Beruflich Dokumente
Kultur Dokumente
Homeland Security
Assessment Manual
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page ii
Insights to Performance Excellence 2004: An Inside Look at the 2004 Baldrige Award Criteria
Mark L. Blazey
From Baldrige to the Bottom Line: A Road Map for Organizational Change and Improvement
David W. Hutton
Quality into the 21st Century: Perspectives on Quality and Competitiveness for Sustained Performance
International Academy for Quality
Customer Centered Six Sigma: Linking Customers, Process improvement, and Financial Results
Earl Naumann and Steven H. Hoisington
Homeland Security
Assessment Manual
A Comprehensive Organizational Assessment
Based on Baldrige Criteria
12 11 10 09 08 07 06 05 04 5 4 3 2 1
Fisher, Donald C.
Homeland security assessment manual : a comprehensive organizational assessment
based on Baldrige criteria / Donald C. Fisher.
p. cm.
Includes bibliographical references and index.
ISBN 0-87389-640-8 (alk. paper)
1. Emergency managementUnited StatesHandbooks, manuals, etc. 2. Civil defense
United StatesHandbooks, manuals, etc. 3. National securityUnited States
Handbooks, manuals, etc. 4. TerrorismPreventionGovernment policyUnited
StatesHandbooks, manuals, etc. I. Title.
HV551.3.F57 2005
658.4'73dc22 2004016879
ISBN 0-87389-640-8
No part of this book may be reproduced in any form or by any means, electronic, mechanical,
photocopying, recording, or otherwise, without the prior written permission of the publisher.
ASQ Mission: The American Society for Quality advances individual, organizational, and community
excellence worldwide through learning, quality improvement, and knowledge exchange.
Attention Bookstores, Wholesalers, Schools, and Corporations: ASQ Quality Press books, videotapes,
audiotapes, and software are available at quantity discounts with bulk purchases for business, educational,
or instructional use. For information, please contact ASQ Quality Press at 800-248-1946, or write to ASQ
Quality Press, P.O. Box 3005, Milwaukee, WI 53201-3005.
To place orders or to request a free copy of the ASQ Quality Press Publications Catalog, including ASQ
membership information, call 800-248-1946. Visit our Web site at www.asq.org or
http://qualitypress.asq.org.
Contents
Foreword. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Preface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Homeland Security Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
National Strategy for Homeland Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Baldrige Criteria for Performance Excellence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Baldrige Core Values and Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
The Baldrige Award. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
The Baldrige Criteria . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Homeland Security Advisory System (HSAS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
vii
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page viii
viii Contents
CD-ROM Contents
Organizational Overview
Category 1: Leadership
Category 2: Strategic Planning
Category 3: Customer and Market Focus
Category 4: Measurement, Analysis, and Knowledge Management
Category 5: Human Resource Focus
Category 6: Process Management
Category 7: Business Results
Summary of Assessment Items for Homeland Security (Score sheet)
Hierarchy of Homeland Assessment Needs
Transformation of Assessment Findings
Strategic Planning Worksheet
Quick and Easy Supplier/Customer Assessment for Homeland Security
(Based on Baldrige Criteria)
Homeland Security Benchmarking Process
Homeland Security Documentation List
Homeland Security Plan and Budget
ix
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page x
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page xi
Foreword
F
or the first time in Americas history, the private sector is on the front lines of the battle-
field in global terrorisma target, perhaps even a pathway, for attack on our economic
infrastructure. Increasingly terrorists seek mass disruption, along with mass destruction.
The nations critical infrastructure, facilities and companies are at riskand vulnerable.
Although federal and state governments have the principal responsibility to protect
American citizens from attack, they face one central dilemma: Critical infrastructures and eco-
nomic assets are largely privately owned. As a result, public safety increasingly depends on pri-
vate sector initiatives.
The Council on Competitiveness, a nonprofit, bipartisan organization whose members are
chief executive officers, university presidents, and labor leaders, believes that a new private sec-
tor paradigm for security is needed. Traditionally, security has been a matter of guards, gates,
and guns, seen as a sunk cost for business that drains profits from the bottom line. But new
management vision, technologies, risk management tools, and workforce training opportunities
offer the potential to achieve higher security and positive economic benefits: new market oppor-
tunities, productivity gains, customer confidence, and competitive advantage.
For example, information technologybased identification, tracking, and verification sys-
tems in container cargo, for example, should not only increase security of shipments, but also
enable just-in-time logistics. Mobile intruder detection technologies could serve a dual purpose
of security and inventory management. Sophisticated electronic access control systems that also
provide time and attendance and payroll data will reduce security labor costs, increase securi-
ty effectiveness, and provide a more accurate and efficient method of managing a workforce.
Improvements in security against agroterrorism have the potential to halt the growing threat of
naturally occurring foodborne and animal-related illnesses as well.
This book makes clear that there is no intrinsic reason why security need be fundamental-
ly different from quality or safety, which have demonstrated economic returns. It is instructive
to remember that, in the 1980s, quality was viewed as an expensive luxury rather than a core
business process with the potential to reduce cycle time and costs. After the disaster in Bhopal,
leaders in the chemical industry demonstrated that improved safety precautions could increase
efficiency and drive costs down.
Government cannot lead this effort; it must be driven by the private sector. Although a well-
placed terrorist attack has the potential to cripple the country economically, any attempt by gov-
ernment to impose a security regime on the private sector, ironically, could have exactly the
same result. Only the private sector is able to design an integrated security approach that pro-
tects productivity and competitiveness. This book creates a framework for organizations to
begin the critical process of reassessing (and discarding) old views about security in favor of
integrating security into their business model.
xi
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page xii
xii Foreword
Creating the right balance between competitiveness and security is the critical challenge.
There can be no security without economic vitality, just as there can be no economic vitality
without a secure environment in which to live and work.
Preface
T
his manual has been written as a result of the authors involvement in conducting more
than 100 organizational assessments based on the Malcolm Baldrige Criteria for
Performance Excellence since 1992. Many organizations have embraced the concept of
improving overall performance by using the Baldrige Criteria as a benchmark to gauge their
strengths and opportunities for improvement and as a measurement of their overall alignment
and integration of key processes.
Since the shocking attack on our country on September 11, 2001, our nation has made great
strides in improving homeland security. Individual citizens, industry, and government leaders
from all spectrums of American society have become involved in this national obsession to
ensure our national security. Many steps have been taken to ensure that our nation is secure
from terrorist attempts to unravel our nation as a whole and the public and private institutions
and organizations that support this nations infrastructure.
Terrorists are strategic in selecting targets based on organizational weaknesses and vulner-
abilities within our nations infrastructure. Our nation consists of an infinite array of potential
targets that can be attacked through a variety of methods. Actions such as inducement of com-
puter viruses, destruction of computer operating systems, exposure of citizens to biological and
chemical agents, massive disruption of high-profile events, manipulation of financial systems,
mass-casualty incidents, and interference with major transportation systems are only a few of
the horrific activities that terrorists might use to cause major upsets within our society.
The Department of Homeland Security has been established to ensure greater accountabil-
ity for the nations critical homeland security mission and to provide a unified approach among
agencies responsible for safeguarding the nation. However, at the present time no consistent
holistic approach has been defined for public and private organizations. Public and private
organizations do not currently have a consistent process to assess their own overall homeland
security readiness and vulnerability in the event of a major terrorist attack upon their organiza-
tional infrastructure. This author has developed a manual that an organization can use to con-
duct an internal self-assessment to gauge its overall readiness and vulnerability regarding
homeland security. This homeland security manual based on Baldrige Criteria is written as an
assessment tool for public and private organizations to measure their overall vulnerability to
corporate sabotage and terrorist attacks.
Using the Baldrige Criteria to help address overall homeland security issues within an
organization aligns the highly respected Baldrige national criteria for performance excellence
with very critical homeland security issues. Public and private organizations must address
these issues to ensure a safe work environment for both their employees and those who use
their products and services. The Council on Competitiveness in Washington, D.C., has estab-
lished a homeland security model for private organizations. The Council on Competitiveness
noted that the balance between competitiveness and security is a critical national challenge
(see Appendix C).
xiii
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page xiv
xiv Preface
The first line of defense for homeland security is this nations public and private organiza-
tions. These organizations comprise the infrastructure that supports our nations security. This
nation cannot be safe until organizations assess their overall homeland security vulnerability
and develop a comprehensive homeland security plan based on their assessment findings.
