Take Courses
Get Certified
Attend Events
Explore Resources
About

Library

Professional Practice Image

Library

A selection of materials from DRI International is available here as an added benefit for DRI members. We hope you enjoy this informative collection of industry information and research.

Monday Afternoon Plenary: A Conversation with Christine Springer

Event: DRI2017

Author: Christine Springer, John Franchy

Join us for an enlightening and interactive conversation with Christine Springer, Professor and Founding Director, Executive Master of Science in Crisis and Emergency Management, University of Nevada, Las Vegas. DRI Board Member John Franchy will facilitate the discussion.

Tags: DRI2017

Case Study: The Energy Authority and Hurricane Matthew

Event: DRI2017

Author: Pauline Williams-Banta

As Hurricane Matthew marched towards Florida, The Energy Authority (TEA) in Jacksonville was getting ready to respond. Attend this session to hear how TEA prepared for and weathered the storm — one that caused widespread flooding, damage, and power outages across the state. The Energy Authority (TEA) provides public power utilities with access to advanced resources and technology systems. TEA is a public power-owned, nonprofit corporation with offices in Jacksonville and Bellevue, WA. A national portfolio management company, TEA evaluates challenges, manages risks, and executes solutions to serve more than 50 public power clients.

Tags: Case Study, DRI2017, Hurricanes

Governing Your Controls: Placing a Sound Bet

Event: DRI2017

Author: Michele Turner

Controls are meant to reduce/mitigate risk, but what happens when they actually introduce more risk into the environment? What bets should be covered, and do you ever decide to just let it ride? It’s a tough call but one that has to be made when the cost of mitigation (resources, finances, operations, etc.) outweighs the customer and corporate value add. During this session, we’ll explore ways that organizations balance that spinning “risk vs. reward” wheel through activities such as common control language, alignment to risk universe, and a solid change management framework to pivot from when the deck gets reshuffled. While nothing is a “sure thing” and there always will be risk, identifying the right controls, and the most appropriate tools to drive the most impactful action is the key. Play your cards right and come out a winner!

Tags: DRI2017

Are Traditional Disaster Recovery Plans Still Relevant?

Event: DRI2017

Author: Bobby Williams

In today’s world of Cyber thieves, Distributed Denial of Service (DDoS) attacks, application outages in addition to data center losses, shouldn’t out technology plans be more robust than just the traditional data center losses? Banks and OCC regulated financial institutions are now “expected” to follow the FFIEC Cybersecurity Assessment Tool which is loosely based on the NIST Cybersecurity Framework. Could we institute a contingency plan based on NIST 800-34 to cover multiple regulatory assessments and to enhance our own technology recovery program? What is the difference between your DR plans and a NIST based Contingency Plan? Let’s look at the NIST 800-34 (rev 1) and see how the controls line up to a help evaluate our technology recovery program and to see how it could help with creating a robust Information Security program based on the NIST 800-53 controls. It would be a great starting place for some programs that haven’t gained much traction (or that don’t exist), but it could also be a great evaluation tool for any current program that is already in place. Attend this session, do a deep dive, and see what it could mean to you. We might even have a guest appearance by one of the authors of the 800-34 (rev 1)!

Tags: DRI2017

Technology Track Kickoff: Emerging Cyber Threats and Business Continuity

Event: DRI2017

Author: Troy Wilkinson

Kick off DRI017’s technology track with this session, exploring headline-making risks to continuity programs everywhere, and then continue on with the topic by attending the Technology Track panel discussion and working group sessions for a better understanding of the threats your organizations faces and how to meet them.

Tags: Cybersecurity, DRI2017

A Terrorist Attack Experience via Learning Technologies

Event: DRI2017

Author: Jim Wexler, Tony Tran

Do you have what it takes to lead in a crisis? In this session, two riveting learning simulations immerse executives in best practices for crisis leadership — and assess their predisposition to succeed. First, hackers are attempting to damage or destroy the computer network at one of the world’s biggest global banks, and your job is to manage the response. Next, as you serve on the bank’s crisis management team, terrorists release ricin on subway trains during morning rush hour. Join this session to experience these self-led “virtual tabletop exercises” and take the continuity preparedness challenge! These new learning technologies measure whether continuity preparedness executives are right for the job, through a crisis readiness diagnostic that predicts for attributes that are effective in crisis situations. The session will present research that confirms that having the right people with the attributes to do well in a crisis is far more effective than investing in training those who do not.

