Page 5 of the DSE Business Continuity knowledge center, with source-backed guidance and practical next steps.
Preparation and recovery guidance that connects technology protection to real service continuity and tested restoration.
An FBI public service announcement says cybercriminals tamper with digital and physical QR codes to send victims to malicious sites that steal login and financial information, embed malware, or redirect payments. It advises checking the URL after scanning, looking for stickers over physical codes, and avoiding payment through sites reached by QR code.
Read the guide
MCL 29.19 requires Michigan K-12 schools to hold at least 5 fire, 2 tornado and 3 secured-building drills each school year, run one during lunch or recess, post each completed drill online within 30 school days, and send the drill schedule to the county emergency management coordinator by September 15.
Read the briefing
EPA’s Lead Renovation, Repair and Painting Rule covers paid work, including electrical work, that disturbs paint in housing and child-occupied facilities such as schools and child care centers built before 1978. It requires firm certification, certified renovators and lead-safe work practices, with exclusions for minor work below set paint-area limits.
Read the briefing
OSHA’s respirable crystalline silica standard for construction lets employers follow Table 1 controls or measure exposure. For handheld and stand-mounted drills, OSHA’s fact sheet describes a shroud with a vacuum dust collection system and a filter of 99 percent or better efficiency, and every covered employer needs a written exposure control plan.
Read the guide
NWS says no place outside is safe during thunderstorms, and an OSHA and NOAA fact sheet says employers should put a written lightning safety protocol for outdoor workers in their emergency action plan, covering warnings, safe shelters, response times and when to suspend and resume work. NWS says to stay sheltered 30 minutes after the last thunder.
Read the playbook
EPA recommends that businesses, governments and large purchasers use certified electronics recyclers for unwanted used electronics. The two accredited standards, R2 and e-Stewards, assess environmental, worker health and safety, and security practices and require destruction of all data on used electronics.
Read the guide
ADA.gov guidance says only dogs individually trained to do work or perform tasks for a person with a disability are service animals under titles II and III. When the service is not obvious, staff may ask only two questions, cannot demand ID cards or documentation, and may remove the dog only if it is out of control or not housebroken.
Read the guide
CISA’s De-escalation Action Guide gives non-security and security staff four steps for a potentially violent encounter: recognize warning signs, assess, de-escalate only if trained and safe, and report facts. If violence appears imminent, the guide says to call 9-1-1 and put safety first.
Read the playbook
The DoD CIO’s CMMC page says Phase II, scheduled for November 10, 2026, was suspended on July 13, 2026 pending review, while Phase I self-assessments stay in place: annual Level 1 checks of FAR 52.204-21’s 15 requirements and Level 2 self-assessments of NIST SP 800-171 Rev 2’s 110.
Read the briefing
HHS guidance says the HIPAA Security Rule’s risk analysis is a required, foundational step that must cover all e-PHI in every electronic medium, document threats, vulnerabilities, likelihood, impact and risk levels, and be repeated as technology, staff, ownership or incidents change.
Read the guide