This comprehensive manual will aid an organizations quest to create and maintain a safe
work environment for its employees, suppliers, partners, and customers. The stability of this
nation rests on the strength and trust of our public and private organizations.
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 1
Introduction
T
he terrorist threat to Americas infrastructure takes many forms, has many places to hide,
and is often invisible. The need for homeland security is not tied to any specific threat. The
need for homeland security is tied to the underlying vulnerability of American infrastruc-
ture in general, and specifically to various public and private organizations that comprise that
infrastructure.
The unprecedented national response to homeland security began literally minutes after the
first plane struck the World Trade Center in New York City on September 11, 2001. Since
September 11, the highest levels within U.S. government and their various agencies have gone
to enormous lengths to identify the most vulnerable potential targets and critical infrastructure
in the United States. Potential targets identified include airports, sea and water ports, nuclear
facilities, dams, water and sewer plants, electric power plants, gas pipelines, dams and bridges,
and biological and chemical facilities. In addition, high profile events, holidays, and landmarks,
such as the Olympics, Super Bowl, New Years Eve celebration at Times Square in New York
City, Christmas, July 4, and numerous other national events and historical landmarks that
involve thousands of American citizens and public and private organizations, remain ongoing
targets for terrorists.
The National Governors Association has estimated that states have spent at least $650 mil-
lion to protect their infrastructure since September 11, 2001.1
The United States had never had a national strategy for homeland security until President
George W. Bush issued Executive Order 13228, Section 2, on October 8, 2001, establishing the
Office of Homeland Security and former Pennsylvania Governor Tom Ridge as director. On
January 24, 2003, Ridge became the first Secretary of the Department of Homeland Security. The
national strategy took more than eight months to complete and involved thousands of public
and private stakeholders.
This manual, with its incorporation of Baldrige criteria, will aid an organizations self-
assessment process by keeping it simple and involving a number of various levels of employ-
ees in the process. The manual is designed to encourage participation throughout the organiza-
tions workforce through assessment teams who ask questions and from those who answer
questions regarding homeland security. Total workforce involvement can include up to 200
employees. This assessment process helps an organization determine how holistically integrat-
ed the organization is in securing a safe work environment for its employees, suppliers, part-
ners, and customers regarding homeland security.
1
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 2
2 Introduction
Introduction 3
The Malcolm Baldrige National Quality Improvement Act of 1987 was signed by President
Ronald Reagan on August 20, 1987. The act established the Malcolm Baldrige National Quality
Award named in honor of the former Secretary of Commerce. The Baldrige Award Criteria are
considered the national standard for performance excellence. The Baldrige Award Criteria are
directed toward maximizing the overall effectiveness and productivity of an organization. They
are built around seven major examination categories:
Leadership. Examines how the organizations senior leaders address values, directions, and
performance expectations, as well as a focus on customers and other stakeholders, empow-
erment, innovation, and learning.
Strategic Planning. Examines how the organization develops strategic objectives and action
plans and how strategic objectives and action plans are deployed.
Customer and Market Focus. Examines how the organization determines requirements,
expectations, and customer preferences.
Measurement, Analysis, and Knowledge Management. Examines how the organization
selects, gathers, analyzes, manages, and improves its data, information, and knowledge assets.
Human Resource Focus. Examines how the organizations work systems and employee
learning and motivation enable employees to develop and use their full potential in align-
ment with the organizations overall objectives and action plans.
Process Management. Examines the key aspects of the organizations process management,
including key product, service, and business processes and key support processes.
Business Results. Examines the organizations performance and improvement in key business
areas, which include customer satisfaction, product/service performance, financial/market-
place performance, human resource results, operational performance, and governance/social
responsibility.6
4 Introduction
T
he alignment of the Baldrige Criteria with the color-coded Homeland Security Advisory
System (HSAS) provides a unique assessment methodology for an organization to gauge
its homeland security vulnerabilities and readiness in case of a major terrorist attack. Both
the Baldrige Criteria and HSAS have been recognized as best practice initiatives for organi-
zations to use to assess and to ensure that their performance excellence and security is compet-
itive in the global marketplace.
