Take Courses
Get Certified
Attend Events
Explore Resources
About

Library

Professional Practice Image

Library

A selection of materials from DRI International is available here as an added benefit for DRI members. We hope you enjoy this informative collection of industry information and research.

Get Schooled! What We All Can Learn from Higher Education Continuity

Event: DRI2019

Author: Stephen Woods, Tara Brown

Fires, floods, blizzards, burst pipes. Sound familiar? Attend this session for a look at continuity from a higher education perspective. From the recent California wildfires to the East Coast arctic freeze, hear from resilience professionals from Yale University and UCLA about unique, and not-so-unique challenges faced by these two world renown universities. Explore actual case studies, talk about what worked and what didn’t, and share solutions that can be applied regardless of your industry. You’ll want to take notes, but no final exam…we promise.

Tags: DRI2019, Case Study, Higher Education

The State of Organizational Resilience 2019

Event: DRI2019

Author: Roberta Witty

This presentation will discuss the current and future state of organizational resilience across multiple management disciplines including business continuity management, information security and more. Using the five layers of culture, people, process and infrastructure, we will address the role of the chief risk/strategy officer and present a framework for developing a business/organizational resilience program in the organization.

Tags: DRI2019, Resiliency, Organizational Resilience

Workshop: Crisis Management at Penn State – An Insider’s View

Event: DRI2019

Author: Ted Brown

In 2011, the Jerry Sandusky scandal hit Penn State. This session, conducted as a workshop, will examine how the scandal was handled, what went right (very little) and what went wrong. The attendees will be asked to make decisions that the Penn State Board did. The session will also briefly discuss the view of Boards and Crisis Management, and actions the speaker has taken as a member of the PSU Board and founder and chair of the risk sub-committee.

Tags: DRI2019, Case Study

New Glossary, New Challenges!

Event: DRI2019

Author: Dean Gallup

With a major revision recently released, the DRI International Glossary for Resiliency is both an in-demand resource as well as a hot topic. Since its first release in 2014, the glossary has been a major resource for business continuity and resilience professionals around the world and is currently published in four different languages. This session will share the thought process behind the recent changes and explore the future of the glossary – with a new version due out in 2022.

Tags: DRI2019, Professional Practices

Trends and Approaches to Managing Climate and Disaster Risk in Corporate Business Continuity Planning

Event: DRI2019

Author: Josh Sawislak

Assessment and pricing of climate and disaster risk by the global financial markets is changing based on increases in global disaster costs and a clearer understanding of the threats and vulnerabilities to physical assets as well as supply and value chains. Business continuity planners are more frequently being called on to demonstrate how companies are effectively planning to reduce and manage these risks as part of overall valuation of company equity and corporate strategy planning. Josh Sawislak, a global expert in climate and disaster resilience and continuity planning, will conduct an interactive discussion of why these issues are becoming more and more salient to BCP professionals as well as company financial and operations executives and boards of directors, including the overlap of climate adaptation and climate mitigation (sustainability) issues. He will cover issues including: Financial market and investor interest Corporate responsibilities and disclosures Tools and resources available to support strategy development and compliance Strategies and approaches to drive executive leadership understanding, engagement, and support The resilience/sustainability nexus. Session attendees will gain a clearer understanding of why these issues are already salient to their organization and why the importance will likely grow over the next few years. They will also learn about and have the opportunity to discuss tools, resources, and strategies to address these risks, how to talk to management and gain their support, and how to engage other groups within their organization who have overlapping and aligned missions and resources.

Tags: DRI2019, Banking/Financial Sector

How to Get Involved in ISACs to Benefit your Company’s Business Continuity, Response Capabilities and Exercising

Event: DRI2019

Author: Susan Rogers

U.S. and global critical infrastructure protection for cyber and physical events, recognize the effectiveness of trusted information sharing and peer communication during cyber and physical events. In this session, the Financial Sector Information Sharing and Analysis Center’s(FS-ISAC) information sharing lifecycle model will be discussed. The goal of this session is to spread awareness within the business continuity community, and encourage their increased participation in resilience information sharing. The session will describe the operational activities FS-ISAC members participate in and lead, the various peer communities of trust members may join and examples of how company’s incorporate ISAC participation into their resiliency plans and exercising.

