Holding Down the Fort

Continuity planning makes a comeback in government applications

Last May, the White House issued Homeland Security Presidential Directive 20, HSPD-20, which mandates government agencies to appoint a senior official at the assistant secretary level as their continuity of government coordinator to prepare plans, budgets and exercises to test continuity planning, preparation and capability. The mandate, which requires implementation within 90 days, is designed to ensure that government agencies are capable of initiating plans with little or no notice to remain open and ready to deal with terrorist, manmade or natural threats and disasters.

HSPD-20 also establishes a comprehensive national policy on the continuity of federal government structures and operations by assigning a single national continuity coordinator responsible for coordinating the development and implementation of federal continuity policies.

According to the directive, national essential functions prescribe continuity requirements for all executive departments and agencies and provide guidance for state, local, territorial and tribal governments, and private sector organizations, in order to ensure a comprehensive and integrated national continuity program that enhances the credibility of the national security posture and enables a more rapid and effective response to and recovery from a national emergency.

The evolving threat environment has shifted our awareness to the need for continuity of government capabilities that are designed to enable federal, state and local governments to continue to provide their essential functions across a broad spectrum of emergencies. Continuity programs began in the early 1950s when the threat of nuclear war moved the administration of President Harry S. Truman to begin planning for emergency government functions and civil defense. When the Cold War ended 40 years later, then Secretary of Defense Dick Cheney mothballed the alternate national military command center for the Joint Chiefs of Staff, located in Raven Rock mountain—commonly called site R—just over the Pennsylvania state line near Waynesboro, Penn. During the decade of the 1990s, continuity operations and planning continued, but at a substantially slower pace than before or since. The terrorist attacks of Sept. 11, 2001, and Hurricane Katrina reinvigorated interest in continuity of government operations.

The Washington Post reported that President Bush set up a shadow government after 9/11 of about 100 senior civilian managers to live and work outside Washington on a rotating basis to ensure the continuity of national security. Since then, a program once focused on presidential succession and civilian control of the U.S. nuclear weapons inventory has been expanded to encompass the entire federal government, but most specifically, the entire executive branch of government. From the Department of Education to the Small Business Administration, to the National Archives, under HSPD-20, every department and agency is now required to plan for continuity outside of Washington, D.C.

Continuity of government has been defined as the preservation, maintenance or reconstitution of civil government’s ability to carry out its constitutional responsibilities. It is essential to maintain the fabric of our constitutional form of government and to ensure that the public has faith in its government’s capability to provide for its health, safety and welfare and to contribute to the common defense of the United States. Continuity of government is designed for the full range of governmental services, including the three branches and all levels of government.

Since 9/11 and Hurricane Katrina, the definition of what constitutes an “essential” government function has been expanded beyond core national security functions. Continuity of government planning addresses the recovery of critical and essential government operations in the event of an incident or emergency that disrupts service, such as a power failure, where having backup capabilities can quickly resolve the situation. It also can be longer term, as in the case of a major hurricane or earthquake, or similar catastrophic event where services are impacted for several days or, in some cases, weeks. To prepare for this long-term denial of service, government organizations will need to plan for relocation to an alternate facility.

Continuity of government is not just a federal problem. Even states and local governments must make every effort to plan and prepare for the unthinkable. Government services are susceptible to interruptions or destruction of the magnitude witnessed on 9/11, when New York City fell victim to unprecedented citywide and regional telecommunications failures. Individual cascading events evolved despite the city’s familiarity with potential power outages, computer failures, and the interconnectivity and dependence upon telecommunications.

Only two years earlier, New York City officials had planned for such events during Y2K preparedness activities. One incident that was not planned for in New York City was the collapse and total destruction of the city’s Emergency Management Command Center, located at 7 World Trade Center. In addition, some municipal agencies experienced problems with storing and recovering vital records at off-site locations. These difficulties made access to records dangerous and nearly impossible.

The tragic circumstances and consequences of these events provide the most persuasive argument for continuity of government planning at all levels of government. Government officials should ask:

• How does my agency plan for the unthinkable at times when citizens require its services the most?

• What actions are necessary to ensure coordination among state, local and federal agencies?

• What would happen if the governor or a high-ranking agency official loses their life?

• What can be done to ensure redundancy and interoperability of communications?

• Has the agency provided adequate resources to prepare, exercise, test and validate continuity operations planning? The answers to these questions are the starting point for planning. Success will require sufficient resources and committed agency leadership. It’s time to get started.

Featured

  • AI Is Now the Leading Cybersecurity Concern for Security, IT Leaders

    Arctic Wolf recently published findings from its State of Cybersecurity: 2025 Trends Report, offering insights from a global survey of more than 1,200 senior IT and cybersecurity decision-makers across 15 countries. Conducted by Sapio Research, the report captures the realities, risks, and readiness strategies shaping the modern security landscape. Read Now

  • Analysis of AI Tools Shows 85 Percent Have Been Breached

    AI tools are becoming essential to modern work, but their fast, unmonitored adoption is creating a new kind of security risk. Recent surveys reveal a clear trend – employees are rapidly adopting consumer-facing AI tools without employer approval, IT oversight, or any clear security policies. According to Cybernews Business Digital Index, nearly 90% of analyzed AI tools have been exposed to data breaches, putting businesses at severe risk. Read Now

  • Software Vulnerabilities Surged 61 Percent in 2024, According to New Report

    Action1, a provider of autonomous endpoint management (AEM) solutions, today released its 2025 Software Vulnerability Ratings Report, revealing a 61% year-over-year surge in discovered software vulnerabilities and a 96% spike in exploited vulnerabilities throughout 2024, amid an increasingly aggressive threat landscape. Read Now

  • Motorola Solutions Named Official Safety Technology Supplier of the Ryder Cup through 2027

    Motorola Solutions has today been named the Official Safety Technology Supplier of the 2025 and 2027 Ryder Cup, professional golf’s renowned biennial team competition between the United States and Europe. Read Now

  • Evolving Cybersecurity Strategies

    Organizations are increasingly turning their attention to human-focused security approaches, as two out of three (68%) cybersecurity incidents involve people. Threat actors are shifting from targeting networks and systems to hacking humans via social engineering methods, living off human errors as their most prevalent attack vector. Whether manipulated or not, human cyber behavior is leveraged to gain backdoor access into systems. This mainly results from a lack of employee training and awareness about evolving attack techniques employed by malign actors. Read Now

New Products

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.”

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.