An organization would want to assess itself using the Baldrige Criteria because thousands of
U.S. organiations stay abreast of ever-increasing competition and improve performance excellence
using this internationally recognized quality standard. The criteria help an organization align
resources and approaches and improve corporate-wide communications, productivity, and effec-
tiveness.
The Baldrige assessment scoring system is based on two evaluation dimensions: (1) process
and (2) results. Each dimension should be considered before assigning a percentage score. All
process evaluation dimension categories are linked to results, as well as being linked to each
other. In addition, each of the categories assessed will have Homeland Security Scoring Profiles
based on the Homeland Security Advisory System to help facilitate the scoring process.
5
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 6
6 Chapter One
How to Use the Baldrige Criteria and HSAS to Assess Your Organization 7
The percent scores range from a low of 0% for zero-based preparation to a high of 100% for
world-class preparation. An organization can be 0% (zero-based) in some areas and 100%
(world-class) in others. The anchor point is 50%, which is middle range. Many organizations fall
below the 50% anchor point regarding homeland security preparation. The 50% anchor point is
considered to be good, but certainly below what an organization that is striving to be the best-
in-class in homeland security preparation among leading organizations would score.
0 10 20 30 40 50 60 70 80 90 100
Organizations that score 0% have an anecdotal approach, lack deployment, and have no
meaningful results. Organizations that score 100% reflect a refined, very mature approach that
is deployed and well adapted with sustainable results in all relevant areas of the organization.
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 8
8 Chapter One
How to Use the Baldrige Criteria and HSAS to Assess Your Organization 9
10 Chapter One
How to Use the Baldrige Criteria and HSAS to Assess Your Organization 11
Coordinating necessary security efforts with federal, state, and local law enforcement
agencies or any National Guard or other appropriate armed forces organizations
Taking additional precautions at public events and possibly considering alternative ven-
ues or even cancellation
Preparing to execute contingence procedures, such as moving to an alternate site or dis-
persing the workforce
Restricting threatened facility access to essential personnel only
5. Severe Condition (Red). A Severe Condition reflects a severe risk of terrorist attacks. Under
most circumstances, the protective measures for a severe condition are not intended to be
sustained for substantial periods of time. In addition to the protective measures in the previ-
ous threat conditions, organizations should consider the following general measures in addi-
tion to specific protective measures that they will develop and implement:
Increasing or redirecting personnel to address critical emergency needs
Assigning emergency response personnel and prepositioning and mobilizing specially
trained teams or resources
Monitoring, redirecting, or constraining transportation systems
Closing public facilities
World-Class
Preparation 1. Leadership
Senior leadership is visibly involved in promoting homeland security.
Senior leaders promote the formation of employee teams throughout the organization to
SEVERE focus on homeland security.
(Red) Senior leadership reflects the organizations commitment to public health, safety, and
80100% environmental protection.
Homeland security planning is promoted by senior leaders and integrated throughout the
organization.
Senior leadership shares corporate values regarding homeland security priorities with
employees, customers, partners, and suppliers.
ELEVATED Senior leadership is committed to public responsibility and corporate leadership
regarding homeland security.
(Yellow)
4060% Senior leaders support short- and long-term strategic planning for homeland security.
Homeland security plan is integrated into all senior leaders performance reviews.
Homeland security plan is integrated into all senior leaders performance reviews.
A few senior leaders and managers support and are involved in the organizations
GUARDED homeland security efforts.
(Blue) Homeland security initiatives exist in some parts of the organization.
2040% Organizations corporate policies and procedures reflect some commitment to homeland
security
Homeland security plan is promoted by some senior leaders.
Zero-Based Preparation
Process Dimension (Categories 16)
Evaluation Factors
Approach (methods used to accomplish the process)
Deployment (application of the approach throughout the organization)
Learning (refinement of the approach through cycles of evaluation)
Integration (alignment of the approach throughout the organization)
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 13
World-Class
Preparation 2. Strategic Planning
Organizations strategic planning process includes homeland security initiatives.
Organization seeks and receives homeland security input from employees, suppliers,
SEVERE partners, and customers before developing a strategic plan.
