Disaster Recovery Journal, Fall 2009

will prevail, simply because audit issues wind up being redressed by the board of directors.

The way to overcome both of the above situations is to ensure quality in those conducting audits.

To address this need, two of the most respected names in their particular professions have joined forces to create an education and certification program that will qualify participants to audit emergency and disaster management and business continuity programs against existing standards and regulations. NFPA (National Fire Prevention Association) and DRI International (Disaster Recovery Institute) have created an interactive program to provide training, tools and hands –on experience. This program will help attendees understand the key components of emergency and disaster management and business continuity, the relevant standards, laws and regulations, the process of analysis, creation, implementation, testing and maintenance of programs.

Course materials will probe into existing regulatory and legal requirements by industry and country. Emerging requirements received special attention. Specifically, BS25999, NFPA 1600, ASIS, DRI International’s professional practices, financial services, insurance, healthcare, utilities, public sector guidances and a host of others will be explored. In addition, careful attention will be paid to the processes by which emergency and disaster management and business continuity programs are initiated with an eye toward corporate governance and policy and procedures.

Corporate planners at all levels, internal and external auditors and those who wish to self-assess their programs (in preparation

The DRI
International Board
of Directors (above)
and Certification
Commission (right)
met at the recent
Fall World 2009
in San Diego. DRI
International offered
pre- and post-
conference courses
in San Diego (below),
including certification
testing.

for an audit or as an indication of preparedness for their customers) will get the tools they need to perform an audit in accordance to appropriate standards and regulation. Emphasis on audit requirements and documentation will aid in the evaluation of records, organizational roles and responsibilities, process flows and corporate oversight.

At the end of the training course, a qualifying examination will be conducted. Those passing the examination will be eligible to apply for certification as a Certified Business Continuity Auditor (CBCA) or Certified Business Continuity Lead Auditor (CBCLA). The certification level (CBCA or CBCLA) will be granted based upon the amount of demonstrated audit experience of the applicant. Two years audit experience will be the experience criteria for CBCA while those seeking the CBCLA designation will be required to provide references to verify that they have at least five years of active audit experience. The certification will be granted by DRI International, the largest business continuity certification organization in the world. DRI International has certified more than 12,000 applicants in over 90 countries in its 20 year history.

v

Alan Berman is a CBCP, MBCI, is a member of the ASIS BS25999 technical committee, a member of the Committee of Experts for ANSI-ANAB, a former member of the NY City Partnership for Security and Risk Management, executive director for Disaster Recovery Institute and the co-chair for the Alfred P. Sloan Foundation committee to create the new standard for the US Private Sector Preparedness Act (PL 110-53).