Tags: DRI2019, Banking/Financial Sector, Resiliency

City of Atlanta Ransomware Attack Best Practices and Lessons Learned

Event: DRI2019

Author: Ria Aiken

In March of 2018, the City of Atlanta, GA was the subject of a massive cyberattack. Many city services and programs were affected by the ransomware attack, including online services for citizens to pay bills and request utility service. The attack was notable for the extent of services affected and the duration of service outages, as well as the importance of Atlanta as a major American economic and transportation hub. Attend this session to hear lessons learned from the attack and learn how you can transform and strengthen your organizations cyber-resilience through operational effectiveness, change management, and business continuity.

Tags: Cybersecurity, DRI2019, Public Sector

BCM as an Operational Risk Service Provider

Event: DRI2019

Author: Scott Baldwin

As BCM matures and moves from a business recovery model to an integrated risk partnership within organizational resilience, its use cases and purpose are evolving. In this session, the speaker will share one example of where BCM/OR is uniquely qualified to become a core component of the operational risk landscape. Through three stages of maturity – compliance, readiness, and resilience, this session will discuss how to create the infrastructure to leverage BCM as your organization’s primary operational risk service provider.

Tags: Business Continuity Program, DRI2019, Risk Management, Organizational Resilience

Integrating Security, Safety and Business Continuity into an Enterprise Risk Management Program at Northwestern Mutual (Part 2)

Event: DRI2019

Author: Brian Bleck, Nancy Bentley

Northwestern Mutual is transforming to be at the center of our client’s financial lives by delivering world class products to meet their financial needs through our best in class financial representatives. In support of these efforts, the Campus and Event Experiences teams are evolving to provide an enterprise risk management strategy that integrates physical security, safety and business continuity programs. This session will share how independent, siloed teams are transforming into a proactive, integrated risk management approach to meet the new digital technology demands, to support the increase in public community events, to evolve with the changing workforce and to prepare for the uncertain external environment.

Tags: Business Continuity Program, DRI2019, Banking/Financial Sector

Extreme Resiliency

Event: DRI2019

Author: Colleen Herrmann, John Harris

Capital One is raising the stakes for resiliency by adding the practice of regional isolation (ring fencing) of cloud regions to ensure real and effective regional independence. This presentation will cover the approach and the lessons learned from this important evolution in our practice.

Tags: DRI2019, Banking/Financial Sector, Resiliency

Financial Industry: Staying Ahead of BCM Challenges

Event: DRI2019

Author: Michelle Cross, Ronald Adams

Financial institutions are facing challenges that test their ability to protect the assets of their customers by securing records and one which may threaten the very existence of these institutions.; In addition, government regulations at the international, national and state levels are demanding that the individual be able to have protection of their information, its use and its distribution. This session will discuss the challenges (cyberattacks, data protection, blockchain, etc.) and how financial institutions are preparing to cope with these issues.

Tags: Business Continuity Program, Cybersecurity, DRI2019, Banking/Financial Sector

Supporting Northwestern Mutual Digital Transformation: Disaster Recovery Maturation from Walkthrough to Business Process Exercise

Event: DRI2019

Author: Paul McMillan, Will Belke

Northwestern Mutual (NM) has embarked on a digital transformation which has created greater client visibility to and demand on technology services, thus raising the importance of availability and resiliency of those services. The NM Enterprise disaster recovery and technology infrastructure teams will describe how disaster recovery practices have matured to support the firm’s transformation. Over a two-year period, disaster recovery exercises have moved from solely application focused walkthroughs to business process workflow exercises which include production technology and business user participation. Learn how NM made these improvements happen, lessons learned on the journey, and what still lies ahead to reach a highly performing DR program.

Tags: DRI2019, Banking/Financial Sector, Resiliency

WORKSHOP: Transitioning from Crisis Management to BCP: It’s All in the Set Up!

Event: DRI2019

Author: Bobby Cook, Raelene Anderson

How do you go from crisis management to business continuity mode? Attend this workshop to find out how to make the transition smooth and avoid common pitfalls. The two-hour session will explore “hour zero activities,” including setting up the event, getting the smartest people in the room, communications and notifications, and bringing in business continuity personnel early. Next, you’ll walk through the “48 hours later” transition, including transferring to business continuity and the long-term issues involved in going from crisis response to continuity and recovery.

Tags: Business Continuity Program, DRI2019, Emergency response, Process

The McKesson Sessions: McKesson's Business Continuity Services

Event: DRI2019

Author: Bill Lavigne, Kathryne Estrada, Raymond Seid , Ronnie Sebren, Stephen Weber

This session will explore how a Fortune 6 company manages business continuity; discussion will include the tools McKesson uses to manage one of the largest programs in the business. Learn how McKesson’s internal business continuity (BC) consulting service works very closely with business units as a center of excellence to execute BC policy and drive best practices into operating processes and procedures. BC Consulting conducts assessments, develops strategies, builds plans and conducts both exercises and reviews. The group is also called on at times to train sales teams on BC capabilities and to work directly with large customers alongside corporate leadership and account managers. Next learn how McKesson’s internal disaster recovery (DR) consulting group provides services across business units that focus on the validation and sustainability of a DR capability via performing impact assessments, DR implementation support, DR validation coordination, and procedure plan support. Validation exercises coordinated by DR Consulting can range from individual infrastructure or application-level validation through to complex business process validation. Finally, hear how McKesson’s DR as a Service is integrated with McKesson Technology’s Public Cloud Adoption Plans and provides business units with a customized DR solution leveraging key technology partners. DRaaS supports DR solution design, engineering, and implementation, and has proven to be both highly capable as well as extremely cost effective and presents a very compelling business case for McKesson’s disaster recovery needs.

Tags: Business Continuity Program, DRI2019

Trends in Risk Management

Event: DRI2019

Author: Lou Drapeau

In this era of Enterprise Risk Management and Strategic Risk Management, we will examine some of the latest trends that keep risk managers up at night. Amid government shutdowns, artificial intelligence, unmanned aircraft systems, self-driving cars and climate change, what is the impact on the practice of Risk Management?

Tags: DRI2019, Risk Management

Presidential Policy Directives 8, 21, and YOU

Event: DRI2019

Author: Duane Bygum, M. Scott Furr, Ron Latorre

National preparedness is first and foremost a partnership between private and public sectors. Learn how presidential policy links private and public domains underpinning the security of the United States and American society. And understand how the FEMA 2018-2022 strategic plan is now inclusive, utilizing whole of community effort toward a collective preparedness posture. Attend this session to find out what all this means to you.

Tags: DRI2019, Public-Private Partnership, Emergency preparedness, Regulations and Standards

The McKesson Sessions: McKesson’s Information Risk & Security Program

Event: DRI2019

Author: Beth-Anne Bygum, Marian Reed, Siobhan Smyth

Attend this session for an in-depth look at McKesson Corporation’s Information Risk & Security Program. First, learn about Information Protection at McKesson (IPAM), a strategic initiative designed to improve the maturity of cybersecurity defensive, preventative, and resiliency controls as well as instill clear lines of governance over information security risks. IPAM’s roadmap ensures accountability, transparency, robust governance, and a strong advocacy model with staff. A discussion of IPAM will include driving necessary improvements over a three-year, accelerated timeframe. Next, attendees will be introduced to McKesson’s iSecurity Operations Center (iSOC) process which addresses growing cyber threats across the globe. Rounding out this presentation is a discussion of McKesson’s Trust, Risk, Assurance, and Compliance program, which provides a level of confidence that software and systems are free from conditions, either intentionally designed or accidentally inserted at any point during its lifecycle, and customer solutions and internal business platforms function in the intended manner. This program ensures that capabilities and prescriptive consults are designed to embed security throughout the development lifecycle, address risks and vulnerabilities early, and reduce cost with unplanned R&D spend.