(Red) The strategic planning process for homeland security includes short- and longer-term plans
80100% based on key security data, customer, supplier, partner, and employee survey data, and
benchmark data deployed throughout the organization.
Homeland security is a critical component of the organizations strategic plans and goals.
Senior management provides homeland security input and approves the strategic plan.
Operational homeland security plans linked to the master strategic plan are developed
HIGH throughout the organization.
(Orange) Managers are held accountable for meeting strategic homeland security goals and
6080% objectives.
Homeland security initiatives are aligned throughout the strategic planning process.
Risk of Attack Levels
Operational homeland security plans developed at departmental levels link with master
plan.
ELEVATED Organization involves employees, suppliers, partners, and customers in homeland
security planning process.
(Yellow)
4060% Managers at all levels are held accountable for meeting homeland security goals and
objectives.
Homeland security strategic goals and plans initiatives are beginning to be better aligned
throughout the organization.
Strategic homeland security goals are established for key functional areas of the
organization.
GUARDED Some employees, suppliers, partners, and customers are involved in the homeland
security strategic planning.
(Blue)
2040% Some senior managers are involved in homeland security planning.
Some strategic alignment of homeland security initiatives within the organization is
evident.
None to very few employees, suppliers, partners, and customers are involved in planning
for homeland security.
LOW Homeland security planning is not included in the organizations strategic planning
process.
(Green)
020% Employees beyond senior managers are not involved in planning for homeland security.
No organizational alignment is evident for homeland security strategic initiatives.
Zero-Based Preparation
Process Dimension (Categories 16)
Evaluation Factors
Approach (methods used to accomplish the process)
Deployment (application of the approach throughout the organization)
Learning (refinement of the approach through cycles of evaluation)
Integration (alignment of the approach throughout the organization)
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 14
World-Class
Preparation 3. Customer and Market Focus
Organization conducts surveys, focus groups, and exit interviews to determine customer
requirements for homeland security.
SEVERE Organization promotes trust and confidence in its products/services to customers
regarding homeland security.
(Red)
80100% Organization is continuously gauging customer and market requirements and
expectations regarding homeland security issues.
Homeland security is totally integrated with customer service initiatives.
Effective feedback systems are in place to obtain critical customer and market data
regarding homeland security.
HIGH Customer-contact employees are given homeland security training.
(Orange) Logistical support is in place for customers to provide homeland security support.
6080% Homeland security issues are aligned with customer service initiatives.
Risk of Attack Levels
Most customer groups and markets are segmented regarding homeland security
requirements.
GUARDED Customer follow-up system is in place to address homeland security issues.
(Blue) Future homeland security expectations and requirements are determined and
2040% considered for future implementation among many customers.
Homeland security is beginning to be aligned with customer initiatives.
Organization does not consistently promote trust and confidence with customers
regarding homeland security issues.
LOW Organization does not survey its customers/markets regarding homeland security issues.
(Green) Organization does not consider homeland security a customer service issue.
020% Homeland security is not integrated into customer service initiatives.
Zero-Based Preparation
Process Dimension (Categories 16)
Evaluation Factors
Approach (methods used to accomplish the process)
Deployment (application of the approach throughout the organization)
Learning (refinement of the approach through cycles of evaluation)
Integration (alignment of the approach throughout the organization)
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 15
World-Class
Preparation 4. Measurement, Analysis, and Knowledge Management
Processes and technology to ensure timely, accurate, valid, and useful homeland security
data for employees, suppliers, partners, and customers are in place.
Competitive comparisons and benchmarking information and data are used to improve
SEVERE
and maintain homeland security.
(Red)
Homeland security data are analyzed organization-wide by employee teams that
80100%
translate it into useful information to help secure the workplace environment.
Homeland security knowledge and data are measured and deployed throughout the
organization.
Employees have rapid access to homeland security data throughout the organization.
Comparative homeland security data are collected, analyzed, and translated into useful
information to support a secure workplace.
HIGH
(Orange) Processes and technologies are used across most of the organization to ensure that
homeland security data are complete, timely, accurate, valid, and useful.
6080%
Homeland security data are integrated with daily operations.
Risk of Attack Levels
Employees have access to homeland security data in many parts of the organization.
