Disaster Preparedness: Is Your Plan Ready for the Real Thing? August 2006

1. Disaster Preparedness:Is Your Plan Ready for the Real Thing?August 2006

2. Presenter – Steve HerndonBank of America Steve Herndon Senior Vice President Global Government Banking Executive Bank of America • Mr. Herndon’s group is responsible for all services provided to the US Government and International Governments globally. He also has oversight for the enterprise view of state and large municipalities. • Bank of America acts as a financial agent to the US Treasury and other government agencies, providing collection, treasury and disbursement services under the Plastic Card Network, Electronic Federal Tax Payment Systems (EFTPS), IRS Lockbox, General Lockbox, Bankruptcy Trustees, US Courts, and numerous depository relationships under Treasury General Agency contracts • During 28 years with Bank of America, has held a variety of management positions in areas such as Operations, Product Development and Client Management with the last 13 years focused solely on Government Banking.

3. Welcome and agenda • Key steps • Understand the key steps in developing a disaster recovery/business continuity plan • Critical treasury functions • Learn what critical treasury functions should be under your microscope • Best practices • Hear best practices and lessons learned in the areas of Payroll, Payables, and Receivables

4. What is a disaster? What is disaster recovery? • An event that disrupts an organization’s ability to function for an extended period of time • Disaster Recovery and Business Continuity Refers to an organization’s ability to recover from a disaster and/or unexpected event and resume and continue operations

5. Crisis Readiness Created or updated an Evacuation Plan In the past year % of cities surveyed that said they have: 56% 30% Prepared for a pandemic outbreak such as bird flu 20% Received sufficient federal resources for first-responder communications Crisis Readiness Across the United States • A survey of 183 cities (from Bothell WA to New York NY) paints a grim picture of the nations disaster preparedness nearly 5 years post 911 attacks. • Most cities have not received enough money to get police & firefighters the radios/equipment needed to communicate in the event of a crisis. • More than 4 in 10 cities have not created or updated evacuation plans since last fall’s Gulf Coast hurricanes. • FEMA is still getting mixed reviews on how much confidence US cities have in their abilities post-Katrina. * source: USA Today July 26, 2006 print edition

6. Steps in developing a disaster plan • Know your risks • Mitigate as many risk exposures as you can • Identify key activities you need to plan for • Pick the best recovery solution that you can afford • Develop and document plan • Test your plan and document issues/lesson learned • Update your plan and keep it current • Repeat process at least annually • And keep raising the bar!

7. Here’s what you told us How prepared is your organization to conduct basic business and financial functions in the event of a disaster striking your community?

8. Flooding WTO Riots 11/00 Midwest 1993 Power Outage Earthquake 2/01 NY 8/90, 8/03 Flooding Seattle Chicago 4/92 Bombing WTC Power Failure, 12/98 NYC 2/93, 9/01 San Francisco Hurricane Floyd East Coast 9/99 Rain/Mud Slides California 3/95 Snow/Ice Storm Wild Fires in MD, NC, VA 01/04 N. California Blizzard 9/05 Riots East Coast 3/93 & 1/ 00 LA 5/92 Hurricane Isabel East Coast 10/03 Earthquake Los Angeles 1/94 Hurricane Opal FL, GA, AL, NC 9/95 Tornado Flooding Fires in New Mexico Nashville 4/98 Georgia 7/94 5/00 Hurricane Iniki Flooding 2005 Hurricanes: Bombing Hawaii 10/92 South TX 10/94, Katrina, Ophelia, Rita, Wilma, ??? Oklahoma City 4/95 Houston 7/01 What are the risks?A U.S. example

9. Pandemic preparation • Plan for the impact • on your organization • on your employees and customers • Establish policies to be implemented • Allocate resources to protect your employees and customers • Communicate to and educate your employees • Coordinate with external organizations and help your community • www.pandemicflu.gov

10. What are the critical activities/issues? • Communication • System and Application Recovery • Information Reporting • Logistics • Payroll, Payables, Receivables and Funding • Personnel

11. Communication, System Recovery and Information Reporting • Communication is KEY • Eliminates duplication of objectives/efforts • Have policy/procedures clearly outlined and disseminated prior to disaster • Keep prime business partners informed; have plans and administrative scheduling out front so customers and other state agencies know what to expect • Ensure you have alternate communication methods • 800 MHz (2-way radio), two forms of Internet connection, car charger for cell phones, satellite phones as backup • System and Application Recovery • Information reporting • Don’t use an alternate site in your geographic location as your ONLY option for disaster recovery (in the event the remote site is inoperable or without resources) • Keep computers/servers with you and transport if necessary • Ensure all passwords and 800 numbers on hand • Conduct testing of alternate site and calling trees regularly

12. Documentation & Logistics • Document as you go – you will not be able to recall every detail later • Address documented issues as soon as feasible • Conduct post-mortems on tests and areas where the disaster recovery plan was used only partially to address what needs to be updated/changed • Make sure your plan addresses backup transportation needs for key personnel • Empower the right people to make decisions (i.e., getting payroll distributed early, keeping phone lines open, providing backup administrative support) • This ensures your disaster recovery plan continues to function if an unidentified scenario arises – keeps associates moving versus waiting for an answer

13. Payroll, Payables and Receivables • Payables • Electronic Payments • Remote processing • Wire transfer • Positive Pay • Payroll • Payroll policies • Direct deposit and card • Pre-date ACH payroll run, distribute checks early • Cross-train employees • Remote payroll • Use Internet • Receivables • Web-based invoicing/payments • Use lockbox • Merchant Services

14. Personnel • Personnel • Employee notification • Icon on Website, 800 number, news media for notices/announcements, phone tree for check-in, preplanned meeting after disaster • Establish policy related to leave for affected employees

15. Resources Federal Emergency Management Agency http://www.fema.gov/ U.S. Department of Homeland Securityhttp://www.ready.gov/ Department of Health & Human Services (Pandemic Flu information)http://www.pandemicflu.gov/ American Red Crosshttp://redcross.org/ Disaster Recovery Journal http://www.drj.com/

16. Key considerations • Top points to remember • Know your risks • Identify key activities • Have a plan • Test the plan • Update the plan continuously • Utilize technology to become more “Disaster Resistant”