Page 3 of the DSE Business Continuity knowledge center, with source-backed guidance and practical next steps.
Preparation and recovery guidance that connects technology protection to real service continuity and tested restoration.
The FTC’s rule on government and business impersonation, in effect since April 2024, lets the agency seek money back for consumers and civil penalties from impersonators. In September 2026 the FTC asked whether to require platforms to keep ad tools from furthering impersonation scams, after 2025 reports of nearly $3.5 billion in imposter losses.
Read the explainer
FMCSA says companies operating commercial vehicles in interstate commerce, including vehicles rated or weighing 10,001 pounds or more, must register and hold a USDOT number, and it lists Michigan among states that require one for intrastate registrants. Every registrant must update its record every two years or face deactivation and penalties.
Read the guide
CPSC says more than 100 of the over 200 yearly U.S. deaths from non-fire carbon monoxide poisoning tied to consumer products involve portable generators. It says to run generators outdoors only, at least 20 feet from buildings with exhaust directed away from openings, choose models with CO shut-off, and keep battery-backed CO alarms on every level.
Read the checklist
OSHA’s construction electrical standard requires ground-fault circuit interrupters on 120-volt, single-phase, 15- and 20-ampere receptacles that are not part of permanent wiring, or an assured equipment grounding conductor program with written procedures, a competent person, daily inspections, periodic tests and records.
Read the checklist
Companies with more than 10 employees at any time last year must keep OSHA injury and illness records unless partially exempt by industry, and must certify and post the 300A summary from February 1 to April 30. Covered establishments also file 300A data electronically by March 2, and all employers must report fatalities and severe injuries.
Read the guide
Since January 13, 2025, OSHA’s construction PPE standard, 29 CFR 1926.95, says employers must ensure all personal protective equipment is of safe design and selected to properly fit each affected employee. The same section requires employers to provide most PPE at no cost and to pay for replacements unless the employee lost or intentionally damaged it.
Read the explainer
OSHA’s bulletin on head protection explains Type I and Type II impact protection and Class G, E and C electrical ratings, suggests Type II with chin straps for construction and chin straps for work at height, says vented helmets cannot be used for electrical work, and says to retire any helmet after an impact even without visible damage.
Read the guide
Nacha’s fraud monitoring rules took effect for ODFIs and high-volume parties on March 20, 2026 and for all other non-consumer Originators, third-party senders and service providers on June 19, 2026, with June 22 the practical date. Each must run risk-based procedures to spot unauthorized or false-pretenses entries and review them at least annually.
Read the explainer
The IRS warns of email scams in which a spoofed executive asks payroll or HR staff for every employee’s Form W-2. Businesses that lose W-2 data should email dataloss@irs.gov, contact the Federation of Tax Administrators and file with IC3, and businesses that only receive the email should forward it with headers to phishing@irs.gov.
Read the playbook
Microsoft’s VBScript deprecation plan makes VBScript a feature on demand that is preinstalled and on by default in Windows 11 version 24H2, turns it off by default around 2027, and later removes it from Windows. Windows Server 2025 also preinstalls VBScript as a feature on demand before its removal in a later release.
Read the guide