Most critical processes have homeland security data that are complete, accurate, and
ELEVATED timely.
(Yellow) Measures exist that gauge homeland security effectiveness throughout the organization.
4060% Homeland security data are measured, analyzed, and distributed throughout most of the
organization.
Homeland security data exist for some critical products/services and processes.
Organization ensures that hardware and software are reliable, secure, and user-friendly
GUARDED regarding homeland security.
(Blue) Homeland security data and knowledge are transferred to key customers, suppliers, and
2040% partners.
Homeland security data and knowledge are beginning to be aligned throughout the
organization.
Zero-Based Preparation
Process Dimension (Categories 16)
Evaluation Factors
Approach (methods used to accomplish the process)
Deployment (application of the approach throughout the organization)
Learning (refinement of the approach through cycles of evaluation)
Integration (alignment of the approach throughout the organization)
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 16
World-Class
Preparation 5. Human Resource Focus
Organization is highly sensitive to employee well-being and satisfaction regarding home-
land security.
SEVERE Organization supports homeland security plans and goals through employee education,
training, and development initiatives.
(Red)
80100% Organization supports workplace preparedness for emergencies and homeland security
by promoting cross-functional teams to address and to be recognized for innovative
problem-solving approaches in identifying and resolving homeland security issues.
Homeland security issues are totally integrated within the organizations workforce
initiatives.
Senior and middle management support and recognize employee involvement, contribu-
tions, and teamwork in resolving homeland security issues.
HIGH Employee idea sharing and innovation is encouraged regarding homeland security.
(Orange) Employees are empowered and rewarded when they identify and address homeland
6080% security issues.
Homeland security is integrated with most of the organizations workforce initiatives.
Risk of Attack Levels
Few employees within the organization are empowered to work on homeland security
issues.
LOW Workforce is rarely surveyed regarding its well-being and satisfaction with the organiza-
tions homeland security initiatives.
(Green)
020% Employees involved with improving homeland security are seldom recognized by the
organization.
Homeland security is not aligned with workforce issues and a safework environment.
Zero-Based Preparation
Process Dimension (Categories 16)
Evaluation Factors
Approach (methods used to accomplish the process)
Deployment (application of the approach throughout the organization)
Learning (refinement of the approach through cycles of evaluation)
Integration (alignment of the approach throughout the organization)
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 17
World-Class
Preparation 6. Process Management
Key homeland security processes have been identified and documented across the
organization.
Systematic approaches are used to document key homeland security processes to
SEVERE
ensure shortened cycle time and consistent procedures.
(Red)
Critical homeland security processes are reviewed on an ongoing basis to reduce vari-
80100%
ability and to keep the processes current with homeland security needs and directions.
Homeland security initiatives are aligned with key customer, supplier, and partner
process initiatives.
Key homeland security processes are documented and controlled across the organiza-
tion.
Comprehensive homeland security assessments are conducted throughout the organi-
HIGH
zation on an annual basis.
(Orange)
Analytic problem-solving tools are used within the organization to identify and solve
6080%
homeland security problems.
Homeland security issues are aligned with the organizations key business processes.
Risk of Attack Levels
Process assessments are conducted in many parts of the organization to ensure a safe
work environment.
Customer, supplier, partner, and employee survey results are used to gauge homeland
ELEVATED security readiness.
(Yellow)
Organization identifies and documents key processes that support homeland security.
4060%
Homeland security issues are mostly aligned with the organizations key business
processes.
Homeland security assessments are conducted only when a breach of security has
occurred.
Not all critical homeland security issues have been identified and addressed.
GUARDED
(Blue) Limited customer, supplier, and partner input is incorporated into documentation of
homeland security process designs.
2040%
Homeland security issues are partially integrated with the organizations operations and
key business and support processes.
Zero-Based Preparation
Process Dimension (Categories 16)
Evaluation Factors
Approach (methods used to accomplish the process)
Deployment (application of the approach throughout the organization)
Learning (refinement of the approach through cycles of evaluation)
Integration (alignment of the approach throughout the organization)
H1237 Fisher00-02.qxd 8/28/04 12:39 PM Page 18
World-Class
Preparation 7. Business Results
Customer satisfaction results regarding homeland security initiatives have shown posi-
tive results over the past three years.