Tags: DRI2017

Case Study: Tailoring a Risk-Based Approach to Mission Assurance

Event: DRI2017

Author: Jerry Vevon, Carol Grigg

Implementing a mission assurance program for a large government agency always has it challenges. Getting senior level support using a risk-based approach required adapting a traditional model to terms that resonated with both senior and middle managers. But how do you actually execute this formula in your program? A traditional risk formula or model looks at Threats, Vulnerably, and Intentions to determine risk. (T * V * I = R). We looked at Threat and Vulnerability in terms that were understandable and manageable to the MA practitioner and also the agency leadership. Our approach which resonated with upper management. focused on People, Process, Technology, and Facilities and looked at the agency by sectors.

Tags: Case Study, DRI2017

Case Study: Keep Pace with Business, BCM in a Fast-evolving Company

Event: DRI2017

Author: Beatrice Turrini

Imagine yourself as a fresh appointed BC Manager: you setup an ambitious program, plan your work in detail for the next years, analyze amounts of data, produce reports, plans, discuss processes, train people. From the best practices perspective, you have everything in order. Then one day, when you meet your management, you realize they are not interested in all that information. They ask you the very question you are not ready to answer... yet. You feel too slow in a fast company. In this session you will hear some lessons learned from first-person experience, and some suggestions on how to adapt your language, your role and re-think your BCM program objectives, to stay as close as possible to business speed and priorities.

Tags: DRI2017, Case Study

An Exploration of Women in Business Continuity: Trends, Challenges, and More

Event: DRI2017

Author: AnneMarie Staley, Linda Conrad, Naeemah Luckey, Lisa Reshaur, Melody Wen

While female business continuity professionals are continuing to rise to higher positions within their organizations and secure greater visibility in the profession, there is still much work to be done. The national conversation around whether women can indeed have it all is just as relevant to women pursuing a career in this traditionally male-dominated field. Last year, DRI International created a Women in Business Continuity Management Committee and committed to several research projects last year to draw attention to the unique needs, interests and challenges that face women in this profession. Now, AnneMarie Staley, the Chair of that committee, will lead a discussion of our findings. Whether you are a woman or you are an individual who works with, supports, or manages women in this field, this session is sure to ignite thought-provoking discussion around an issue that has not been extensively covered.

Tags: DRI2017, Women in BCM

Workshop: Creating Realistic Disaster Scenarios for Exercises (Handouts)

Event: DRI2017

Author: Jeanne Powell

Do you remember back in school when your teacher taught what you needed to pass the exam versus how that knowledge could be applied in real life to solve real problems? As business continuity professionals, we know there’s a big difference between a being regulatory compliant and the business’ preparedness and readiness to actually survive a real disaster situation. There are outages, emergencies, and disasters. Surviving the consequences of an actual disaster requires full-fledged disaster preparedness and readiness. Preparedness includes creating and executing exercises with realistically complex disaster scenarios focused on recovery ability and testing the readiness of capabilities. Creating that kind of an exercise scenario script is not intuitively obvious. In this hands-on collaborative session, we will look at a conceptual roadmap of what it takes to create realistically complex exercise scenarios intended to better prepare your organization to survive and mitigate an actual disaster. Come learn from a speaker with a rich background and experience in disasters. Everyone is encouraged to contribute their experience and imagination as together we walk through the creative process of identifying disaster scope and scale, ripple and cascading effects, players and their responsibilities/effects, and creating credible disaster recovery timelines during this session.

