The Inner Circle

Hi All,

These Ten Steps of Resilient Power ("Ten Steps") consist of process-oriented guidelines to help best implement the CISA Resilient Power Best Practices for Critical Facilities and Sites1 ("RPBP") using the CISA Resilient Power Assessment Worksheet. The RPBP provides extensive best practices and includes the rationale and various considerations for the guidelines to help protect against short- and long-term power outages.  These Ten Steps and the RPBP can help critical infrastructure organizations (excluding electric and natural gas utilities) implement a comprehensive, risk-informed Business Continuity and Continuity of Operations (COOP) resilient power plan. Prior to starting the first step, designate a project champion who should then identify a lead, as shown below. 

Ten Steps of Resilient Power

1. Identify Lead and Establish Team
2. Write Project Charter  
3. Document Requirements  
4. Conduct Assessment and Perform Gap Analysis  
5. Create Project Management Plan 
6. Research Backup Power Solutions 
7. Determine Security Mitigations 
8. Develop Implementation Plan  
9. Update Operations and Maintenance (O&M) Plan 
10. Implement Power and O&M Plans 

The Ten Steps are flexible and should be tailored to the specific organization often by implementing the highest value improvements first including properly maintaining the fuel and the backup power generation system. These Ten Steps were developed based upon the RPBP, Federal Emergency Management Agency (FEMA) guidance, and industry best practices (e.g., Program Management Institute's Project Management Body of Knowledge). 

------------------------------
Michael Roza CPA, CISA, CIA, CC, CCSKv5, CCZTv1, MBA, EMBA, CSA
------------------------------