OR Header

 
NEW! View the updated Federal Register Notice
 

ANSI/ASIS SPC.1-2009 Organizational Resilience Standard Under Consideration for DHS Adoption in PS-Prep

The ANSI/ASIS SPC.1-2009 Organizational Resilience: Security, Preparedness, and Continuity Management Systems—Requirements with Guidance for Use American National Standard is under consideration for inclusion in the DHS PS-Prep, a voluntary program designed to enhance national resilience in an all hazards environment by improving private sector preparedness.

Important Resources

What this means to your organization:

The ANSI/ASIS Organizational Resilience Standard offers a business-friendly, globally tested and proven method, based on the ISO management system standard model, for organizations to improve their preparedness performance.

The ANSI/ASIS Organizational Resilience Standard is unique to other preparedness standards in that:

  1. It is the only preparedness standard that takes an enterprise-wide view of risk management, thereby enabling an organization to develop a comprehensive strategy to prevent when possible, prepare for, mitigate, respond to, and recover from a
    disruptive incident.
  2. It is also the only preparedness standard that is 100% compatible with existing ISO management system standards (such as ISO 9000, ISO 14000, ISO27000 and ISO 28000), thus enabling a cost-saving integrated application.
Message from ASIS President, Michael R. Cummings, CPP: "ASIS International is proud that DHS has selected its American National Standard for consideration to help businesses effectively address potential disruptions. Regardless of an organization’s decision to participate in the PS-Prep, it can use the ANSI/ASIS Organizational Resilience Standard to better manage its risks."
 

Points to Consider about the ANSI/ASIS Organizational
Resilience Standard:

  • Provides a cost-effective approach to managing risk that addresses minimization of both the likelihood and consequences of disruptive events.
  • Aligns with the way successful businesses manage risk by looking at the entire risk profile. It focuses on the holistic resiliency of the organization, not just Business Continuity Management and Emergency Management.
  • Emphasizes a balance of adaptive, proactive, and reactive strategies for making organizations resilient based on their risk profile and business environment in which they operate.
  • Can be used for first, second, and third-party verification. Organizations can use it to improve resilience performance, as well as demonstrate to customers, clients, and supply chain partners that the company has a robust resilience program.
  • Applicable to organizations of all types and sizes, from public to private, small to multinational, in manufacturing, service, storage or transportation. In addition, the Standard has been developed simultaneously in countries on four continents.
  • Is aligned with the new ISO 31000:2009 - Risk Management which allows an organization to better integrate preparedness into its overall risk management strategy.
     

It is imperative that security management professionals who endorse the ANSI/ASIS Organizational Resilience Standard voice their support by submitting comments to the Federal Register Public Notice/Docket ID: FEMA-2008-0017.