SEVERE Homeland security performance results have experienced a steady improvement over
the past five years.
(Red)
80100% Employee suggestions for homeland security improvement and innovative safe work
practices show positive trends over the past several years.
Homeland security results are trended and used to align overall corporate security.
Key measures of homeland security within operations, shipping, and customer contact
Risk of Attack Levels
Customer satisfaction with homeland security shows positive results and trends.
Employee involvement in homeland security projects has shown positive results over the
GUARDED past two years.
(Blue) Employee satisfaction with organizations homeland security effort shows positive trends
2040% over the past three years.
Homeland security results are partially collected and deployed.
Zero-Based Preparation
Results Dimension (Category 7)
Evaluation Factors
Performance Levels (position of data performance)
Trends (rate and breadth of data)
Comparisons (results relative to appropriate benchmarks)
Linkage (alignment of data with key organizational initiatives)
Gap (missing segments of data)
H1237 Fisher20_IDX.qxd 8/28/04 12:40 PM Page 217
Index
217
H1237 Fisher20_IDX.qxd 8/28/04 12:40 PM Page 218
218 Index
Index 219
220 Index
Index 221
222 Index
Quick and Easy Supplier/Customer senior leadership strategic planning, 3, 13, 31, 49, 198
Assessment for Homeland assessment teams, 2122 assessment team, 20
Security, 171190 Baldrige Criteria and, 19 homeland security factors, 5152
direction of, 34 organizational assessment bar
homeland security graph, 162
R education/training and, 105 strategic objectives, 50, 5354
read access, 209 homeland security issues and, strategy development process,
Reagan, Ronald, 3 1920 5052
recognition program, 109 organizational governance, 34, 37 supplier/customer assessment,
recommended practices, 209 organizational leadership, 3436 179
reconstitution, 209 employee empowerment, and world-class organization, 5060
red condition, 11 agility, 36 zero-based organization, 5060
red team, 209 values, directions, and strategic planning worksheet
redundancy, 209 expectations, 35 (example), 168169
regulatory compliance, 154 organizational performance strategy deployment, 5560
reliability, 86, 91, 209 review, 34, 84 performance projection, 55, 60
remediation, 209 homeland security readiness strategy development and
remote access, 209 and capabilities, 38 deployment, 5559
residual risk, 209 involvement in homeland strategy development process, 5052
resources, 50 security, 41 competitive environment, 50
response, 209 key homeland security customer/market needs,
responsibilities to public, 4244 performance measures, 39 expectations, and
results, defined, 6 management accountability of, opportunities, 50
results evaluation dimension 39 national/global economy, 50
(Baldrige category 7), 6, 9, 18 priorities for opportunities to redirect resources,
business results, 135160 continuous/breakthrough 50
performance levels, trends, improvement, 40 potential risks, 50
comparisons, linkages, and succession planning of, 101 strengths and weaknesses, 50
gap (Le-T-C-Li-G), 6, 18 sensitive information, 210 technological/key innovations, 50
retention, 136 service organization, 205 unique organization factors, 50
rewards, 109 Service Quality Indicators (SQIs), study circles, 36
rewards and incentives, 94 124, 148 subject matter expert (SME), 20
Ridge, Tom, 1 severe condition (red), 11 subscriber website, 87
risk, 50, 210 site visit, 191192, 195 succession planning, 101
risk assessment, 2, 210 small business, 205 superuser, 210
risk of attack levels, 8182 sniffer, 210 supplier, 126, 133134, 158, 205
assessment scores based on, social responsibility, 3, 4245 supplier certification program, 205
1118 ethical behavior, 42, 45 supplier partnership, 205
elevated condition (yellow), 10 key communities support, 42, 46 supplier/customer assessment,
guarded condition (blue), 10 responsibilities to public, 4244 171190
high condition (orange), 1011 social responsibility results, assessment improvement plan,
low condition (green), 10 152156 176189
severe condition (red), 11 software, 86, 88, 90, 210 guidelines for, 174
risk factors, 153 spoofing, 210 organizational profile, 172173
risk management, 210 stakeholder(s), 122, 129130 scheme form, 190