Tags: Disaster Scenarios, DRI2017

Workshop: Creating Realistic Disaster Scenarios for Exercises (Part 2)

Event: DRI2017

Author: Jeanne Powell

Do you remember back in school when your teacher taught what you needed to pass the exam versus how that knowledge could be applied in real life to solve real problems? As business continuity professionals, we know there’s a big difference between a being regulatory compliant and the business’ preparedness and readiness to actually survive a real disaster situation. There are outages, emergencies, and disasters. Surviving the consequences of an actual disaster requires full-fledged disaster preparedness and readiness. Preparedness includes creating and executing exercises with realistically complex disaster scenarios focused on recovery ability and testing the readiness of capabilities. Creating that kind of an exercise scenario script is not intuitively obvious. In this hands-on collaborative session, we will look at a conceptual roadmap of what it takes to create realistically complex exercise scenarios intended to better prepare your organization to survive and mitigate an actual disaster. Come learn from a speaker with a rich background and experience in disasters. Everyone is encouraged to contribute their experience and imagination as together we walk through the creative process of identifying disaster scope and scale, ripple and cascading effects, players and their responsibilities/effects, and creating credible disaster recovery timelines during this session.

Tags: Disaster Scenarios, DRI2017

Workshop: Creating Realistic Disaster Scenarios for Exercises (Part 1)

Event: DRI2017

Author: Jeanne Powell

Do you remember back in school when your teacher taught what you needed to pass the exam versus how that knowledge could be applied in real life to solve real problems? As business continuity professionals, we know there’s a big difference between a being regulatory compliant and the business’ preparedness and readiness to actually survive a real disaster situation. There are outages, emergencies, and disasters. Surviving the consequences of an actual disaster requires full-fledged disaster preparedness and readiness. Preparedness includes creating and executing exercises with realistically complex disaster scenarios focused on recovery ability and testing the readiness of capabilities. Creating that kind of an exercise scenario script is not intuitively obvious. In this hands-on collaborative session, we will look at a conceptual roadmap of what it takes to create realistically complex exercise scenarios intended to better prepare your organization to survive and mitigate an actual disaster. Come learn from a speaker with a rich background and experience in disasters. Everyone is encouraged to contribute their experience and imagination as together we walk through the creative process of identifying disaster scope and scale, ripple and cascading effects, players and their responsibilities/effects, and creating credible disaster recovery timelines during this session.

Tags: Disaster Scenarios, DRI2017

The Often Misunderstood Business of Risk Management

Event: DRI2017

Author: Rakesh Pande

Risk Management as a subject is often misunderstood — and therefore mismanaged — by risk professionals, with “risk owners” having very little say in decision making. Such a situation is a recipe for a disaster. During this session, we will discuss the key weaknesses and gaps in the present day risk management, with an objective to propose a sound risk management framework and practices for business to consider and adopt. Since complexity is the biggest enemy of security and risk management, key concepts and solutions will be discussed in a simple, yet effective manner. This session will help risk professionals and business owners connect at meaningful level and move their programs forward together.

Tags: DRI2017, Risk Management

Technology Track Working Group: The Cloud Solution Experiment - Hero or Zero

Event: DRI2017

Author: Jack Orlove

The cloud can make you a hero and provide all the upside of a cloud managed solution such as automation, scalability, and reducing cost; or, it make you regret a cloud decision with numerous privacy, security, and ownership issues. In this session we will explore actual “war” stories and discuss concerns that were either solved by the cloud or exacerbated by transferring the risk to a third-party vendor. We’ll also discuss how to provide assurances that your critical products, services, and data will survive in the cloud. This workshop will target technical issues as well as the compliance issues of concern to the disaster recovery expert.

Tags: Cloud Technology, DRI2017

Could Lack of System Resiliency or a Cyber Incident Be Your Next BCP Event?

Event: DRI2017

Author: Doreen Norako

The BCP risk impact landscape has changed significantly over the past decade. The continuous availability of systems and data have never been more in demand. Your next business interruption may not come from the usual risk factors of losing a building or IT hardware component. Today’s challenges include BCP managers considering systems downtime due to design flaws, coding issues, or a cyber event to name a few. This session will walk you through the questions you should consider when reviewing these potential impacts for your organization, your vendors, and supply chain.

