Disaster preparedness in the spotlight after Hurricane Katrina CSO magazine editor Kathleen S. Carr spoke to Peter Metzger about the effects of Katrina on disaster preparedness and the CSO role. Metzger, a vice chair of executive search firm Christian & Timbers, was a former military aide in the Reagan White House. He has recruited the global security teams for some of the world’s largest companies and serves as CSOs career counselor.On how Katrina will elevate the role of CSO…Hopefully, Katrina is cumulative evidence that these events are real. This isnt a terrorist attack, but the results are the same. People need to think constantly about what we can do in the event of a total failure. This means planning how to identify employees and duplicate record keeping. Redundant systems must be kept in another location besides headquarters. On rebuilding New Orleans… I believe its nearly an impossibility to rebuild the economic structure of New Orleans. CSOs need to think about ways to react to these events. This applies to small businesses as well as Fortune 100 companies. In this day and age you need to think about these events all the time. This is part of a CSO’s responsibility.On what the current relief effort says about U.S. disaster preparedness… If you look at the Federal Emergency Management Agency (FEMA), I think it has done an adequate job given the circumstances and severity of the incidentits clear that a lot of things conspired to make this the perfect storm. We now recognize that this event is analogous to a biohazard attack or a dirty bomb attack, and we are systemically unprepared to deal with it, socially, economically or personally. If we cant improve on our national, state and local programs, we set ourselves up for continued problems like this.On the importance of redundant systems…This screams to the need to have not only central business operations but also some kind of redundant facility that can have some semblance of recorded information, such as employee identification, document and data retrieval. If theres nothing left, where do you start rebuilding? Remotely locating redundancy is step number one.On why physical security is increasingly tied to business risk and business operations…Sadly, all you have to do is look at what happens to the human condition within 48 hours. We experience fear, then loss, then anger, hostility and on to attacking the very people trying to help us. Some of that is lawlessness, but it speaks to the need to be well planned and rehearsed. Until we see these things, we dont know how quickly civil disobedience can break out. Its going to take 30,000 National Guardsmen to keep the peace. People revert to basic survival and will do anything to get water or food to their family in order to survive. We cant plan for that, but we can have enough things in place to recognize that this is going to happen. Whats happening is real, this is not make-believe. Threat analysis and prevention become really important. Disaster recovery is the last part of the plan but were seeing how important it is now. Related content news UK government plans 2,500 new tech recruits by 2025 with focus on cybersecurity New apprenticeships and talent programmes will support recruitment for in-demand roles such as cybersecurity technologists and software developers By Michael Hill Sep 29, 2023 4 mins Education Industry Education Industry Education Industry news UK data regulator orders end to spreadsheet FOI requests after serious data breaches The Information Commissioner’s Office says alternative approaches should be used to publish freedom of information data to mitigate risks to personal information By Michael Hill Sep 29, 2023 3 mins Government Cybercrime Data and Information Security feature Cybersecurity startups to watch for in 2023 These startups are jumping in where most established security vendors have yet to go. By CSO Staff Sep 29, 2023 19 mins CSO and CISO Security news analysis Companies are already feeling the pressure from upcoming US SEC cyber rules New Securities and Exchange Commission cyber incident reporting rules don't kick in until December, but experts say they highlight the need for greater collaboration between CISOs and the C-suite By Cynthia Brumfield Sep 28, 2023 6 mins Regulation Data Breach Financial Services Industry Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe