EPA 550-F-99-011 June 1999 Addressing Year 2000 Issues in Small and Medium-Sized Facilities that Handle Chemicals C P DA America n Association I%P%PJFm The G NACD ------- ------- Addressing Year 2000 Issues in Small and Medium-Sized Facilities that Handle Chemicals Several chemical industry trade associations1 representing manufacturers, formulators, distributors and retailers - in partnership with the U.S. Chemical Safety and Hazard Investigation Board (CSB) and the U.S. Environmental Protection Agency (EPA) - are issuing this document as part of an ongoing effort to assess and address potential Y2K disruptions in facility operations, particularly safety- related control systems and equipment. This document is offered as a public service, and it is oriented toward owners and operators of small and medium-sized entities. The statements in this document are intended solely as guidelines. Site- specific application of these guidelines may vary depending on process activities and unique facility characteristics. Source material used to develop this document was produced by the United Kingdom's Health and Safety Executive, the U.S. CSB, EPA and SOCMA. 'Participating organizations: the American Crop Protection Association, the Chemical Manufacturers Association, the Chemical Producers and Distributors Association, the Chemical Specialties Manufacturers Association, the International Sanitary Supply Association, the National Association of Chemical Distributors, RISE (Responsible Industry for a Sound Environment), and the Synthetic Organic Chemical Manufacturers Association. Introduction Many systems and pieces of equipment used to sustain process safety in chemical facilities rely on the progression of dates from year to year (for example, 1998 to 1999) to function properly. This includes not only mainframe and personal computers, but also any equipment that contains a microchip such as heating, lighting, safety, and telecommunications systems. Many of these systems "read" only the last two digits of the year -1998 becomes "98," 1999 becomes "99." As a result, they may be vulnerable to problems when the year 2000 (Y2K) begins, because they cannot recognize that "00" means 2000, not 1900. This can cause problems at any level of the system - the clock, the Basic Input/Output System (BIOS), the operating system, the application software, or even the data itself. Y2K failures external to your facility, such as disruptions in electricity, water and transportation, also may affect your facility's operation. This document describes a five-step process for protecting the continuity of the process safety systems in your facility from potential Y2K problems. Additionally, the appendices contain information to help you throughout the process. This document includes the following: A checklist of typical in-plant systems potentially vulnerable to Y2K disruptions to help you determine where to focus your efforts (Appendix A); Guidelines for assessing the effect on safety and deciding priorities (Appendix B), ------- Sources for obtaining Y2K resource material (Appendix C); A list of specific key dates that may cause disruptions (Appendix D); and A guide for communicating your activities to your employees and your community (Appendix E). Step 1 - Assessment The first step in the process is to conduct an assessment to gather the information you need to ensure that you can protect safety systems and equipment. Begin by conducting a thorough inventory to identify all systems, computerized equipment, and devices with embedded computer chips that may be vulnerable to date-change failure. This includes systems that import and/or export data and should take into account systems with which they exchange data. Appendix A has a checklist that includes systems that may have embedded chips or are susceptible to a Y2K disruption. Also, Appendix B has a checklist (Figure 2) you can use to help you determine if a system or device is date- dependent. For each item, define the extent of work necessary for Y2K compliance. In some cases, this can be accomplished by referring to user manuals and other documentation provided with the equipment. In other cases, it may involve contacting suppliers to obtain needed information. Determine whether or not the supplier believes the system, as supplied, is "year 2000 compliant," - that is, able to accommodate the transition to Y2K and correctly continue date-based calculations. It is important to obtain satisfactory written assurance of compliance from the supplier whenever possible. Such assurance may be sufficient for some systems that are being used as supplied and that have a low safety risk. For systems and equipment that are not Y2K compliant, manufacturers or suppliers may be able to provide assistance with making the required changes. In some cases, however, you may be unable to obtain this kind of help. Hardware or software for some systems and equipment may have been changed or adapted for use in your facility, and these changes could affect the ability of the system to correctly make date changes and date- based calculations. You may be using equipment and software that no longer is supported by a supplier or by the original manufacturer. The supplier may be unable to provide immediate assistance because of current workload; ownership of the business may have changed hands; or the manufacturers or suppliers may have gone out of business entirely. In these circumstances, your options for dealing with systems and equipment will depend on the amount of information available, the other resources you may have to make required changes, and the potential difficulty of replacing the system or piece of equipment in question. Once you have identified all safety-related systems and equipment that may be vulnerable to date-change failure and defined the necessary work to make them Y2K compliant, move on to assessing the effect of each item on safety in your facility and setting priorities for making necessary corrections (see Appendix B). Step 2 - Correction The second step in the process is to use the priorities set during the assessment part of ------- the process, decide whether to repair, replace and retire, or work around the vulnerable safety-related systems and equipment that you inventoried. Numerous diagnostic tools are available to assist you with these decisions. Many can be accessed on the Internet. Appendix C contains information about these and other resources. In some cases, selecting a remedial approach will be straightforward. For example, installing a readily available software patch might be all that is necessary to solve a specific problem. These decisions can be much more difficult, however, if repair or replacement is expensive and the likelihood of failure cannot be clearly assessed. When selecting a remedial option, you may want to employ an approach similar to that used in prioritizing your inventory. The exception would be adding cost of remediation as an additional consideration. This includes weighing the following: The likelihood of failure The potential impact of failure - Will failure seriously hinder emergency response? Will it hinder day-to-day operations? Are redundant external resources available for response in the event of internal resource failure? The cost of remedial action -Consider both money and time required Simple scoring methods (scales of 1 to 3, or 1 to 5) may be helpful in allocating limited resources. High-consequence, high- likelihood events deserve more attention and resources than high-consequence, low- likelihood events. This type of scoring can help to determine whether the best option is to repair, replace, or work around the particular system or piece of equipment. Repair - For many systems (databases, custom computer applications), repair will require upgrading system code as well as data. For embedded Y2K problems, the repair may be as simple as replacing a chip set or circuit board. In some cases, however, due to cost, the availability of parts or the difficulty with accessing equipment, repair may not be an option. In all cases, you should mark the equipment for its Y2K status. Replace - Systems and equipment of only marginal benefit should be retired if they are not Y2K compliant. Exercise caution when choosing to retire systems and equipment. Plan to retire them well before December 31, 1999. The absence of certain systems or equipment may demonstrate that they are more important than your assessment suggested. Taking them out of service early leaves time to reverse that decision and take whatever steps are possible to make them Y2K compliant. Step 3 - Testing/Validation The third step in the process is to test the ability of repaired and replacement systems, including interactive systems, to function using Y2K rollover conditions in the real environment or in a realistic simulation. The risks of system failure should be assessed before undertaking tests. Testing schedules should include allowances for dealing with such failures and any resulting additional remediation work and re-testing in order to minimize the impact of any failure. Conducting appropriate testing may require close coordination between personnel from different departments. Because of the importance of meeting deadlines for ------- correcting priority systems and equipment, testing could cause production and other operational delays, and staff from all levels and disciplines already may be under pressure to minimize downtime. Before you test, alert local emergency officials, and make sure your employees and community are prepared for any possible failures. Plan to conduct as much of the remediation and testing as possible in a non-operating environment. However, at some point, it will be necessary to put each safety-related system through a full check in its normal operating environment. These checks should be carefully controlled and monitored, and independent verification of tests may be appropriate in some cases. To encourage Y2K testing, EPA has initiated an enforcement policy designed to encourage prompt testing of computer-related equipment to ensure that environmental compliance will not be impaired by the Y2K computer problem. Following this policy, EPA intends to waive 100 percent of civil penalties and recommend against criminal prosecution for environmental violations caused by tests designed to identify and eliminate the Y2K-related malfunctions. This policy is limited and subject to certain conditions. The Web site for the policy is referenced in Appendix C. Step 4 - Contingency Plan The fourth step in the process is to develop contingency plans to manage unforeseen problems and emergencies involving each safety-related system and equipment. Among other things, these plans should address how systems would be manually operated or shut down until problems are resolved. Development of contingency plans should be undertaken simultaneously with the correction part of this process. Contingency plans should be revised, as needed, based on the results of the testing/validation part of the process. These plans should include consideration of staff requirements, particularly additional personnel that may be needed on-site if automated systems must be manually operated. For the contingency plan to be workable, the people who are expected to implement the contingency plan need to be involved in its development. Efforts should begin with reviewing existing disaster and business continuity plans. Establish communications with suppliers. A good plan must consider Y2K failures of internal systems and with suppliers, customers, service providers, business partners and infrastructure service providers. For example, some scenarios to consider are the following: Key Source Raw Material Provider Cannot Deliver Materials Transportation Disruptions Equipment Failure Telecommunications Disruptions Power Failure Water and Sewer Service Interruptions Application Failure You may need to determine which employees need to be on-site on January 1, 2000. Your contingency plan also should address failure of backup equipment and systems that also could be affected by Y2K problems. Consider the possibility that Y2K disruptions could potentially prevent police, fire and mutual aid assistance from arriving promptly or at all. Coordinate with your local emergency planning committee to ensure emergency response procedures and 4 ------- resources are adequate to cover possible Y2K consequences. In some instances, additional staff training may be necessary to ensure that all relevant personnel are aware of the details of contingency plans and be able to implement them effectively. Once your Y2K contingency plan is developed, your facility needs to test it. When first tested, most plans have a major flaw. Correct problems identified through testing, to ensure that your plan will be successful. Other useful information regarding contingency planning can be obtained from the Chemicals Information Technology Association Y2K Contingency Planning Guidelines available on the Chemical Manufacturers Association Web site (see Appendix C). Remember, by finding failures earlier in 1999, you are more likely to get the help you need from vendors, local government, and utilities than if you wait until crucial dages (Appendix D) when demand for support and help may be much greater. an emergency response practice drill. See Appendix E for suggestions about activities for specific audiences and communications. Step 5 - Communications The fifth step in the process is to communicate your facility's Y2K readiness or your activities to prepare for the Y2K event. Audiences for such information include your facility's employees, suppliers, vendors, customers, emergency response authorities, local government, and community organizations. Examples of this outreach may include facility tours, community meetings, Y2K readiness disclosures, communication with the Local Emergency Planning Committee (LEPC) or ------- ------- Appendix A CHECKLIST OF SYSTEMS AND EQUIPMENT POTENTIALLY VULNERABLE TO Y2K DISRUPTIONS IN A HYPOTHETICAL CHEMICAL PLANT Component Worst-case Failure Effects Embedded Microchips Controllers Weighers Reactor Charging Temperature Pressure Cleaning Stripper Dryer Centrifuge Storage Video Cameras Still Cameras Alarm Systems Clocks Elevators Phones Answering Machines Heating/Ventilation/Air Conditioning Fire Suppressions Systems Inaccurate readings resulting in poor conversion Wrong amounts reacting-poor conversion Poor conversion-explosion Poor conversion-explosion Inaccurate timing-process interruption-release Contamination of product Water contamination of product Poor separation Overflow release Failure to work Failure to work Failure to work Show incorrect time Failure to work Failure to work Failure to work Failure to work Failure to work Software Mainframe, network, desktop, & communication computers Office computers Purchasing Inventory Distribution Sales Accounting Personnel Process Computers Control Transportation Quality Control Data-generated errors may result in inaccurate data or system failures No supplies Excess supplies Will issue incorrect orders Will not be able to fill orders Will incorrectly compute Will not be correctly maintained Explosion release Buildup of stock Poor quality ------- Appendix A CHECKLIST OF SYSTEMS AND EQUIPMENT POTENTIALLY VULNERABLE TO Y2K DISRUPTIONS IN A HYPOTHETICAL CHEMICAL PLANT (Continued) Component Worst-case Failure Effects Supply Chain Utilities Electricity Water Waste Communications Raw material suppliers Primary feedstock Initiator-catalyst Service providers Insurance Hospitals Vending Customers Process shutdown Process shutdown Waste buildup beyond capabilities No communication Process shutdown Process shutdown Extra expenses No medical care No food No incoming funds Video cameras Security lights Access Parking Building Room Fire Intrusion Warning Process Alarms Failure to work Failure to work Failure to work Failure to work Failure to work Failure to work Failure to work Failure to work Failure to work Note: The information given in this table is provided as an example o>nly. Checklists like this should be developed on an individual, plant-specific basis using criteria and knowledge that are unique to the plant. \ ------- Appendix B ASSESSING SYSTEM VULNERABILITY Assessing Relevance to Safety Safety is the overriding consideration for assessing your control systems for possible year 2000 problems. This appendix provides a method for assessing whether or not your systems are (a) safety and (b) date-dependent. The following aspects should be considered when assessing the safety of a control system: (a) Its contribution to safety, i.e., the importance of the system to maintaining safety (which is a function of how control systems are arranged to provide the required reduction in risk); and (b) The consequences of its failure (the effects of a hazardous event). The assessment sequence in Figure 1 (next page) is one of several methods for rating, on a scale of 0-3 (3 being the highest level), the contribution of a particular control system to the safety of your plant or process. Once you have determined the "contribution" of a system, estimate the "consequences" of its failure using the following'rating scale: (a) no consequences = 0 (b) minor accident/reversible injury = 1 (c) irreversible injury/loss of one life = 2 (d) loss of many lives = 3 Any system with a "consequence" rating of zero (0), should not be considered further. Assess the importance of each remaining system to safety by adding its "contribution" and "consequence" ratings. Its safety rating will be expressed on a scale of 2-6. Assessing Date Dependency Once the safety importance has been established, determine the date dependence of the system. Your employees may be the best source for obtaining this information. The date-dependence checklist in Figure 2 (page 3) is designed to assist you. Any YES answer indicates that the system has a potential date dependence that will require further investigation. Even if all answers recorded are NO, it is strongly recommended that you confirm, through further investigation, that systems with a high safety importance are not date-dependent. ------- Some systems, particularly "embedded" systems, may have date dependence that is not obvious. This "hidden" date dependence may affect other functions of the system. For example, printer output usually is date-stamped, so the presence of a printing option may introduce date dependency even if the printing option is not used. ------- Figure 1: Y2K Assessment Start Consider the fellow ing for each programmable system Is there one or more additional protection system(s)for ensuring safety? Does the programmable system have j control iinctions? Does the programmable system provide signals or data to any safety-related programmable system, or are data from it used for scheduling processes affecting safety. e.g., proof testing or rrsintenance, etc.? Increased likelihood of a demand on the non- programmable back-up system Possible reduction in level of availability protection : 2 Possibility of common cause feilure resulting in loss of both control and protection systems 3 Ifes Yes Ho Is there an additional non-programmable protection system? Ho __ __ Does the programmable system act as a protection system or back-up to a programmable-based control system? Ho Failure Hi ill not affect safety. Cb/iiibuMon: 0 Do not take consideration Possibility of date corruption or failure to provide signals or data : 2 Notes 1. This method is intended only as an aid to developing the priority in which systems will be subjected to farther investigation. It assumes that the risk reduction is spread evenly across all the safety-related systems. 2. The exception to the assumption in #1 is a back-up system that is capable of providing the entire risk reduction in its own right. 3. In cases where the actual risk reduction is known, a more refined prioritization may be more appropriate. ------- Figure 2: Date Dependence Checklist Date Dependence Does the system: Display or print a date or time? Implement a time control sequence? Perform operations on a timed basis? Produce time reports (hourly/daily/weekly)? Calculate time-based totals, averages, rates, or trends? Time stamp its data, or use time-stamped data? Maintain historical records? Display or print data by time sequence? Generate alerts at predetermined intervals (such as when set or maximum safe running time has been exceeded)? Request the date when started/powered up? Know which day of the week it is by date? Send date and time information to other systems? Connect to or contain a time transmission receiver? Connect to a network providing access to the date? Did a visiting service engineer set its date? Require adjustment to allow for Daylight-saving Time? Can a command or function allow the date to be set? Navigate or position itself automatically (such as receivers for Global Positioning System satellites)? Remember user-defined data or settings even after being turned off for a long period? Need to be connected to a computer-based terminal for maintenance? Does system have a lithium battery? Yes No ------- Appendix C INFORMATION RESOURCES The following are some resources to help you get started in addressing the potential Y2K problem in your facility. American Petroleum Institute The site provides industry activities, company status reports, Y2K database, and technical links. http://www.api.org/ecit/y2k/index.html Case Study of One Chemical Manufacturer's Approach to Y2K Problem http://www.dell.com/smallbiz/y2k/studies.htmlfmerisol Chemical Manufacturers Association (CMA) CMA has member Y2K survey results and Y2K Contingency Planning Guidelines and practices available. Scroll down to Y2K category, http://www.cmahq.com/cmawebsite.nsf/pages/newsinfo Electronic Information Clearing House on Chemical Emergencies. This site is provided by the Organization for Economic Cooperation and Development (OECD) Working Group on Chemical Accidents. It has Y2K tools and links to help industry including an OECD Manual, The Year 2000 Problem: Risks and Solutions. This site is aimed at small and medium-size enterprises. It includes a system for routing inquiries and information about Y2K and hazardous installations to contacts in government and industry who have had some experience in dealing with the problem, http://www.oecd.org/ehs/y2k/index.htm Electronic Industries Alliance This trade association representing the high-tech industry has a Web site that provides a knowledge base and information center. It provides information sharing with its members, the government and the public. http ://www.eia.org/y2k/default.htm Embedded Industrial Control Systems and Y2K http://www.compinfo.co.uk/y2k/scada.htm Fire Alarm Systems and The Year 2000 Problem This site provides reference system for assessing whether fire alarm equipment may have a Y2K compatibility problem, http://www.fireline.com/firealarmsystems/y2000firealarmsystems.html Health & Safety Executive (UK) The British HSE Web site offers several reports on the Y2K problem: Health and Safety and the Y2K Problem- Guidance on Year 2000 Issues As They Affect Safety-Related Control Systems and Contingency Planning for a Safe Year 2000 and Year 2000 Risk Assessment: Will You Come Through the Millennium Safely? http://www.open.gov.uk/hse/dst/2000indx.htm Information Technology Association of America The ITAA is a major trade association for the Y2000 software conversion. It's Year 2000 Home Page contains useful resources, publications, and guides, http://www.itaa.org/year2000/index.htm Institution of Electrical Engineers (U.K.) IEE has a report addressing embedded chips. The Millennium Problem in Embedded Systems on its Web site. http ://www.iee.org.uk/2000risk/ ------- Manufacturing Marketplace Has a Year 2000 page with Q&As, news about manufacturing and Y2K, reports on Y2K issues such as contingency planning, supply chain, etc., and Y2K/industry issues chat transcripts. http://mvw.manufacturing.net/y2k/ Mary Kay O'Connor Process Safety Center The site has links to compliance status of some manufacturers' control systems. Click on Y2K information. http://process-safety.tamu.edu Mitre Corporation The site provides information on Y2K Certification, Compliance, Solutions, Testing and Evaluations, Contingency Plans, Cost Estimation, Tools and Services, http://www.mitre.org/technology/y2k National Fire Data Center A basic system check that can help you determine if your organization's computer system is Y2K compliant is available on this Web site, http://www.usfa.fema.gov/y2k/y2kcom.htm National Institute of Standards and Technology (NIST) The site has links to free software tests, self-help tools and product compliance status databases for use in Y2Kassessment, testing, contingency planning and remediation. Information is provided for smaller manufacturers through the Manufacturing Extension partnership, a nationwide network of centers providing technical and business assistance to smaller manufacturers. Small manufacturing firms can call 1-800-MEP-4MFG. http://www.nist.gov/y2k/ President's Council on Year 2000 Conversion This site has a list of computer manufacturers' Y2K sites. http://www.Y2k.gov/java/product_compIiance.html National Bulletin Board for Year2000 Provides tools for analysis, conversion, and testing for Y2k problems, http://it2000.com/solutions/index.html PC Test Results for Y2K Problems http://wwv.hqisec.army.mil/y2kweb/y2kresults.html http://mvw.nim.com.au/year2000/ye02001.htnrfye02004 Synthetic Organic Chemical Manufacturers Association (SOCMA) The 1999 Chemical Industry Y2K Readiness Survey, U.S. Senate testimony, and Y2K resources for the chemical industry, including this guide, are available, http://www.socma.com/y2k.html Tava Technologies Plant Y2K: A White Paper that Discusses the Significance of the Effect of the Millennium, Bug (Y2K) on Process Control, Factory Automation & Embedded Systems in Manufacturing Companies. http://www.tavatech.com/files/TA VA3_0.pdf U.S. Chemical Safety and Hazard Investigation Board (CSB) The CSB has sponsored a conference and report on the Y2K problem and the potential of accidental chemical releases. The site includes the full text of the report Year 2000 Issues; Technology Problems and Industrial Chemical Safety as well as useful chemical safety Y2K links, http://www.chemsafety.gov/y2k U.S. Environmental Protection Agency (EPA) Provides information on EPA's efforts to address the Year 2000 problem for Environmental Y2K Sectors. Included is Y2K guidance for wastewater systems (including a checklist of basic systems) and a flyer on waste management and the Y2K problem, http://www.epa.gov/year2000/ ------- EPA's Y2K Testing Enforcement Policy http://es.epa.gov/oeca/eptdd/ocy2k.html EPA's Office of Solid Waste and Emergency Response Y2K information http ://clu-in.org/y2k.htm EPA's Chemical Emergency Preparedness and Prevention Office (CEPPO) has Chemical Emergency Y2K alert and updated links, http://www.epa.gov/swercepp/y2k.htm U.S. General Accounting OfficeGuide: Year 2000 Computing Crisis: Business Continuity and Contingency Planning has general principles for use by businesses as well as government agencies. http://www.gao.gov/special.pubs/bcpguide.pdf U.S. National Institute of Occupational Safety and Health (N1OSH)NIOSH has Y2K case studies, a web forum, vendor list, and an equipment manufacturer directory, http://www.cdc.gov/niosh/y2k/y2k-hmpg.html U.S. Occupational Safety and Health Administration (OSHA) The OSHA has resources and links for addressing the Y2K Impact on Safety and Health. http ://www.osha-slc.go v/html/oshay2kpage.html U.S. Small Business Administration (SBA) This Web site offers information specific to helping small businesses address the Y2K problem. It provides a list of questions to help identify date-sensitive equipment. SBA also has an extensive list of links to major corporations that post their Y2K status online. http://www.sba.gov/y2k/ Hotline: 1-800-U-ASK-SBA (1-800-827-5722) Year 2000 The site has a list of Year 2000 vendors and consultants. http ://www.year2000.com Y2K Freeware and Shareware http://www.aphis.usda.gov/y2k/wares.html Year 2000 Embedded Systems Vendors, Associations, and Manufacturers http://ourworld.compuserve.com/homepages/roleigh_martin/y2k_com.htm All URL address were accurate and active as of 6/24/99. ------- ------- Appendix D IMPORTANT DATES TO CHECK FOR Y2K DISRUPTIONS Date 08/21/1999 09/09/1999 12/31/1999 01/01/2000 01/02/2000 01/03/2000 01/10/2000 02/28/2000 02/29/2000 02/30/2000 03/01/2000 10/10/2000 12/31/2000 01/01/2001 Reason fop Concern Global Positioning system date rollover may affect military, transportation, Geographic Information System, and Automatic Vehicle Locator. Programmers use 9/9/99 as an end of file or infinity. (Ninth day of the ninth month of 99th year). End-of-year baseline (to be used in rollover scenario). Date rollover. First 24-hour look