Tags: Cybersecurity, DRI2017

Taking Care of Your Own: The Human Side of Emergency Response and Business Continuity

Event: DRI2017

Author: Penny Neferis, Yuri Pacheco

The airline industry has been faced with several emergency incidents that require it to take care of “people” after a traumatic experience. See how JetBlue has adapted our Family Assistance Center plan and applied it day to day to support the Customers, Crewmembers (employees) and the communities we serve. And learn how you can apply airline industry best practices in your organization.

Tags: DRI2017, Emergency response

Case Study: Lessons Learned from the Chennai Disaster of 2015

Event: DRI2017

Author: Arunabh Mitra

Weeks of torrential rains in November of 2015 caused the worst flooding the southern India city of Chennai has seen in 100 years. More than 500 people were killed with the estimates of damage and losses ranging from US$ 3 billion — US$15 billion. The floods were amongst the costliest natural disasters of 2015 and left a significant impact on the city and its people. Chennai is the second largest exporter of software in India and is home to some of the world’s leading information technology companies including HCL. This session will detail HCL’s significant presence in Chennai and the speaker’s first-hand experience in managing this disaster. Key takeaways for attendees include real-world, frontline, actionable information gleaned during and after the incident. They are: Incident response and crisis management in action: The Top 5 Leadership Lessons on Crisis Management Business continuity in the context of globalization: The nuances of “recovery” in the paradigm of a globalized and outsourced environment. The human aspects of continuity and resilience

Tags: DRI2017, Asia, Case Study

Quantifying Risk for Preparedness and Continuity: University of Texas Medical Branch at Galveston

Event: DRI2017

Author: Mike Mastrangelo

Given the high level of risk at the UTMB Campus, we work to eliminate the subjectivity of the risk assessment process as much as possible and to quantify that risk where possible. The risk assessment process is the foundation of UTMB’s Preparedness Program and it affords officials the the best information to optimize preparedness and respond to incidents. An overview of the Preparedness Program will be provided — looking at specific examples of risk quantification including hurricanes and chemical incidents (Hydrofluoric Acid incidents in particular).

Tags: DRI2017, Healthcare

Risk Management Track Working Group: Aligning Business Continuity and Risk Management

Event: DRI2017

Author: Chris Mandel

We all know that business continuity and risk management must be aligned in every organization. The disciplines are natural allies and when they join forces they contribute exponentially more to the greater good. So, let’s stop talking about why it’s a good idea (that’s preaching to the choir). Let’s talk about HOW to make it happen. Attend this interactive session for a tactical exploration of the way BC and risk can and should interface on a day-to-day basis and what you can do to make that happen in your organization.

Tags: DRI2017, Risk Management

Removing the Administrative Burdens of Continuity Programs

Event: DRI2017

Author: Marc Kantor

Many firms have relied on a legacy network of individuals, processes, tooling and documentation that have organically evolved to fit their Business Continuity needs and concerns. These disparate activities are often not centrally organized, managed, or sometimes not universally known, and have a tendency to become outmoded and ineffectual. Using a defined methodology that extends itself to virtually any organization, firms can create a holistic and centrally managed continuity program, encompassing of crisis management. A robust program, that in its end state will not require substantial funding or resources. Drawing on available enterprise IT resources, leveraging tools every firm has readily available, creative use of human capital, refined data collection & aggregation, and well defined messaging can effectively create a resilient firm-wide continuity program. Enact foundational aspects that will cast the program on a forward path of continuous improvement, adding value to HR, Finance and other parts of the organization as information consumers. This is a replicable formula that works. With the right people involved and a defined course of action, this plan helps institute an enterprise wide continuity program using minimal budgetary and human capital resources. A winning formula that speaks to most firms’ needs.

Tags: Business Continuity Program, DRI2017

How To Provide Management with the Cost/Benefit and ROI of Risk Management Controls

Event: DRI2017

Author: Michael Kadar

How do you currently justify the cost for investments in operational risk controls? Do risk assessment results you currently report to management actually give them useful information they can use to cost-effectively manage risk? Although risk heat maps and prioritized risk lists provide some guidance, do you provide management with information to justify the cost of proposed controls? Perhaps they require something different than what you have been reporting. This session will present a step-by-step method that guides you through the implementation of the RAMxyz risk assessment tool in MS Excel. You will learn how the tool’s Impact Assessment is used to prioritize facilities and processes. You will learn how the Risk Assessment spreadsheet is used to perform the Threat Analysis, Vulnerability Analysis, and Impact Analysis. You will see how this data is used to calculate the Annual Risk Score and the Annual Financial Risk for each threat. Finally, you will learn how the Decision Analysis section produces the Cost/Benefit Ratio and Return on Investment (ROI) data that can allow management to determine the financial feasibility of controls proposed for each threat. Bonus: Session attendees that request the RAMxyz tool for their BCM program will receive the Excel file within two weeks after the conference.

Tags: DRI2017, Risk Management

Case Study: Riots, Relocation, & Resiliency: Exelon Corporation’s Response to & Recovery from the Baltimore Riots

Event: DRI2017

Author: Erin Holloway, Kathy Bosse

On April 12, 2015, Baltimore man Freddie Gray sustained injuries following his arrest by police and subsequently died one-week later of a spinal injury. In the afternoon of April 27, 2015, following Gray’s funeral, rioting erupted in West Baltimore, resulting in the Governor of Maryland declaring a state of emergency and implementing a city-wide curfew. This event impacted 11 Exelon facilities in its downtown Baltimore location. The protests and riots lasted for eight days and affected more than 4,000 Exelon employees within three critical operating companies. This presentation will discuss how Exelon’s Business Continuity & Crisis Management team managed the event through effective communication, coordination with Exelon Business Functions to ensure those impacted had the resources necessary to successfully recover, and the subsequent year to follow as six officers stood trial. This was the largest business disruption in Exelon’s history there were no employees injured, no Exelon property damaged and little to no loss of revenue. By providing appropriate guidance and collaborating efforts, Exelon’s Business Continuity team effectively prepared the company to continue maintaining the highest standards of safety and reliability for its people, customers, and communities.

Tags: Case Study, DRI2017, Resiliency

Building a BC/DR Control Library and Regulatory Response Program

Event: DRI2017

Author: David Garland

With the ever-changing landscape of Business Continuity, it’s more important than ever before to truly understand your obligations, responsibilities, and where you stand. Learn how to build a regulatory response function, align your BCDR program with regulations and standards, and begin to think about controls that will help you achieve operational goals and compliance with laws, regulations and internal policies.

Tags: DRI2017, Governance/Regulatory Response and Compliance

World Economic Forum 2017 Risk Report Overview

Event: DRI2017

Author: Mary Gardner

This session will provide an overview of the 2017 World Economic Forum (WEF) Risk Report. 2017 marks the twelfth year that the WEF surveys over 800 global leaders to determine their top ten risks. In recent years, societal, geopolitical and environmental threats have come to supplant economic risks as issues of greatest global concern. As our world continues to be more interconnected, a holistic risk management approach needs to consider the interdependencies between risks. The 2016 WEF Risk Report called for actions to build resilience. This session will identify practical examples of how this could be done.

Tags: DRI2017, Resiliency, Global Strategy, Risk Assessment, Risk Management

The Future Vision Committee: A Chance to Debate the Key Issues of Today

Event: DRI2017

Author: DRI Future Vision Committee

The FVC is tasked by DRI to look a business trends and issues that might affect the resilience community. As well as webinars, blogs, and white papers, they also deliver an annual Trends and Forecast Report — from which the Committee Chair Lyndon Bird will briefly present the main conclusions for 2017. In a Q&A format, the chair and other attending FVC members will take questions from the audience on any subject that delegates feel important to our future security and prosperity. These can range from political uncertainty across the globe (civil wars, terrorism, nuclear proliferation, economic downturn) to the practical issues of cyber criminality, societal security, and law enforcement in local communities. Whatever your concerns, the FVC will have a strong opinion, and we want to hear your opinions too.

