Library

This session will enlighten attendees regarding the various servicemember/veteran resources available to Corporate America and raise awareness of military talent based on PenFed Credit Union’s successful targeted job acquisitions. You will learn about PenFed’s Enterprise Resiliency Program and how it has been bolstered by leveraging resources – such as HOH, Department of Defense (DoD) SkillBridge, DRI Foundation’s Veteran's Outreach Program, PenFed Foundation (all collaboratively worked together) – to bring qualified servicemembers in the business continuity space and to the PenFed team. Attendees will leave this session with the tips on how to do the same in your organizations.

Risk management in contemporary organizations has evolved significantly due to the dynamic business environment and changing risk landscape. Boards, executives, and regulatory bodies now demand a comprehensive understanding of measures the business is taking to safeguard customers, business integrity, and reputation. Organizations have invested years developing extensive risk mitigation programs, including cyber incident response, IT disaster recovery, workplace safety & emergency management, business continuity, insurance and third-party risk management. Despite increased spending on risk management, challenges remain in integrating and aligning various initiatives. Issues such as redundant activities, confusing terminology, competing priorities, multiple software packages, and unclear governance persist. To address these complexities, many organizations are adopting models to integrate their risk and resilience programs. This session will explore how businesses arrived at the current state, the characteristics of integrated risk and resilience programs, and the transition from traditional risk management models to an integrated approach. We will highlight success stories and discuss potential pitfalls in implementing integrated risk and resilience programs. This session is part of our Sponsor Track. Thank you to our sponsors for sharing their expertise!

Every organization must protect its information and ensure data needed to run the business is accurate and available, but knowing how to design effective continuity plans isn’t easy. Those that are successful start by intentionally coordinating teams of risk, compliance, security, and business continuity professionals. Standout teams then take five important steps to improve continuity and build resilience. During this session, Riskonnect’s Brian Zawada, vice president, strategy and innovation, and Michael Bratton, principal managed services consultant, will explore the ways that leading organizations are navigating the ever-evolving threat landscape to confidently create a more resilient business model. They will discuss defined outcomes for business continuity and operational resilience – and outline the five important actions to take in the next 12 months. Key Takeaways: - Trends and universal practices in organizations to maintain continuity when faced with information security challenges - The relationship between information security and business continuity / operational resilience - Concrete ways to break down the silos that decrease continuity and resilience - Definition of essential outcomes stemming from an effective continuity and resilience program - Practical next steps to improve continuity and resilience in the next 12 months This session is part of our Sponsor Track. Thank you to our sponsors for sharing their expertise!

Attend this session to hear how one healthcare organization moved from having isolated recovery and continuity plans across departments toward implementing a unified continuity and cyber resilience program. From initial challenges and the need for a more integrated approach, to conducting 67 BIAs across 67 department and engaging with 224 stakeholders, to developing unified recovery and continuity plans, to transitioning to a cyber resilience model, program leaders built a solid foundation ensuing the health and well-being of the organization and those who entrust with their own well-being. Attendees will leave this presentation with key takeaways from the experience and recommendations for similar organizations.

In 2023, we celebrated our 35th year serving this exciting profession of service. Because milestones are always a time for reflection, we’d like to dedicate this edition of our annual review to look back at some of the accomplishments of this venerable institution not just from this year but also to provide a review of all the various ways in which we support you every year.

What are the top risks that worry resilience professionals as we emerge into a post-pandemic world? This session will open the event with an overview of how we, as members of this exciting and evolving profession, prioritize and respond to some of our biggest challenges. Based on DRI’s annual survey of nearly 500 professionals across all industries and sectors, our research shows a variety of major issues such as cyberattacks, natural disasters and economic uncertainty. With so many risks at play, DRI’s President and CEO Chloe Demrovsky will provide guidance on how we can build a more resilient future together.

What are the top risks that worry resilience professionals as we emerge into a post-pandemic world? This session will open the event with an overview of how we, as members of this exciting and evolving profession, prioritize and respond to some of our biggest challenges. Based on DRI’s annual survey of nearly 500 professionals across all industries and sectors, our research shows a variety of major issues such as cyberattacks, natural disasters, and economic uncertainty. With so much to think about, what should resilience professionals focus on? This year’s predictions highlight still more potential threats on the horizon, including divided public opinions on global climate change measures, cyber vulnerabilities among major IT service providers, unprecedented flooding in the developed world, economic uncertainty in China, and much more. With so many risks at play, DRI’s President and CEO Chloe Demrovsky will provide guidance on how we can build a more resilient future together. DRI Chief Knowledge Officer Lyndon Bird will join her to discuss the latest findings on how business continuity professionals are contributing to climate-related disclosure within their organisations.

TMX Group are winners of the 2022 DRI Award of Excellence for COVID-19 Response and Recovery of the year. In the context of joining the organization mid-pandemic, TMX Group’s Mark Evans shares practical examples of how strong organizational values, effective use of data, and prompt, bold decision-making helped preserve the safety of approximately 1500 staff globally. The end result was zero workplace transmission of COVID-19 and zero disruption to any business processes throughout the pandemic.

The session is a post-Uvalde school shooting report that has changed the dynamics of active attack incidents in schools by empowering all of the people on campus — not just the staff and teachers — as a part of school safety. This case study shows that when data, direction, and emotional reinforcement are made available to people during a crisis, it changes the outcome positively, reduces the number of victims and injury, and increases resilience.

SESSION HANDOUT 5 Eye-openers From the Pandemic. TMX Group are winners of the 2022 DRI Award of Excellence for COVID-19 Response and Recovery of the year. In the context of joining the organization mid-pandemic, TMX Group’s Mark Evans shares practical examples of how strong organizational values, effective use of data, and prompt, bold decision-making helped preserve the safety of approximately 1500 staff globally. The end result was zero workplace transmission of COVID-19 and zero disruption to any business processes throughout the pandemic.

Roberto Coronado, Senior Vice President in Charge of El Paso and San Antonio Branches, Federal Reserve Bank of Dallas, is an expert on La economía de frontera – the US/Mexico border economy. As a Senior Economist, Coronado has devoted decades to researching this richly unique region. Coronado’s plenary address will welcome us to Texas with a deep dive into how the US/Mexico border economy fared during the recent COVID-19 pandemic, what’s ahead for this region, and what lessons learned can shape our understanding as resilience professionals.

Globalization is defined as the process by which businesses or other organizations develop international influence or start operating on an international scale. The 21st century was heralded as “The Global Century” with the widespread use of the internet opening up both international markets and supply capabilities that previously seemed impossible. As a result of technological achievements and economic integration, the world has become more interconnected than ever before. Businesses began entering these global markets and developing a just in time” supply chain that took advantage of the lowest prices from single vendors, often importing different parts from multiple locations around the globe to make one finished product. But globalization also brought challenges. Just in time manufacturing opened a risk to sales if just one element of the supply chain failed. The increased transport of parts and finished goods added to the greenhouse gasses causing climate change. The gap between developed and underdeveloped nations grew. The ease of air travel expedited the spread of COVID 19, quickly causing a global pandemic that shuttered the world. Globalized companies quickly felt the impact and “supply chain issues” became part of the daily vernacular of their customers. How do globalization and resilience come together to be convergent forces? Can companies manage cost, efficiency and resilience in a global world?

This session is the culmination of nearly a year of research, surveys, and C-Suite interviews while Young was at the Harvard Kennedy School NPLI studying Executive Meta-Leadership. In this presentation, he explains why the time has come for resilience to be elevated to the C-Suite and how to turn it from a cost center into a business competitive advantage. This paradigm-shifting idea is backed up with case studies, interviews with Fortune 500 C-suite executives, and data visualization.

Women leaders shine in crisis, absorb chaos, maintain stability, and communicate hope – placing premiums on communicating clearly, responding rapidly, and attending to social protections. A whopping 65 percent of women said the pandemic has made them rethink how and where they work. Come explore why women in STEM careers help the resilience field succeed.

Attend this can’t miss session to hear from a C-Level executive who truly understands resilience, as DRI Board Director Ray Seid sits down with Uniper CIO Damian Bunyan. About Uniper Düsseldorf-based Uniper is an international energy company with activities in more than 40 countries. With around 7,000 employees, it makes an important contribution to security of supply in Europe. Uniper’s core businesses are power generation in Europe, global energy trading, and a broad gas portfolio. Uniper procures gas – including liquefied natural gas (LNG) – and other energy sources on global markets. The company owns and operates gas storage facilities with a capacity of more than 7 billion cubic meters. Uniper plans for its 22.5 GW of installed power-generating capacity in Europe to be carbon-neutral by 2035. The company already ranks among Europe’s largest operators of hydroelectric plants and intends to further expand solar and wind energy, which are essential for a more sustainable and autonomous future. Uniper is a reliable partner for communities, municipal utilities, and industrial enterprises for planning and implementing innovative, lower-carbon solutions on their decarbonization journey. Uniper is a hydrogen pioneer, is active worldwide along the entire hydrogen value chain, and is conducting projects to make hydrogen a mainstay of the energy supply.

This workshop is intended to be a community-based way of creating a richer database of capability questions. Participants will be provided with access to all questions that were generated during the workshop which they can use in their own organizations. This workshop will present the enterprise continuity program as it is used at Netflix. After a brief presentation, attendees will work in small groups to review one existing asset type with the associated capability questions and be asked to provide additional questions that could be added to a capability survey. The questions must apply to the capability survey categories of availability, response, and recovery. After a short discussion, the same working groups will create their own new asset type and be tasked with identifying three to five questions for each category as it relates to the asset. Then as a collective, we will share our ideas and discuss how the questions affect the availability, response, and recovery of the asset. At the conclusion of this working session, each participant will be given a copy of the work everyone contributed towards which they can use in their own organizations. This is an effort to present a different way of performing capability assessments.

The “Great Resignation” or the “Great Shuffle” provides business continuity professionals a chance to reevaluate careers and explore new professional opportunities. There is no turning back from the workplace changes brought about by the Great Resignation/Shuffle. The move to remote work and changes in job flexibility may not have occurred for another 30 years if not for Covid-19. If you are looking to change your career (internally or externally), you can still land your dream position. It just requires some strategy on your part. This session will focus on how to reposition yourself, ask for better pay, improved work-life balance and flexibility, and more opportunities for advancement at your new job.

The Fire Protection Department of Saudi Aramco has taken proactive measures and demonstrated resiliency by sustaining continuity of operation during recent major disruptive events. They launched a comprehensive study for the business continuity plan to be aligned with the Center for Public Safety Excellence (CPSE) requirements, international organization for standardization (ISO) requirements, and Cooperate Internal Operation Excellence Model which have minimized information and asset losses and played a significant role assisting the recovery and restoration of business normal operations in a timely manner. This will be an exciting and informative session and not limited to the following: business continuity planning and critical elements, risk and threat identification methodology, and leveraging GIS technology in emergency management.

The Journey to Resilience continues to evolve, and is different in many cases, based on your Enterprise, business requirements, and relevant regulations. As a result, the program components and areas of desired improvement are also different. In this session, David Halford will explore program areas you should consider as part of your Resilience journey, discuss the overall journey, and share practical ideas on how to plan and move the relevant journey along. In addition, Halford will demonstrate the value of using a system to support your program, enabling you to easily manage, visualize, and use your information effectively. You’ll leave the session more confident and ready to continue your Operational Resilience journey.

Companies in all industries are committing to adopt Operational Resilience (OpRes) models. But, without the regulatory guidelines imposed on banks, most companies struggle to explain the need for change, what an operational resilience program looks like in their industry, or what they will do differently. During this session we will discuss what successful operational resilience programs look like for companies that aren’t banks. We will outline the journey to transition to OpRes, highlight some successful operating models and discuss the pitfalls you will need to navigate to make OpRes a reality for your organization.

