Critical Continuity

Federal guidelines push government agencies to prepare for the worst

Last month, this column addressed HSPD-20, which mandates government agencies to appoint a senior official at the assistant secretary level as continuity of government coordinator to prepare plans, budgets and exercises to test continuity planning, preparation and capability.

This month’s column highlights key points, requirements and timelines associated with the mandates set for continuity of operations (COOP) and continuity of government (COG) programs. HSPD-20 is designed to ensure that government agencies can initiate plans with little or no notice in order to remain open and ready to deal with terrorist, manmade or natural threats and disasters. This led to the development and release of a new national continuity policy implementation plan (NCPIP) on Sept. 27.

NCPIP builds on guidance provided by HSPD-20 for identifying and executing primary mission-essential functions. It also calls for the integration of COOP and COG programs into routine government operations. These objectives require an active, deliberate response from all departments and agencies.

Federal Preparedness Circular 65 (FPC-65) provides guidance for developing COOP programs within the executive branch, while NCPIP implements the policies in HSPD-20 and transitions the COOP planning concepts of FPC-65 into mandated actions.

NCPIP is designed to initiate a framework of integrated continuity. It seeks to integrate the COOP planning efforts within all departments, branches and levels of government, also encompassing the private sector. NCPIP integrates COOP within organizations, COG within each branch and enduring constitutional government among all branches. It asserts that continuity planning must be part of, and be developed concurrently with, all existing and future programs.

The capability to provide continuity of operations is built upon a foundation of ongoing continuity planning or program management. Once established, that foundation will support the leadership, staff, facilities and communications needed to perform essential functions.

NEAR-TERM REQUIREMENTS FOR NCPIP COMPLIANCE

A revised federal continuity directive lists requirements for determining MEFs and PMEFs. Feb. 29, 2008, submit MEFs and potential PMEFs to the interagency board for validation. June 30, 2008, expect a listing of approved PMEFs from the national continuity coordinator. July 31, 2008, orient and train all key COOP personnel. Jan. 30, 2009, coordinate PMEFs and MEFs internally and externally and with key partners within the private sector.

Under NCPIP, the president designates a national continuity coordinator. An NCC is a federal official reporting directly to the president who establishes a continuity policy coordination committee to develop policies, a continuity advisory group to implement programs and an interagency board to validate primary mission-essential functions. In addition, the NCPIP requires the establishment of new leadership roles. A continuity coordinator, a senior accountable official at a level equivalent to an assistant secretary, must report to the NCC on all continuity matters. A continuity manager is a lead official who must provide daily management of the COOP programs and represent the department on the NCC’s continuity advisory group as appropriate.

Another requirement of the plan calls for federal departments to identify mission- essential functions. To qualify as a MEF, a function must be required by law or executive order, and a business process analysis must determine that the function must be performed uninterrupted, with minimal interruption or requiring immediate execution during an emergency. In addition to MEFs, departments must identify primary mission-essential functions.

To qualify as a PMEF, a function must directly support national essential functions and continue uninterrupted or within 12 hours in all circumstances. There are eight national essential functions that must be sustained under all circumstances:

• Ensure the continued function of government under the constitution and include the function of the three separate branches of government.

• Provide leadership visible to the nation and the world, and maintain the trust and confidence of the American people.

• Defend the constitution against all foreign and domestic enemies, and prevent or interdict attacks against the United States or its people, property or interests.

• Maintain and foster effective relationships with foreign nations.

• Protect against threats to the homeland, and bring to justice perpetrators of crimes or attacks against the United States or its people, property or interests.

• Provide rapid and effective response to and recovery from the domestic consequences of an attack or other incident.

• Protect and stabilize the nation’s economy, and ensure public confidence in its financial systems.

• Provide for critical federal government services that address the health, safety and welfare needs of the United States. In the long run, there are several ongoing requirements for NCPIP compliance. First, each government branch must incorporate continuity requirements into daily operations and planning. This includes focusing all planning efforts on the continuance of PMEFs under all circumstances.

FPC-65
NCPIP
Reflects a model that regards COOP, COG and ECG as independent entities
Mandates integration of COOP, COG and ECG planning efforts across all levels of government and encompasses the private sector
Defines COOP planning as efforts dedicated towards the continued performance of essential functions
Requires integral and concurrent COOP development with all existing and future projects
Provides guidance for developing plans and procedures within a COOP program
Provides official definitions and criteria for required components and mandates immediate initiation of COOP planning
Outlines essential elements of an effective COOP program
Establishes deadlines for completing essential COOP program activities

Also, lawful orders of succession must be pre-planned and documented to grant a successor the authority, autonomy and responsibility to replace delayed or unavailable COOP personnel. Records, equipment, systems, storage, buildings, supplies and data must be safeguarded. Pre-arranged access to these must be granted to continuity staff, and procedures must exist to acquire expended or missing supplies during COOP procedures.

To prepare for emergencies, departments and agencies must have internal and external communications capabilities that are redundant at primary sites, duplicated at alternate sites and immediately available during emergencies. They also must provide resources that enable recovery from a catastrophic event to normal operating status within a primary or alternate site. And personnel must be designated, trained, prepared and capable of relocating to an alternate facility in support of continuing PMEF performance.

Next, each branch must develop and maintain a corrective action program, a listing of procedures to address deficiencies, funding and personnel requirements, and resource acquisition tasks within the COOP program. They’re required to participate in national exercises sponsored by DHS and include COOP program development within all budgetary requests.

Today’s changing threat environment and recent natural and manmade emergencies demonstrate the need for COOP/COG capabilities and plans at the local, state and federal levels.

Featured

  • Pragmatism, Productivity, and the Push for Accountability in 2025-2026

    Every year, the security industry debates whether artificial intelligence is a disruption, an enabler, or a distraction. By 2025, that conversation matured, where AI became a working dimension in physical identity and access management (PIAM) programs. Observations from 2025 highlight this turning point in AI’s role in access control and define how security leaders are being distinguished based on how they apply it. Read Now

  • Report: Cyber Attackers Continue to Turn to AI-Based Tools to Avoid Detection

    Comcast Business recently released its 2025 Cybersecurity Threat Report, a comprehensive analysis of 34.6 billion cybersecurity events detected between June 1,2024 and May 31, 2025. Now in its third year, the report offers business leaders a unique perspective into the evolving threat landscape and provides actionable insights to help organizations strengthen their defenses and align cybersecurity with business risk. Read Now

  • Axis Communications Creates AI-powered Video Surveillance Orchestra

    What if cameras could not only see the world, but interpret it—and respond like orchestra musicians reading sheet music: instantly, precisely, and in perfect harmony? That’s what global network technology leader Axis Communications set to find out. Read Now

  • Just as Expected

    GSX produced a wonderful tradeshow earlier this week. Monday was surprisingly strong in the morning, and the afternoon wasn’t bad at all. That’s Monday’s results and asking attendees to travel on Sunday. Just a quick hint, no one wants to give up their weekend to travel and set up an exhibit booth. I’m just saying. Read Now

    • Industry Events
    • GSX
  • NOLA: The Crescent City

    Twenty years later we finds ourselves in New Orleans. Twenty years ago the aftermath of Hurricane Katrina forced exhibitors and attendees to look elsewhere for tradeshow floor space. Read Now

    • Industry Events
    • GSX

New Products

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.