer Requirements................................................................178 The Written Safety Program.........................................................179 The Policy Statement.....................................................................180 Recognizing the Warning Signs of Violence.............................180 Workplace Violence Prevention—Responsibilities...................181 Employee Responsibilities............................................................. 182 Manager and Supervisor Responsibilities................................. 182 Department Head Responsibilities.............................................. 183 Human Resources Staff Responsibilities................................... 183 Employee Assistance Program Counselor Responsibilities...... 184 Union/Employee Organization Responsibilities....................... 184 Facilities Staff/Securities Staff Responsibilities........................ 185 xii Law Enforcement Staff Responsibilities..................................... 185 Workplace Violence Prevention—Employee Training............186 Handling Threats............................................................................187 Employee Relations Considerations............................................187 Security Measures...........................................................................190 Workplace Security.........................................................................190 The Violence Protection Program: A Basic Action Plan.........191 WORKPLACE VIOLENCE AS A LIABILITY ISSUE......................192 Hiring New Workers.....................................................................193 Retaining Employees......................................................................193 Limiting Exposure to Liability.....................................................193 Recovery After an Incident...........................................................194 Chapter 12—Computer and Data Protection...........................................197 COMPUTER AND EDP SYSTEMS PROTECTION...........................197 Fire Hazards.....................................................................................197 External Hazards.............................................................................198 Risk Assessment..............................................................................198 TELECOMMUNICATIONS PROTECTION.......................................202 ELEMENTS OF COMPUTER SECURITY...........................................203 Physical Access Controls................................................................203 Climate..............................................................................................204 Fire Safety/Suppression.................................................................204 Failure of Supporting Utilities.......................................................204 Plumbing Leaks...............................................................................204 Structural Collapse..........................................................................204 Data Interception.............................................................................205 Computer Room Example..............................................................205 Physical and Environmental Protection.......................................205 Chapter 13—Standby Power Systems.......................................................209 EMERGENCY PREPAREDNESS AND STANDBY POWER SYSTEMS..............................................................209 Determining Standby Power Requirements................................210 System Types....................................................................................210 Determining the Appropriate System..........................................212 SUMMARY..............................................................................................214 xiii Chapter 14—Loss Prevention Strategies.................................................217 DEVELOPING YOUR STRATEGY.....................................................217 Scope of the Disaster.....................................................................217 Nature of Business Operations....................................................218 Time Frames.....................................................................................218 Cost....................................................................................................218 LOSS PREVENTION.............................................................................219 Develop the Loss Prevention Policy...........................................219 Identify and Evaluate Hazards....................................................220 Determine Recovery Priorities.....................................................220 Develop Loss Prevention Program..............................................222 CONTINGENCIES FOR DATA/SYSTEM AVAILABILITY..................................................223 Recovery Options............................................................................223 Backup Options...............................................................................224 LOSS PREVENTION TECHNIQUES.................................................225 Flood Loss........................................................................................226 Hot Work Losses.............................................................................228 CONTINGENCY PLANNING.............................................................234 Develop Scenarios...........................................................................236 Develop Strategies..........................................................................236 Computer Security Responsibilities............................................237 Alternate Site...................................................................................238 Plan Testing, Training, Exercises..................................................239 COMPUTER SECURITY INCIDENT HANDLING.........................240 SUMMARY..............................................................................................241 Chapter 15—Crisis Planning and Damage Control...............................243 CRISIS PLANNING...............................................................................243 The Crisis Plan.................................................................................243 THE MEDIA’S ROLL IN RECOVERY EFFORTS...............................248 Press Releases ..................................................................................248 Radio and Television “Spots”........................................................250 Automated Voice Mail/Telephone Answering Devices............252 Chapter 16—Mitigation...............................................................................253 Mitigation.........................................................................................253 Preparedness....................................................................................254 xiv Response...........................................................................................254 Recovery...........................................................................................254 Summary .........................................................................................256 Chapter 17—Assessing and Managing Risk...........................................261 Risk Management............................................................................262 Risk Assessment..............................................................................263 Threat Assessment...........................................................................264 Identifying Likely Threat Event Profiles and Tactics.................265 Assigning a Threat Rating..............................................................265 Alternative Approach.....................................................................266 Vulnerability Assessment...............................................................272 Initial Vulnerability Estimate.........................................................272 Vulnerability Estimate Screening..................................................273 Site Questions..................................................................................274 Architectural Questions..................................................................274 Structural and Building Envelope Questions..............................274 Utility Systems Questions..............................................................274 Mechanical Systems........................................................................275 Plumbing and Gas Systems...........................................................276 Electrical Systems............................................................................277 Fire Alarm Systems.........................................................................277 Communications and Information Technology Systems..........278 Chapter 18—Putting the Plan Together....................................................283 PUTTING IT TOGETHER.....................................................................283 STEP 1: ESTABLISH A PLANNING TEAM.......................................284 Form the Team.................................................................................284 Establish Authority.........................................................................285 Issue a Mission Statement..............................................................285 Establish a Schedule and Budget..................................................285 STEP 2: ANALYZE CAPABILITIES AND HAZARDS......................286 Where the Company Stands..........................................................286 Outside Resources...........................................................................286 Identify Codes and Regulations....................................................287 Identify Critical Products, Services and Operations..................287 Identify Internal Resources and Capabilities..............................288 Identify External Resources...........................................................288 xv Insurance Review............................................................................289 Conduct a Vulnerability Analysis.................................................289 Historical Factors.............................................................................289 Geographic Factors.........................................................................290 Technological Factors......................................................................290 Human Error Factors......................................................................290 Physical Factors...............................................................................291 Regulatory Factors..........................................................................291 Estimating Probability....................................................................291 Assessing Potential Impact............................................................292 STEP 3: DEVELOPING THE PLAN.....................................................293 Executive Summary........................................................................293 Emergency Management Elements..............................................293 Response Procedures......................................................................293 Support Documents........................................................................294 Resource Lists..................................................................................295 The Development Process..............................................................295 Identifying Challenges and Prioritizing Activities.....................295 Writing the Plan...............................................................................295 Establishing a Training Schedule..................................................295 Coordinating with Outside Agencies...........................................295 Maintaining Contact with Other Corporate Offices...................296 Plan Approval and Distribution....................................................296 STEP 4: IMPLEMENTING THE PLAN...............................................297 Integrating the Plan into Company Operations.........................297 Conducting Training, Drills and Exercises..................................298 Evaluate and Modify the Plan.......................................................300 Chapter 19—Managing the Disaster and Recovery Effort....................303 EMERGENCY MANAGEMENT CONSIDERATIONS....................303 Direction and Control.....................................................................304 Communications.............................................................................307 Life Safety.........................................................................................309 Property Protection.........................................................................312 Community Outreach.....................................................................315 Recovery and Restoration..............................................................319 Administration and Logistics........................................................321 xvi Appendix I—Sources of Assistance and Information...........................325 Appendix II—Self-Inspection Checklists................................................363 Appendix III—Mitigation Plan Worksheets..........................................387 Appendix IV—Building Vulnerability Assessment Screening...........393 Glossary..........................................................................................................419 Index ............................................................................................................431