Operational Resilience (OpRes) seems to be the new buzzword in the industry. Is there something interesting about it, or is it just the next flavor of the day? In this session, three industry leaders will discuss their take on Operational Resilience. They will present an overview of recent drivers for OpRes, namely regulatory requirements in the Financial Services Industry (FSI) and the increasing pressures of unhindered operations in an interconnected customer-centric world. They will then outline what it means for organizations inside and outside the regulated industry. Finally, they will wrap up with challenges to consider when thinking about adopting Operational Resilience capabilities in your organization.

2022 was a landmark year at DRI International. Our community is not only rebounding from the pandemic but also has been growing by every metric. From our popular Cyber Resilience training and certification program which continues to break records, to finding unique ways to serve you through organizational certification and custom training programs to continuing strong demand for our core Business Continuity programs, it is clear that the resilience profession is growing in visibility and prestige. We are continuing to find fresh ways to engage with you across every platform and can’t wait to see more of you in person again in 2023 whether at DRI2023: The Business Continuity Conference, a newlyreturning DRI Collegiate Conference, or an in-person class.

DRI has partnered with CRJ to provide DRI Certified Professionals access to a PDF version of the most current issue. To access the ‘Flipping Book' version of the current digital issue plus access to the CRJ 15 year back issue library will require a separate subscription. CRJ offers DRI Certified Professionals a digital subscription for only $15 and hard copy subscription for only $100, a significant discount from the list price. To take advantage of this offer, go to https://crisis-response.com/discounted_subscriptions and enter the discount code DRI15 or DRI100.

De acuerdo con el reporte de la Contraloría General de La República de Costa Rica sobre la continuidad de la entrega de servicios por Covid, el Banco Nacional de Costa Rica es la única institución pública en el país que alcanzó un nivel óptimo en la Continuidad Institucional. Este Webinar busca mencionar las acciones y caso de éxito que han hecho que el Banco Nacional de Costa Rica lidere procesos exitosos para dotar de resiliencia a sus procesos, beneficiando al cliente final con productos y servicios de alta calidad. El expositor, Randall Villalobos, CBCP, es el Gerente de Continuidad de Negocio del Banco Nacional, banco líder en el mercado financiero costarricense con un enfoque a la experiencia del cliente y con la innovación como su estandarte. Randall es líder con amplia experiencia en desarrollo e implementación de proyectos. Es líder con conocimientos de normas y mejores prácticas internacionales como las del DRI Int., respaldado por la experiencia en su implementación y mejora en las organizaciones. Ha sido el encargado de la Oficina de Continuidad de Negocio del Banco Nacional desde el 2013 y hasta la actualidad.

Join us for a discussion from a global manufacturer’s perspective on how their supply chain has been impacted with their business continuity teams playing a key role in its resiliency the past few years. Included in this session are: • Key supply chain components and contributors • Common known and unforeseen supply chain challenges • How Covid-19 played a role in magnifying them • Improving visibility and structure • Forward planning with benefits of agility over accuracy • Forward planning with benefits of agility over accuracy

As IT threats continue to grow, IT outages will remain a rising challenge for organizations. Therefore, it becomes crucial to develop disaster recovery strategies and implement IT resilience capabilities to protect the most valuable assets and services. Advancements in communication and technology have reshaped the development of disaster recovery solutions over the cloud that have become an attractive approach and a fundamental part to sustain business operations. The presentation provides an overview of the evolved service continuity concept and capabilities of IT resiliency in a cloud environment, and other elements necessary to enable the effective implementation and operation of an IT service continuity program.

When we boil it all down, people are a business' single most critical asset. Of course, we plan to have backups for key personnel, but what happens when our people are also affected by the same disaster and repercussions that impact our business? This presentation is intended to provide insight into why it's in a business' best interest to encourage people to have their own disaster preparedness plans and what their plans need to include. Disasters impacting your personal life are no joke and neither are family and household preparations. This session will refresh you on what we planners sometimes forget about: why people are so critical and what’s involved with personal disaster preparedness.

Climate change, globalization, and the intricate complexity of multiple operational risks (e.g. supply chain, technological innovations) have challenged Business Continuity Management Professionals to quickly respond to and recover from a growing number of business disruptive events. The need to strengthen business resiliency cannot be questioned, yet promoting the physical and mental well-being of recovery teams and continuity professionals is, in many cases, still not being prioritized. This session teaches participants how to leverage mindfulness to optimize incident management while lowering stress and increasing emotional intelligence and effective decision-making. Scientific research and an overview of how the human brain works will be provided to understand how and why mindfulness is a value-add discipline. Short-guided meditations and practical “mindfulness on the go” tools will be included as part of this training session.

Understanding third party vendor risk is essential for organizational resiliency. This session will address best practices for assessing vendor risk and resiliency. We will review how to evaluate residual risks and potential impacts to incorporate vendor risk into a comprehensive resiliency program. We will also review using data analytics to better quantify and rate residual risk.

There are many ways to describe the global events that have unfolded over the course of the last year. Overwhelming, uncertain and pivotal come to mind. But also courageous, caring and resilient are a few ways that we might describe our collective experience as resilience professionals. Our goal at DRI International is always to provide you with learning-focused opportunities that will add value to your certification, help you grow as professionals and empower you to give back to your community. In 2021, that goal felt more meaningful than ever. We worked hard to bring you quality virtual programming to support you through your response to the ongoing COVID-19 pandemic and the seemingly never-ending onslaught of cyberattacks, severe weather events, supply chain disruptions and the like. Read on to learn about just a few highlights from our activities over the last year.

For DRI’s latest webinar we look at the relationship between organizational and operational resilience, and the regulations in-between, with three of the UK’s top professionals: - Dr Aaron Gracey, Managing Director of Squared Apples, will introduce listeners to the concept of Organisational Resilience and how organisations should start to review how they develop their frameworks in order to incorporate the capability. - Mike Price, Managing Director of Resilius Consulting, will introduce listeners to two new policy and regulatory landscape changes. While they target principally the finance sector, he will explain why they have wider implications into others. - Steve Yates, CBCP, Director of Acertia Unlimited, will close the presentation by delineating the relationship between organizational and operational resilience.