roundtable discussions, 69 strategic objectives and, 54 scoring profile, 175
stakeholder interests, 37 self-assessment evaluation
stakeholder trust, 154 dimensions, 173174
S statistical process control (SPC), support processes, 127133
safe work practices, 204 205 annual assessment, 130
sector, 210 strategic objectives, 50, 5354 audits of, 132
sector coordinator, 210 action plan for, 55 best practices, 133
security, 86, 91 challenges of, 50 cost minimization, 127, 132
security scoreboard, 131 goals and, 50 design of, 127, 130
security threat, 108 stakeholder needs, 50 determination of, 127128
segregation of duties, 210 timetable for, 50 improvements to, 127, 133
self-assessment teams, 125 strategic plan, 204 key performance measures, 127,
senior executive, 204 performance analysis, 84 131
H1237 Fisher20_IDX.qxd 8/28/04 12:40 PM Page 223
Index 223
key requirements, 127, 129 Trojan horse, 210 world-class vs. zero-based
security scoreboard, 131 24 hour customer access, 7071 organization, 7, 1218, 30, 205
world-class organization, business organization, 136160
128133 customer-focused results,
zero-based organization, U 137138
128133 user-friendly, 86, 88, 205 customer relationship building, 68,
survey(s), 73 utility, 210 7375
benchmarking survey, 193194 customer satisfaction
employee surveys, 88, 113, 115 determination, 7275
third-party survey, 205 V customers and market knowledge,
survey process, 88, 204 value creation processes, 120126, 6466
system, 205 149 employee learning and
system administrator, 210 costs and, 120, 125 motivation, 103109
system integrity, 210 design requirements, 120, 123 employee well-being and
system security officer, 210 determination of, 120122 satisfaction, 111116
system security plan, 210 efficiency/effectiveness factors, financial and market results,
systems perspective, 3 120 142143
improvement of, 120, 124, 136 governance and social
key performance measures, 120, responsibility results,
T 124 153156
target customers, 6364 key process requirements, 120 human resource results, 145147
targets, 205 organization's surveys, 121 information and knowledge
team administrator (leaders), 1922 world-class organization, 121126 management, 8691
team interview, 21 zero-based organization, 121126 leadership in, 3541
team members, 2022 values statement, 205 measurement, analysis, and
diversity of, 20 valuing employees and partners, 3 knowledge management,
large organization, 2021 virus, 210 7991
selection of, 2021 vision statement, 205 organizational effectiveness
small organization, 21 visionary leadership, 3, 210 results, 148151
subject matter expert (SME) and vulnerability, 210 organizational governance, 37
category leader, 20, 22 vulnerability assessment, 2, 210 organizational performance
teams. See also assessment teams review, 3841
benchmarking team formation, performance projection, 60
191 W process management, 120133
cross-functional teams, 9598, 123, warning, 2 product and service results, 140
125, 203 warranty costs, 120 senior leadership direction, 3536
site visits, 191192, 195 work environment, 111 social responsibility, 4246
work teams, 95 employee climate survey, 113, 115 strategic objectives, 5354
technology, 210 employee well-being, satisfaction, strategy development and
terrorism and motivation, 111113 deployment, 5659
catastrophic terrorism defense, 2 preparedness in, 110, 112 strategy development process and,
high profile events, 1, 11 work systems, 94101 5152
infrastructure threat, 1 annual review of, 95 support processes, 128133
potential targets of, 1 communication across, 96 value creation processes, 121126
third-party survey, 205 employee performance work systems, 9597
threat, 210 management system, 94, 98
time bomb, 210 hiring and career progression, 94,
time horizons, 55 99101 X-Y
timeliness, 86, 91 organization and management of yellow level, 10
toll free phone line, 70 work, 9497
total quality management (TQM), trends data in, 145
205 world-class organization, 9597 Z
transportation, 210 zero-based organization, 9597 zero-based organization, 6, 1218, 30,
transportation security, 2, 11 work teams, 95 68, 136160, 205. See also
trend data, 150 workplace health, safety, and world-class vs. zero-based
trends (T), 6, 9, 18 security, 110111 organization
H1237 Fisher20_IDX.qxd 8/28/04 12:40 PM Page 224