Tags: DRI2017, Future Vision Committee, Trends and Predictions

From Lincoln to Pumpkins to Sundaes to Tractors: Preparedness through the Eyes of an Illinois Medical Center

Event: DRI2017

Author: Troy Erbentraut

Attend this session for an up-close, case study look at hospital preparedness in the state of Illinois. From humble beginning to the current continuity and Hospital Preparedness Program (HPP), we will explore lessons learned that can be applied to any organization with an evolving program and attendees will come away with an understanding of how a plan rooted in emergency response has grown to encompass business continuity. OSF HealthCare, owned and operated by The Sisters of the Third Order of St. Francis, Peoria, Illinois, includes OSF Healthcare System consisting of 11 acute care facilities and two colleges of nursing. It also has a primary care physician network consisting of over 1000 primary care, specialist physicians, and advanced practice providers. OSF HealthCare is a multi-state corporation, operating facilities in Illinois and Michigan, providing state-of-the-art, compassionate care to nearly 3 million people in the communities we serve.

Tags: DRI2017, Healthcare

Risk Management Track Kick Off: Integrating Risk Management & Business Continuity

Event: DRI2017

Author: Mike Epstein

Kick off DRI017’s risk management track with this session which Mike Epstein, Sr. Director, Risk Management & Business Continuity for The E.W. Scripps Company likes to call “Tales from the Local News.” Scripps serves audiences and businesses through a growing portfolio of television, radio and digital media brands. Epstein will explore the lessons, benefits, and challenges of integrating and evolving a risk management and business continuity program. From responding to a landscaping truck being used as a “master key” at a TV station to working with authorities on security issues in today’s political and social media environments, Epstein will explain the relationship between risk management and business continuity using real-life examples…ripped from his company’s very own headlines.

Tags: DRI2017, Risk Management

Public Agencies and Private Organizations: Incident Management Interfacing

Event: DRI2017

Author: John Driscoll II, Brock Holowachuk, Scot Phelps

We all know that relationships between public agencies and private sector organizations must be established prior to a crisis situation. While it doesn’t always happen, there seems to be a concerted effort by both sides to reach out. Now let’s go beyond that basic concept and get down to the nitty gritty. How exactly should and can public agencies and private organizations interface during an incident? How best to provide mutual aid? How can everyone do their respective jobs without getting in each other’s way? What do you need to know about preserving a scene/protecting evidence? Attend this session for real-world examples and practical advice.

Tags: DRI2017, Public Sector, Public-Private Partnership

Risk Management Track Panel Discussion

Event: DRI2017

Author: Louis Drapeau, Mitch Simon, Chris Summerrow

Join our panel as they speak from their varied backgrounds to the intersection of business continuity and risk management. Risk doesn’t respect silos and really knows no bounds. Come hear from our panel of experts and bring your questions for what is sure to be an information-packed Q&A.

Tags: DRI2017, Risk Management

BCM and Climate Change

Event: DRI2017

Author: Linda Conrad

Everyone is aware of climate change, but how many of us really understand climate change as a business risk? Attend this session or a discussion of emerging risks and impacts of climate change on your business, evolving resilience and insurance solutions, and a demonstration of new technology visualization of disaster and flood risk and recovery.

Tags: Climate Change, DRI2017

Leading From the Front: Executive-Level Engagements in Crisis Management

Event: DRI2017

Author: Larry Chase, Crystal Witt

Attend this session for a unique and proven approach to smashing through traditional barriers and earning a sustained executive buy-in, especially where crisis management is concerned. The presenters will share logistics of key successes in gaining significant ground in program maturity and execution through proven and thoughtfully targeted training/awareness programs. Learn more about this winning strategic model which results in a unprecedented cultural gains. See what happens when you color outside the lines and challenge everything so as to closely align a rapid program elevation agenda to a company’s most treasured values.

Tags: DRI2017, Executive Support

The BREXIT Vote: Nine Months On

Event: DRI2017

Author: Lyndon Bird

The DRI Future Vision Committee Chair Lyndon Bird is a UK citizen living in London. Listen to what has happened since the vote that stunned the business and political worlds at home and abroad. Hear Bird’s views on the future for the UK relationships with Europe, the U.S. and the developing world – not only in trade but also in crime prevention, defense, and environmental cooperation. Understand the issues that will impact resilience professionals directly and how these might vary depending on the model of departure negotiated. Bird also will reflect on its wider significance, as trust in the ruling elites seem to be breaking down across the traditional western democracies.

Tags: DRI2017, Europe, Future Vision Committee

Where’s the Exit? How to Escape a Boring Culture of Resilience!

Event: DRI2017

Author: Ray Bonilla, Julia Kundred

Why should building a culture of resilience be boring? You need all levels of the organization to be engaged and embrace their role in preparedness and resiliency. So, it isn’t something we do just once a year — it can be a fun, engaging, on-going process of building that “muscle memory” on what to do when business disruptions occur. This session will teach business continuity, crisis management, and disaster recovery professionals how to engage their audience to make sure your resiliency and continuity management messages stick. Business continuity planning and emergency preparedness are important but that doesn’t mean the messaging needs to be dry and boring. In this session, we will teach valuable tips and guidelines on how to create compelling content which will engage audiences and inspire them to embrace their role in becoming resiliency leaders.

Tags: DRI2017

DRI2017 Opening Remarks

Event: DRI2017

Author: Al Berman

Join DRI President Al Berman as he welcomes DRI2017 attendees to Las Vegas and sets the tone for the conference with an informative and engaging presentation that will address both important news from DRI International, as well as developments that concern our profession as a whole.

Tags: DRI2017

Case Study: How eBay Measures Resiliency Success and Quantifies the Qualitative

Event: DRI2017

Author: Scott Baldwin

As resiliency professionals, our goal is to achieve “readiness.” However, how well do we actually measure readiness, and what are the metrics that we use? Oftentimes, our KPIs include things like the number of BIAs/BCPs/DRPs, a score on a maturity model, or exercise results. While these can all be important indicators, they do not always provide an accurate measurement of actual readiness. In this presentation, we will hear how eBay developed ways to identify and measure true engagement and readiness — the ability to effectively respond to a disruption — and not just their ability to write plans or carry out exercises. Join us for the lessons learned on eBay’s journey to measure this essence and quantify the qualitative.

Tags: Case Study, DRI2017

Case Study: Exercise Innovations and Lessons Learned from Silicon Valley’s Applied Materials

Event: DRI2017

Author: Bobby Cook, Raeline Anderson

Applied Materials, a $9.7 billion technology giant, takes business continuity and emergency response seriously. Applied Materials is the leader in materials engineering solutions used to produce virtually every new chip and advanced display in the world. At the center of the company’s overall program is a robust test and exercise strategy and schedule. Designed to protect 14,000+ employees, 10,200+ patents in 81 sites and 18 countries, it all starts at the company’s Silicon Valley headquarters. It is here that our commitment from top executives makes excellence and innovation possible. Attend this session for an in-depth case study detailing two massive recent exercises — from start to finish. The presenters spent decades in the public sector and have translated their experience, knowledge, and training into a world-class global program for use in any public or private organization.

Tags: DRI2017, Business Continuity Program, Case Study, Exercises

Understanding Criminal Threats to the Supply Chain and How to Develop Risk Mitigation Strategies

Event: DRI2017

Author: Ross Albert

The growth of supply chains in size and complexity has led not only to increased efficiency and profits but also increased threats. This session will identify significant supply chain security concerns faced by companies with an international footprint. Of particular focus will be areas of the supply chain most vulnerable to criminal threats such as kidnapping, extortion and cargo theft as well as the growing concern over insider threats. Mitigation planning is needed to address security and safety risks to the supply chain. As such, we will discuss how to mitigate these risks and threats through numerous supply chain procedures and recommendations. Available intelligence will be analyzed in order to present the most realistic and predictive models to various and potentially disruptive incidents.

Tags: DRI2017, Supply Chain