DRI International is proud to welcome Michael Berkowitz, Founding Principal of Resilient Cities Catalyst, who will draw upon real-life experiences from around the world to address reducing risk and increasing resilience in a post-Covid world.

It’s what you’ve all been working on - so let’s talk about it. Success, challenges, strategies for returning to work, it’s all fair game for our pandemic panel. - Kristina Cory, AVP – Network Planning – AT&T Technology Operations, AT&T

It’s what you’ve all been working on - so let’s talk about it. Success, challenges, strategies for returning to work, it’s all fair game for our pandemic panel. - Deb Ladendorf, Senior Manager – Global Compliance Program Management, Transunion

It’s what you’ve all been working on - so let’s talk about it. Success, challenges, strategies for returning to work, it’s all fair game for our pandemic panel. - Eric McNulty, Associate Director, National Preparedness Leadership Initiative, Harvard T.H. Chan School of Public Health

Welcome to the 2021 DRI Resilience Excellence Summit! DRI President and CEO Chloe Demrovsky offers some updates on DRI's activities over this challenging year and some information on what our resilience community can expect in the future.

BlackBerry's David Wiseman and Ramon Pinero discuss how AI and machine learning will completely transform the Critical Event Management landscape, what a next-gen critical event management system would look like with a use case to illustrate the dramatic impact AI/ML can have on a cyberattack disaster response. David and Ramon will also provide a visionary roadmap of how BlackBerry sees these capabilities evolving over the next few years to manage modern-day threats.

2020 was a difficult year for everyone and the crisis is far from over. I want to acknowledge the ongoing challenge presented by Covid-19 and share what DRI is doing to continue assisting you. We know that our resilience professionals around the world are still actively responding to the public health crisis. Our continuity community is rising to the mounting challenges brought on by this pandemic. We have tremendous faith in your skills and dedication and we are beyond proud to be associated with such tireless and innovative professionals. Please know that we are here for you during this unprecedented global response.

Is the coronavirus pandemic actually the death of the city or will our superstar megacities bounce back brighter than ever? Experts have debated the issue without consensus, so I decided to go directly to a leader who is not only an expert on cities, but also on what makes them resilient to shocks like the Covid-19 pandemic. As the Founding Principal of Resilient Cities Catalyst and the former President of 100 Resilient Cities, Michael Berkowitz has made a career of assessing what ails cities and how to free them from those constraints. Does he think it’s possible to get out of a challenge as big as this?

Juan Carlos González Cardozo, CBCP, consultor, conferencista e instructor internacional en materia de Gestión del Riesgo Empresarial, Resiliencia Organizacional, Gestión de Continuidad del Negocio y Gestión de Crisis conversa sobre los lineamientos estratégicos de la Gestión de Continuidad del Negocio en momentos de Pandemia, como orientación a la Dirección de las organizaciones en la preservación de sus operaciones y en la mitigación de los efectos del Covid-19.

From concept to operation and then operation to maturity, it is a journey. Present during this eight year journey, our speaker will talk with you about maturing the business resiliency program including tools, processes, and managing risk. The evolution of the toolset and the challenges to reach mature alerting and response, compliance, data integrity, and the continuous improvement process that produced a streamlined model meeting the needs of a dynamic customer base.

This hands-on, interactive workshop promotes preparedness among public and private entities when faced with a long-term power outage caused by a cyber-attack. The National Preparedness goal describes what it means for the U.S. to be prepared for all types of disasters and emergencies, including the possibility of a cyber-attack aimed at our Nation’s infrastructure. In May, the President signed an executive order on cybersecurity designed to protect critical infrastructure, including the national power grid. Large-scale power outages are not a new concern for emergency managers. A December 2016 power outage in Ukraine linked to a cyber-attack. An organization’s ability to perform its essential functions is based on key elements of leadership, staff, communications, and facilities. When faced with a prolonged power outage, lasting several weeks, will public and private continuity plans allow organizations to continue to provide these essential functions? This workshop will present participants with the opportunity to examine plans and procedures to discover the ability to sustain operations.

Leaders – whether in business, government or the nonprofit sector – take risks but often without fully understanding risk at a strategic level. Expanding upon the well-known “ESG” risks, this book explains the key nonfinancial (environmental, social, governance and technological or ESGT) risks. For many leaders (including board members), taking risk without knowledge or preparation can lead to organizational crisis, scandal and value destruction. For those who are prepared, resilience follows and so does the ability to transform ESGT risk into opportunity and value for stakeholders. In this session, global governance, risk, ethics and cyber strategist, author and board member, Andrea Bonime-Blanc, shows practitioners at all levels how to effectively identify and manage their top ESGT risks to avoid crises and transform risk into sustainable long-term resilience and value.

Leaders – whether in business, government or the nonprofit sector – take risks but often without fully understanding risk at a strategic level. Expanding upon the well-known “ESG” risks, this book explains the key nonfinancial (environmental, social, governance and technological or ESGT) risks. For many leaders (including board members), taking risk without knowledge or preparation can lead to organizational crisis, scandal and value destruction. For those who are prepared, resilience follows and so does the ability to transform ESGT risk into opportunity and value for stakeholders. In this session, global governance, risk, ethics and cyber strategist, author and board member, Andrea Bonime-Blanc, shows practitioners at all levels how to effectively identify and manage their top ESGT risks to avoid crises and transform risk into sustainable long-term resilience and value.

Leaders – whether in business, government or the nonprofit sector – take risks but often without fully understanding risk at a strategic level. Expanding upon the well-known “ESG” risks, this book explains the key nonfinancial (environmental, social, governance and technological or ESGT) risks. For many leaders (including board members), taking risk without knowledge or preparation can lead to organizational crisis, scandal and value destruction. For those who are prepared, resilience follows and so does the ability to transform ESGT risk into opportunity and value for stakeholders. In this session, global governance, risk, ethics and cyber strategist, author and board member, Andrea Bonime-Blanc, shows practitioners at all levels how to effectively identify and manage their top ESGT risks to avoid crises and transform risk into sustainable long-term resilience and value.