Tags: DRI2019, Risk Management

WORKSHOP: The Why and How of Implementing Incident Command in BC Management

Event: DRI2019

Author: Jeanne Powell

Should your business take an approach successfully used by first responders across the U.S. and, with some modifications, use it temporarily to enable more efficient and effective business continuity and disaster recovery? This session will help you identify benefits of Incident Command (IC) and provide you with the opportunity to observe the practical workings of IC so you more fully understand what it means to shift to a temporary IC management during and after a disaster. In this jam-packed two-hour session, the speaker will bring her years of real-world disaster experience (and humor) to talk about IC benefits and implementation. You'll walk through examples of: a temporary IC reporting structure modified for business; incident related documentation and forms to track progress; and an execution method to continuously and effectively keep incident efforts focused. Then, with the help of a strawman business and disaster scenario, reinforce what you've learned with some hands on learning. Participants will work together to establish an IC reporting structure, apply an operational period approach, complete incident documentation, and observe post-disaster incident documentation reconciliation."

Tags: Business Continuity Program, DRI2019, Process

WBCM: Tips from the Trenches – Ask Betsy…In Person!

Event: DRI2019

Author: Betsey Sayers

Following on her smash hit Women in Business Continuity Management Ask Betsy webinar, Betsy Sayers is back with tips from the trenches. She promises that attendees will walk away with solid examples and templates that you can use – plus some more of those handy “Betsyisms” that are pretty much guaranteed to get you out of any tight spot. Always creative in her approach to continuity, Betsy will show how she uses the Professional Practices for status reporting and teach you all how to play pandemic poker!

Tags: Business Continuity Program, DRI2019, Best Practices, Women in BCM

Cyber-resilience: A Day in the Life of a CISO

Event: DRI2019

Author: Wade Richmond

Cyber-resilience can be thought of as the ability of an enterprise to anticipate, withstand, recover from and evolve to improve capabilities it needs to function brought about as the result of cyber threats and/or attacks. This enhances both the cybersecurity function and the BCM function (e.g. the whole is greater than the sum of its parts). To be resilient, a holistic approach to understand and prioritize entity risk, and implement risk management activities needs to be integrated into day-to-day operations (across all entity functions). But what does all this mean to the CISO? Attend this session to find out as you take a look at t day in the life of a CISO from a cyber-resilience perspective.

Tags: Cybersecurity, DRI2019, Cyber Resilience

Performing Effective Business Continuity Audits

Event: DRI2019

Author: Harvey Betan

This session will not only cover the best approach for effective business continuity audits, but it also will show you how to gauge your organization’s preparedness. Attend this session to learn how to prevent simple check box audits while discovering what to look for beneath the hood. When you complete this session, you will have sufficient information to be confident in your BC audit and show your leadership the most accurate assessment of the business continuity program.

Tags: Audit, DRI2019

Connecting with your Continuity Coordinators & Community

Event: DRI2019

Author: Chris Volpe

Business moves faster every day with increased demands from regulatory, compliance, risk and increased market complexity. How then do we as continuity professionals compete for time to ensure the safety of personal and the continuity of services for our clients? Consistent and persistent contact with the continuity community and coordinators that creates a partnership and value while mitigating the risk. We will look at ways to keep it simple but authentic, reduce the noise and focus on the mission, provide value to the community and the individuals supporting the program as well as investing time to create aids for the community to navigate the program efficiently to produce the desired objectives. We’ll take a look at our shared experiences with the communities we support, laugh a bit and walk away with elements that can be incorporated into your program to help all those involved.

Tags: DRI2019, Banking/Financial Sector

Case Study: How Goodyear’s Business Continuity and Risk Management Teams Took on Hurricane Harvey and Won!