back period. First work day. First date requiring full use of seven digits. Date prior to Leap Year (to be used in rollover scenarios). Leap Year 2000. Invalid date. Test to ensure that Leap Year logic is functioning. First valid date after Leap Year. First date requiring full use of eight digits. Some systems using Julian dates may not recognize the 366th day of the Leap Year. First date in 2001 . Check rollover functions. ------- ------- Appendix E Communicating Your Facility's Y2K Activities One of the most important ways that your facility can maintain a positive image in the eyes of your local community, government, and customers is to communicate what your plant is doing, or has done, to prepare for the Year 2000 transition. The following is a brief list of suggested audiences and methods for communicating your Y2K activities: Employees - Employee communication and involvement is an important component of a facility communications program. It also is a good first step toward educating the local community about your plant's Y2K safety procedures because most employees live in the local community. Some suggested employee activities are the following: Roundtables with the plant manager Emergency planning training programs In-house newsletters Display Y2K readiness disclosure in common areas Reviewing Y2K contingency plans with employees at staff meetings Distribute Y2K information to employees Conduct lunch hour meetings Include employees in development of contingency plan Local Community - Communicating that your facility is Y2K compliant, or working to become Y2K compliant, is important for maintaining public trust. You can communicateY2K activities in many ways, including the following suggestions: Join local groups (Chamber of Commerce, Local Emergency Planning Committee (LEPC), City Public Works Board, neighborhood associations, etc.) One-on-one community meetings (door- to-door announcements/meetings) Conduct neighborhood meetings Conduct facility tours Visit local schools Attend town meetings Write public service announcements for local media Develop and disseminate plant informatio sheets that include Y2K activities Local Emergency Resvonders - Once you have developed a Y2K contingency plan, you should distribute it, along with any other emergency response plans, to the following groups and/or agencies: Department of Environmental Management County sheriff's department Local fire department/HAZMAT Team LEPC Local hospitals Local police department Regional or local civil defense organization Facility emergency team ------- You also should coordinate meetings and events with the local fire department and/or HAZMAT team to review all procedures and on site chemicals. Conducting a Y2K emergency response drill with local emergency responders will test your contingency plan and prepare all those involved. Customers and Vendors - Letting your customers and suppliers know that you are actively preparing your facility for the Y2K conversion is an important business activity to ensure customer confidence and vendor rapport. The following are ways communicate with this important group: Put a "Y2K Compliant" stamp on invoices and orders Have sales force state Y2K readiness in calls, meetings and customer service activities Distribute a Y2K disclosure statement Place a "Y2K Compliant" line on company advertisements Telephone calls The Y2K Disclosure Statement Once your company is Y2K compliant, perhaps the most effective way to communicate this status is to prepare a Y2K disclosure statement. This document must be titled as a "Y2K Disclosure Statement" to avoid potential legal liability. A sample Y2K disclosure statement follows: XYZ Chemicals Y2K Disclosure Statement Month/Date, 1999 Dear Customers and Suppliers: As a trusted supplier of chemicals/services, this disclosure describes XYZ Chemical's Y2K status to inform you of our preparedness as defined by the Year 2000 Information and Readiness Disclosure Act (15 USC 1 Note, PL 105-271). We have evaluated all of our machinery and equipment and have determined that there do not appear to be any issues that may affect our operations before, during or after the Year 2000. We have contacted and are actively dealing with all of our computer hardware and software vendors to continue our commitment of quality and service beyond the Year 2000. When appropriate and important, efforts are being (have been) made to determine if other relevant third party vendors, suppliers and service providers beyond XYZ's control, also are actively engaged in achieving Y2K compliance in their products, services and general corporate viability, whichever may apply. I hope this disclosure satisfies any concerns you have regarding XYZ Chemical's Y2K readiness. If you have any questions, please call me at (000) 555-1234. Sincerely, John Doe Title ------- |