2019 was a truly remarkable year. Our community is growing in exciting ways. From the launch of our popular new Cyber Resilience training and certification program to surging growth in the Public Sector track and continued record numbers in our core Business Continuity programs, the future looks bright for the resilience profession. We are bursting with even more ideas for how to serve you and can’t wait to get you more involved in 2020. Since it is the time of year to look back as well as forward, I want to take a moment to celebrate a landmark year for DRI and our larger community. I am very proud to release this year-at-a-glance report to showcase all of this activity. Read on to see exactly what DRI has done for you lately.

The DRI International Global Risk and Resilience Trends Report is now in its fifth year. It continues to provide a global perspective and comprehensive trends analysis of the resilience profession from both an internal and external perspective. It provides expert opinion on the key trends and changes that have happened in the past year.

Join DRI for a discussion of the latest trends and issues facing resilience professionals. Patrick Alcantara will discuss the latest risks and resilience trends in Asia and Oceania from our Future Vision Committee. In his presentation, he will give an overview of the most pressing economic and political concerns facing resilience professionals. Patrick will be joined by Lim Sek Seong of Marsh Risk Consulting who will share their perspective on the risk and organizational landscape and trends in the region.

Listen to an impressive panel of MBCPs answer your questions from various industries and with a wide range of expertise during our “Ask the MBCPs” webinar.

Adrián Sanchez, CBCP, profesional con 15 años de experiencia profesional en BCM y Resiliencia, será el expositor principal del webinar sobre la resiliencia desde una perspectiva integral en la organización y se darán recomendaciones para impulsar la resiliencia organizacional.

In June 2017, Merck experienced a cybersecurity incident that identified the need to bolster preparedness for business disruptions. From the fall of 2017 through the present, the Global Regulatory Affairs and Clinical Safety (GRACS) organization prepared its first ever business continuity plan (BCP), including table top exercises and training. This was a massive undertaking for an organization of such breadth (regulatory science, clinical safety, labeling, licensing, operations, etc.) and large size (2200 employees globally), starting from scratch, and an illuminating experience regarding the risk susceptibility of our systems and processes. GRACS is in a much better place today with a completed BCP across the entire organization and connections with ongoing business continuity, risk management, and resiliency efforts across the company.

Northwestern Mutual (NM) has embarked on a digital transformation which has created greater client visibility to and demand on technology services, thus raising the importance of availability and resiliency of those services. The NM Enterprise disaster recovery and technology infrastructure teams will describe how disaster recovery practices have matured to support the firm’s transformation. Over a two-year period, disaster recovery exercises have moved from solely application focused walkthroughs to business process workflow exercises which include production technology and business user participation. Learn how NM made these improvements happen, lessons learned on the journey, and what still lies ahead to reach a highly performing DR program.

Capital One is raising the stakes for resiliency by adding the practice of regional isolation (ring fencing) of cloud regions to ensure real and effective regional independence. This presentation will cover the approach and the lessons learned from this important evolution in our practice.

U.S. and global critical infrastructure protection for cyber and physical events, recognize the effectiveness of trusted information sharing and peer communication during cyber and physical events. In this session, the Financial Sector Information Sharing and Analysis Center’s(FS-ISAC) information sharing lifecycle model will be discussed. The goal of this session is to spread awareness within the business continuity community, and encourage their increased participation in resilience information sharing. The session will describe the operational activities FS-ISAC members participate in and lead, the various peer communities of trust members may join and examples of how company’s incorporate ISAC participation into their resiliency plans and exercising.

This presentation will discuss the current and future state of organizational resilience across multiple management disciplines including business continuity management, information security and more. Using the five layers of culture, people, process and infrastructure, we will address the role of the chief risk/strategy officer and present a framework for developing a business/organizational resilience program in the organization.

With a look back and one ahead, the chair of the Future Vision Committee, will take attendees through trends observed in 2018 and provide predictions for what to expect in the year to come. Based on the Fourth Annual Trends and Predictions reports, this year’s content features a first-ever geographic breakdown of threats and preparedness worldwide.

Join Future Vision Committee members Lyndon Bird, Richard Knowlton, and Patrick Alcantara, along with DRI President Chloe Demrovsky, for highlights from the Fourth Annual Global Risk and Resilience Trends and Predictions reports. Discover how your job will be impacted by world events - including sustainability, cyberthreats, and more - and what you can do about them.

One way of promoting our relevance to the wider business community is to look at what might happen and evaluate how well we can deal with it to minimize impact. Most professionals will have developed tests and exercises based on scenarios – these give realism, focus, and interest to our resilience programs. Predictions are really an extension of that – a look at the wider world and how such trends and possible events might threaten our ability to respond.

Join cybersecurity expert Wade Richmond for an information-packed hour of important information on one of the profession’s hottest topics. Explore aspects of cybersecurity and business continuity, with the goal of integrating the two and achieving the ultimate goal -- cyber resilience. Learn how to talk to top management about these issues and sell them on the concept of cyber resilience.

Organizations today are confronted by a wide range of cyberattacks, so it comes as no surprise that cyberattacks and data breaches have consistently ranked high on the list of key issues identified for the resilience community according to the DRI International Global Risk and Resilience Trends Reports, issued annually by DRI’s Future Vision Committee. This year’s report revealed that although the top issues remain the same, there appears to be an even greater focus on technological risk. Given the development of technologies and the growth of business data, this is likely to remain the case moving forward … which may provide new opportunities for hackers to cause such massive disruptions.

The DRI International Global Risk and Resilience Trends Report provides a global perspective and comprehensive trends analysis of how resilience professionals view their industry and the external factors that are shaping it. It provides insight into the key trends and changes that have been observed since the last report, and has been extended this year to give an even more detailed picture of the state of the profession.

Part of the 2018 Global Risk and Resilience Trends Report, a worldwide survey of business continuity professionals revealed the following top 10 risks depicted in this infographic.

El DRI se complace en anunciar el webinar en español del 2018. Buscamos entregar beneficios a nuestros profesionales certificados y a la comunidad del DRI en general, por lo que no solamente brindamos webinars en inglés, sino que ahora también los traemos en el idioma español. Anota en tu calendario este 12 de Octubre de 2018 en el horario 9:00 a.m. – 10:00 a.m. CDT, el siguiente webinar educacional del DRI: Tendencias y Predicciones en Continuidad de Negocio Chloe Demrovsky, Presidente y Directora Ejecutiva del DRI Internacional y Karol Cordero, Directora de Mercadeo para América Latina del DRI, serán las presentadoras del Webinar. Con base en los eventos y resultados del 2017, el Comité de Visión Futuro del DRI Internacional ha elaborado el tercer informe anual de tendencias y predicciones para la profesión de Continuidad de Negocio y Resiliencia. En este webinar presentaremos los resultados de este informe, mirando hacia atrás en lo que ha ocurrido y viendo lo que podría estar a la vuelta de la esquina para nuestra profesión. ¡No te pierdas este webinar gratuito totalmente en español!

Join DRI board member Jerome Ryan and Director of Global Operations Kelsey Rose for an interactive discussion of the career options in business continuity and related fields. Their talk will cover everything from the current state of the industry to future trends in the resilience job market. In addition to learning the latest insights and resources from DRI, you will get to hear personal career experiences and advice from our speakers.

In the wake of the terrorist attack on September 11, 2001, the 9/11 Commission Report revealed that this country was not prepared for such a horrific tragedy, and in hindsight, for any other major humanmade/natural disaster. Since that date, the world has seen numerous tragedies from mass shootings: Newtown, Connecticut, wildfires, tornadoes (more than $300 billion in losses in 2017), superstorms, hurricanes (Puerto Rico), and other catastrophes. It is now 2018 and we need to assess our preparedness not only to major events, but every day activities such as crime, vehicle accidents, etc. This presentation will focus on where we are today, and where we need to be in the future. Specifically, the will be focus on the 2010 National Security Strategy for Achieving Resilience Through Public Private Partnerships (PPP). PPP is the logical strategy for a democratic society in that it recognizes two things: the government cannot do it alone, and preparedness requires each of us to be responsible to the degree of our individual capacities. In this session, you will learn about emergency operations center (EOC) activation criteria, stakeholder identification and prioritization during critical incidents, in addition to returning to normal operations while managing recovery

Morgan Jones, AVP at the New York City Economic Development Corporation describes his Hurricane Sandy Experience. Morgan A. Jones is AVP at the New York City Economic Development Corporation. Previously, Jones was Chief Operating Officer of the US-China Strong Foundation, Senior Emergency Management Specialist at NYU Langone Medical Center. Mr. Jones also served at the NYC Mayor’s Community Affairs Unit (CAU) and the Mayor’s Office of Housing Recovery under Mayors Michael R. Bloomberg and Bill de Blasio from 2010-2015.

Current cyber response frameworks are incomplete and cyber programs in a silo are a major vulnerability. Lost business is the number one component of cyber breach cost because of customer turnover, brand reputation loss and diminished goodwill. Cyber threat and breach are business problems and business continuity professionals have the expertise that can be leveraged to reduce both the time and money associated with a cyber breach. Join Tejas Katwala to build your business case.

Lou Drapeau, Vice Chairman of the Board of Directors for DRI International, presents on enterprise risk management and business continuity. How do we define resilience? Why is resilience important? What makes a system resilient? What does resilience mean for an organization? The answers to these questions will be revealed through a discussion of the roles of business continuity and risk management as well as where these functions reside in organizations. You’ll learn about the terminology of resilience, relevant trends identified by DRI’s Future Vision Committee, as well as cyber resilience and developing strategies for resilience.

The International Glossary for Resilience is a language guide designed to improve communications and increase clarity across the business continuity, disaster recovery, and resilience community.

Are you a government, healthcare, or financial organization? Then your business continuity and disaster recovery (BCDR) program is likely driven by regulatory requirements. The purpose of this presentation is to discuss BC/DR program management for private or non-traditional organizations. The goal of this session is to explore common challenges like: What if you don’t have regulatory drivers to guide your program? How do contractual requirements guide your program? What are some effective strategies to ensure that you are strengthening resiliency in your environments? We will review a case study on how Asurion’s Global Business Resilience Team managed the recent events of Hurricane Harvey and Irma, and Mexico City’s earthquake.

Since its first release in 2014, The DRI International Glossary for Resiliency has been a major resource for business continuity and resilience professionals around the world. Currently in four different languages, the glossary provides a common language for resilience professionals to use. The Glossary Committee is ready to release a major update to the Glossary in February, 2018. This session outlines the changes to the glossary, provides information on the new glossary, and discusses the future of the glossary.

Attend this session for an informative analysis of how resilience in the built environment from natural hazards affects business continuity. The built environment is not limited to a company’s own facilities and supply chain. There will be a discussion of the underlying root causes of vulnerability and why resilience is a prerequisite to sustainability. The speaker will explore the emergence of the resilience movement that will change the way we do business, but also create new market opportunities, and will share what companies need to consider in their investment and operating strategies.

Ever wonder why some business continuity and crisis management programs succeed while others do not? Traditional program methodology paved the way for our firm’s highly successful enterprise resiliency program, but over time, it also led to our BC/CM approach getting stuck in the proverbial rut. How did we dig ourselves out of that rut and gain the unparalleled support of our enterprise’s executive team? By innovating. Join us as we share stories and the lessons we’ve learned about stepping out of our comfort zone, taking a business-centric approach to continuity risk, moving from a tactical mindset to a strategic focus and the value of building relationships.