Event: DRI2019

Author: Craig Melnick, Mike Janko

Attend this session for a true multidisciplinary presentation, as Goodyear’s business continuity and risk management experts explore how the two disciplines work together at this global manufacturing giant. Using Hurricane Harvey as a jumping off point, the presenters will detail Goodyear’s hurricane response, with a focus on how risk management is integral to overarching continuity and resilience efforts. Get ready for a eye-opening success story that does more than just tell you that business continuity and risk management should work together and instead shows you how to actually do it during events and every day.

Tags: Business Continuity Program, DRI2019, Risk Management, Case Study

Case Study: Bouncing Back Strong – Building the Merck Global Regulatory Affairs and Clinical Safety Business Continuity Plan

Event: DRI2019

Author: Colleen Merritt Severyn

In June 2017, Merck experienced a cybersecurity incident that identified the need to bolster preparedness for business disruptions. From the fall of 2017 through the present, the Global Regulatory Affairs and Clinical Safety (GRACS) organization prepared its first ever business continuity plan (BCP), including table top exercises and training. This was a massive undertaking for an organization of such breadth (regulatory science, clinical safety, labeling, licensing, operations, etc.) and large size (2200 employees globally), starting from scratch, and an illuminating experience regarding the risk susceptibility of our systems and processes. GRACS is in a much better place today with a completed BCP across the entire organization and connections with ongoing business continuity, risk management, and resiliency efforts across the company.

Tags: Business Continuity Program, DRI2019, Resiliency, Risk Management, Case Study

Continuity Coffee Talk- Leadership: Double-Shot of Strategy

Event: DRI2019

Author: Michele Turner

At the core of a successful BC program is leadership, support and engagement. Articulating the value from an employee safety, customer commitment,organizational resiliency, and potential risk and liability perspective is key. Once that support is received, how do we continue to “savor that flavor”? During this session, we will explore the inclusion of leadership as continuity is percolated throughout the organization. What information does leadership need to continue to validate/fund the brewing approach, based on change in strategy? What type of “in store training” is needed at their level, to confirm roles in the event of a business interruption or “bad pour.” We’ll review case studies of where things went well, and where some things were quite bitter in taste. Continuity when done right…great to the last drop!

Tags: Business Continuity Program, Case Study, DRI2019

Trends and Predictions for Our Profession

Event: DRI2019

Author: Lyndon Bird

With a look back and one ahead, the chair of the Future Vision Committee, will take attendees through trends observed in 2018 and provide predictions for what to expect in the year to come. Based on the Fourth Annual Trends and Predictions reports, this year’s content features a first-ever geographic breakdown of threats and preparedness worldwide.

Tags: Trends and Predictions, DRI2019, Future Vision Committee, Global Strategy, Resiliency, Risk Management

Leading Large Scale Exercises for Active Shooter and Mass Casualty

Event: DRI2019

Author: James Mitchell

Attend this session to learn the essential elements necessary to manage an exercise on a large scale. The presentation walks through the process used by Texas Children’s to manage multiple large-scale exercises involving multiple external agencies and hundreds of participants. While the presentation is from a healthcare organization, the lessons are applicable to all. Topics covered include working with external partners (such as law enforcement and EMS0, internal and external communications, and developing after-action reports and corrective actions.

Tags: DRI2019, Healthcare, Active Shooter/Workplace Violence, Exercises

WBCM: Women in Business Continuity Management Panel Discussion

Event: DRI2019

Author: Diane Doering, Karina de Allicon, Leah Sawyer, Marsha Buehler, Mitzi Harlor

Join our WBCM Committee members as they lead an informative and enlightening panel touching on the issues important to women in our profession. This session will kick off the WBCM track by sharing the latest news from the committee – including 2018 WBCM survey results. Look forward to an engaging, interactive session where you are certain to learn and welcome to share!

Tags: DRI2019, Women in BCM

Welcome Address

Event: DRI2019

Author: Chloe Demrovsky

Join Chloe Demrovsky as she welcomes DRI2019 attendees to Las Vegas. She will address key updates from DRI and our profession as a whole as she sets the tone for our annual event.

Tags: DRI2019