Attend this session to discover why disaster resilience is a winning strategy and how the ARISE Initiative may bring public and private sector together to make a difference. Sands has served as Vice Chair, United Nations’ Private Sector Advisory Group for International Strategy for Disaster Risk Reduction (2013 – 2015), and was a Board member (2011 – 2013). While Vice Chair, UNISDR Private Sector membership grew to 100 companies from 42 countries. Working with IBM, he developed the first Disaster Resilience Scorecard based upon the UN’s Ten Essential for Disaster Risk Reduction in 2014; the Scorecard is an innovative tool to assess preparedness of communities to respond to, and recovery from, natural disasters. The Disaster Resilience Scorecard received international acclaim, was recognized as a best practice by the UN International Strategy for Disaster Risk Reduction and received the Notre Dame Climate Adaptation Index 2015 Prize. He also developed a private business resilience survey tool that was applied to over 200 businesses in New Orleans in 2016.

Streamlining business continuity management as an integral part of the emergency management framework, the Organizational Resilience Management System (ORMS) comprises crisis management, ICT disaster recovery, security, medical, staff support, crisis communications, records, facilities management and BCM. The ORMS at the UN provides an effective means to integrate and harmonize the emergency management activities. The ORMS provides a framework for cooperation across institutional silos and between the various actors responsible for the key components.

With a look back and one ahead, the chair of the Future Vision Committee, will take attendees through trends observed in 2017 and provide predictions for what to expect in the year to come. Based on the third annual trends and predictions reports, this year’s content features results from a first-ever FVC survey of DRI certified professionals worldwide.

DRI recently presented at the 11th Corporate Governance Summit, held in Istanbul, Turkey, this January by Turkey’s Corporate Governance Association (TKYD). This year’s summit theme was “Corporate Governance’s Driving Force: Resilience and Durability,” focusing on organizational resilience and sustainability including a discussion of the implications of these two disciplines at the policy level.

Lyndon Bird, Chairman of DRI International’s Future Vision Committee, and Chloe Demrovsky, DRI President and CEO, discuss the findings of the Third Annual Global Risk and Resilience Trends and Predictions reports (also available in the resource library). Discover how your job will be impacted by world events — including supply chain disruption, extreme weather events, data protection, and more — and what you can do about them.

It’s never easy to predict the future. With the pace of change rapidly increasing, accurate predictions are ever more difficult to make solely based upon extrapolation of past events. In this report, we have tried to make reasonable predictions given our current knowledge, and the DRI Future Vision Committee has limited its predictions to those issues most likely to impact resilience professionals.

Published each November, the DRI International Global Risk and Resilience Trends Report is essential reading for resilience professionals. It provides a summary of key trends that emerged over the course of the year as well as insight into the current state of the profession.

This session will provide an overview of the 2017 World Economic Forum (WEF) Risk Report. 2017 marks the twelfth year that the WEF surveys over 800 global leaders to determine their top ten risks. In recent years, societal, geopolitical and environmental threats have come to supplant economic risks as issues of greatest global concern. As our world continues to be more interconnected, a holistic risk management approach needs to consider the interdependencies between risks. The 2016 WEF Risk Report called for actions to build resilience. This session will identify practical examples of how this could be done.

On April 12, 2015, Baltimore man Freddie Gray sustained injuries following his arrest by police and subsequently died one-week later of a spinal injury. In the afternoon of April 27, 2015, following Gray’s funeral, rioting erupted in West Baltimore, resulting in the Governor of Maryland declaring a state of emergency and implementing a city-wide curfew. This event impacted 11 Exelon facilities in its downtown Baltimore location. The protests and riots lasted for eight days and affected more than 4,000 Exelon employees within three critical operating companies. This presentation will discuss how Exelon’s Business Continuity & Crisis Management team managed the event through effective communication, coordination with Exelon Business Functions to ensure those impacted had the resources necessary to successfully recover, and the subsequent year to follow as six officers stood trial. This was the largest business disruption in Exelon’s history there were no employees injured, no Exelon property damaged and little to no loss of revenue. By providing appropriate guidance and collaborating efforts, Exelon’s Business Continuity team effectively prepared the company to continue maintaining the highest standards of safety and reliability for its people, customers, and communities.

Lyndon Bird, Chairman of DRI International’s Future Vision Committee, discusses the findings of two recent reports (also available in the Resource Library): Trends in 2016 and Predictions for 2017. Discover how your job will be impacted by world events – including cyber threats, supply chain, and the environment – and what you can do about them.

From politics to technology to the environment, the DRI Future Vision Committee examines the current global landscape to learn what we can expect and prepare for in 2017.

The Future Vision Committee 2017 Trends Report looks at how accurate the committee's predictions were for 2016, what significant changes have occurred since it made those predictions, and how the committee sees the political, economic, social, technological, environmental, and legal landscape from a risk and resilience perspective.

DRI Executive Director Chloe Demrovsky presents on DRI's response to the Sept. 17 pipe bomb explosion near its NYC office in Chelsea.

Building the BCP mindset in youth and inspiring professionals of tomorrow.

Attend this session to hear how NYU Langone Medical Center's Real Estate and Facilities team led the massive effort to rebuild the Medical Center following the destructive aftermath of Hurricane Sandy.

Resiliency programs can enhance and complement the traditional methodology, unifying the BC/DR landscape to identify dependencies and feed into the enterprise risk profile. In this session, we will talk about industry perspective, practical scenarios, critical success factors and about tools that can be homegrown or integrated with existing IT service Management toolsets to support and enhance resiliency programs.

The State of Business Resilience: 2016 Forecasts and Predictions - A White Paper by the DRI International Future Vision Committee

Marsh, in collaboration with DRI, surveyed nearly 200 C-suite executives, risk professionals and business continuity managers from large and medium-sized corporations internationally about their organizations’ attitudes toward business risks and the risk mitigation processes they have in place. The 2015 International Business Resilience Survey results indicate that organizations are better positioned to address traditional than non-traditional risks and that risk managers and CEOs have different perceptions about the severity and control measures in place for various risks facing their organizations.

This presentation looks at current gaps in defining resilience, using a case study of the aftermath of the 2014 Napa Valley earthquake as an example.

The word 'resilience' is used a lot. What does it mean? What are the characteristics of resilient people, organizations and societies? This interactive session will reveal what it means to be resilient and how you can increase resilience at home, work, and in the community

Need to reduce the time to recovery based on a mandate from the organization? The Energy Authority did too, and it was challenging based on the sheer number of critical business functions that needed to be recovered across the enterprise This session will show how the BC/DR team turned to technology to drastically reduce the recovery process time.

While many practitioners seek to identify factors that can help organizations achieve resilience, questions regarding how resilience and BCM program management fit with "lean thinking" remain unanswered. This presentation aims to fill that gap and is based on a year-long study of lean enablers for complex programs by PMI and MIT.

New demands upon BC Planners and Risk Managers are changing the approach to both disciplines nad creating a convergence of them. This session will analyze how these disciplines interact, their current practices, and how to set up a strategy in your BC or RM program that allows a convergence toward a higher resilience of your organization.

This presentation provides guidance on how to formulate a vendor resiliency strategy, and will equip attendees with practical solutions for effectively and efficiently assessing the risk exposures introduced by outsourcing business functions.

Larry Chase shares his criticality matrix as well as executive fiduciary statements, as he explains how to take the BIA product to create an organizational "value chain" for mapping the critical path in people, process, and technology resilience.

This presentation at KL 2014 details Mr. Nagase's experience managing crises and the lessons learned for resiliency.

In this two-page sample case, learn how Texas hospitals responded to Tropical Storm Allison in June, 2001. Then download the complete report!

An overview of Enterprise Risk Management and lessons learned from the financial crisis.

An exploration of business continuity practices in Mexico.

Risk Management Track: Keynote Address

Since 9/11, hurricane Katrina, Superstorm Sandy, and the Boston Marathon attacks there has been a wave of workshops to collect the lessons learned in preparedness and crisis response. The talk has focused on the role of public-private-academic partnerships as well as critical infrastructure protection. What are the major findings from these events and how do we, as a nation, move "beyond the storms" of reacting to disruptive events, cataloging more lessons, and submitting FEMA grant requests to operationalize critical infrastructure resilience? Attend this session to find out. Egli authored the book, Beyond the Storms (published in November 2013) to prepare a new generation of leaders to help bridge the gaps between public and private sectors and shift the focus of local and regional leaders to long term risk mitigation and a response posture that supports smart resilience.

BCM is an important component of enterprise security for a media company, such as the Swiss National Television (RSI). The session is aimed to illustrate the RSI approach to business continuity and crisis management and more specifically the innovative exercising program designed by Barca. Crisis simulations are periodically performed taking in consideration even challenging scenarios, such as the AMOK one.

Attend this session to hear from a cross-section of public and private sector officials and continuity professionals to get a feel for what continuity and preparedness are all about in our host city, Atlanta!

This presentation will give resilience leaders a guide for integrating incident response and continuity. It will describe how an organization should build security, vigilance and resilience into their support processes. The discussion will go describe the anatomy of a cyber-incident. We will touch on: - alignment with forensic incident response - data breach management - effective tools for threat management - ability to use cyber insurance

Come to this session to learn about the key trends shaping the continuity healthcare environment, as well as the business issues influencing healthcare preparedness planning, including: Regulatory Compliance Risk Management and Patient Safety Revenue Disruption Impact Analysis Accreditation Processes and Cost Cost Avoidance Attendees also will hear about a number of actual case studies and lessons learned.

The New Normal

Defining the Strategic Objectives of the International Glossary for Resiliency

Business Continuity Resiliency: Believing It Can Be Achieved

Presentation

Thanks to sponsorship from the DRI International Foundation, Mahila Partnership has expanded its project in Haiti to improve post-disaster economic and health outcomes for women and girls, as well as building long-term resiliency. This presentation discusses the overarching principles of effective recovery but in the context of an active post-disaster initiative. Attendees will understand how post-disaster relief and recovery programs must promote long-term risk reduction, as well as how investments rather than aid yields both short-term and long-term sustainable results.

Wide-Area Disaster Planning Case Study: A Global Financial Institution In Japan

Is there a metric that clearly can demonstrate to executive management the overall value of the business continuity management (BCM) program to the organization? Can BCM professionals quantitatively measure current risk levels that can be compared with established risk tolerances and report them to management in a meaningful way that drives both risk management and BCM initiatives? How could such a metric actually be implemented successfully in a large organization? This session explores these questions and presents a case study of how the BCM-RI was developed and implemented at DTE Energy. You will learn how the BCM-RI was implemented to measure the overall risk/preparedness level of DTE Energy business units, departments, subsidiaries, and the entire organization. You will see how gap analyses were performed to effectively compare BCM-RI levels to risk tolerance levels previously defined by management. Finally, you will learn how DTE Energy plans to expand the BCM-RI to develop risk indices for use by enterprise risk management and business resilience management programs.

Presentation

Currently a Vice President in Cyber Technology at Booz Allen Hamilton, Mr. Vevon has over 30 years of operational experience and over a decade directly supporting continuity of operations and business recovery planning. His primary clients include the National Geospatial-Intelligence Agency (NGA), the Office of the Director of National Intelligence (ODNI), National Reconnaissance Office (NRO) and the Department of State. He has considerable experience within the Intelligence Community, DoD, Joint Staff and Congress. Mr. Vevon manages over 300 geographically dispersed staff supporting numerous Federal Agencies and Intelligence Community clients with Mission Assurance, Business Continuity Planning, Critical Infrastructure Protection, Risk Management, Antiterrorism/Force Protection and Disaster Preparedness Exercises.

Presentation

How resilient is your supply chain when disaster strikes? Small businesses employ more than half of the U.S. private sector workforce and likely play a critical role in the success of your organization. If one of your critical suppliers is wiped out after a disaster, your supply chain will be interrupted. This session discusses the importance of small businesses being prepared for disasters and how their preparedness can affect your bottom line. Joseph Booth, Executive Director of the Stephenson Disaster Management Institute, has over 25 years of experience in preparedness and response to disasters.

Presentation