Skip to content
Contact us

San Francisco's DPR3 Policy and Disaster Recovery Plan: Building Resilience Against Natural Disasters

Picture of William Tygart

San Francisco, a city renowned for its stunning landscapes and vibrant culture, is also vulnerable to a range of natural disasters, including earthquakes, floods, and wildfires. Recognizing this vulnerability, the city has developed a comprehensive Disaster Preparedness, Response, Recovery and Resilience (DPR3) Policy and Disaster Recovery Plan (DRP) to ensure its ability to withstand and recover from such events. This analysis examines the key components of these plans, analyzing their contribution to San Francisco's overall resilience.

DPR3 Policy: A Framework for IT Resilience

The DPR3 Policy, adopted in 2021, provides a comprehensive framework for all City departments to prepare for, respond to, and recover from disasters, both natural and human-caused 1. A critical element of this policy is its focus on the resilience of the city's IT systems, recognizing their crucial role in maintaining essential services during and after a disaster. The policy mandates that all departments develop, test, and maintain an IT-focused Continuity of Operations Plan (IT COOP), also known as an IT Contingency Plan 1. A key insight emphasized in the policy is the proactive nature of ensuring IT system resilience through prevention and protection, not just recovery 2. This proactive approach is a key aspect of the policy's effectiveness.

Key Components of the DPR3 Policy:

  • IT COOP Development: Each department must create an IT COOP that addresses the needs of critical system operations in the event of a disruption. This includes strategies for safeguarding and restoring data, protecting hardware, software, and facilities, and resuming critical business processes through high-availability and failover recovery strategies 1.
  • Roles and Responsibilities: The policy clearly defines roles and responsibilities for DPR3 implementation. Each department must designate an IT COOP/DR Lead or Disaster Preparedness Coordinator (DPC) liaison to oversee planning and execution 1. Department Heads are ultimately responsible for ensuring compliance with the policy 1.
  • Risk Assessment and Mitigation: Departments are required to identify and assess the resilience of their critical systems, adopting a National Institute of Standard and Technology (NIST) framework for their IT COOP 1. This involves analyzing potential risks and vulnerabilities and implementing preventive measures to minimize the impact of disasters.
  • Testing and Training: The DPR3 Policy emphasizes the importance of regular testing and training to ensure the effectiveness of the IT COOP. Departments must test their IT COOP at least annually and conduct more frequent and extensive testing for critical systems based on their complexity and prior test results 1. Training programs should focus on raising awareness of the COOP, DPR3 policies and procedures, and the execution of the IT COOP in response to an incident 1.
  • Plan Review and Updates: To maintain relevance and effectiveness, departments must review and update their IT COOP annually and their Disaster Recovery Plans (DRP) for each critical system bi-annually 1. This ensures that the plans adapt to evolving risks, technological advancements, and lessons learned from past events.

Disaster Recovery Plan (DRP): Ensuring Continuity of City Planning

While the DPR3 Policy focuses on IT resilience, San Francisco also has a Disaster Recovery Plan (DRP) that specifically addresses the Planning Commission's role in post-disaster recovery and rebuilding. This plan outlines the procedures for the "Discretionary Review Public" process, a special power of the Planning Commission that allows them to review and modify project applications outside the normal building permit process 3. This process is crucial in ensuring that post-disaster rebuilding aligns with the city's long-term planning goals and addresses the needs of the community.

Key Components of the DRP:

  • Discretionary Review: The DRP outlines the process for discretionary review, which allows the Planning Commission to intervene in project applications when necessary to protect the public interest 4. This ensures that rebuilding efforts consider factors beyond the minimum standards of the Planning Code, such as the City's General Plan and priority policies 5.
  • Public Input: The DRP emphasizes public participation in the review process. It requires applicants to provide clear descriptions of their projects, including their proximity to neighboring properties and any relevant covenants or deed restrictions 3. This allows the public to understand the potential impacts of proposed projects and provide feedback to the Planning Commission.
  • Commission Action: The DRP outlines the procedures for the Planning Commission's review and decision-making process. This includes presentations by project sponsors, consideration of public input, and the Commission's final action on the building permit 3. This structured process ensures transparency and accountability in post-disaster rebuilding decisions.

Relocation of Information Systems: A Critical Aspect of Disaster Recovery

The DPR3 Policy addresses the relocation of information systems as a critical component of disaster recovery. It requires departments to develop procedures for relocating information system operations to an alternate location in the event of a major disruption 1. This ensures the continuity of critical IT services and minimizes downtime.

While the DRP does not explicitly focus on information systems relocation, it indirectly supports this effort. The DRP's primary focus is on ensuring that post-disaster rebuilding aligns with city planning goals. This includes managing the rebuilding of physical infrastructure, which is essential for housing relocated information systems and ensuring the recovery of critical infrastructure, including IT systems.

Contributing to San Francisco's Resilience

The DPR3 Policy and DRP contribute significantly to San Francisco's resilience in the face of natural disasters by:

  • Ensuring Continuity of Essential Services: By prioritizing the resilience of IT systems, the DPR3 Policy ensures that critical services, such as emergency response, communication, and public information, remain operational during and after a disaster 2.
  • Facilitating Recovery and Rebuilding: The DRP provides a framework for managing post-disaster rebuilding, ensuring that new development aligns with the city's planning goals and addresses community needs 5.
  • Minimizing Contribution to Climate Change: The Safety & Resilience Element, which guides the DPR3 Policy, focuses on minimizing San Francisco's contribution to climate change through various policies and initiatives 6. This proactive approach to mitigating climate change is crucial for long-term resilience.
  • Promoting Public Participation in Resilience Planning: Both the DPR3 Policy and DRP emphasize public participation in disaster preparedness and recovery planning. This ensures that the plans reflect the needs and priorities of the community 5.
  • Promoting Equity: A key aspect of San Francisco's resilience efforts is the explicit aim to achieve racial and social equity in disaster preparedness and response 7. This focus on equity is crucial for ensuring that all communities are adequately protected and supported during and after disasters.
  • Learning from Past Disasters: San Francisco has a long history of learning from past disasters. The DPR3 Policy and DRP incorporate lessons learned from previous events, such as the 1906 earthquake and subsequent fires, and the 1989 Loma Prieta earthquake, to improve the city's preparedness and response capabilities 8.

Examples of Implementation and Lessons Learned

San Francisco has implemented its DPR3 Policy and DRP in response to various past disasters. For example, the city's response to the 1989 Loma Prieta earthquake led to significant improvements in its emergency response procedures and building codes 9. The city also learned valuable lessons from the devastating 1906 earthquake and the subsequent fires that ravaged the city. This experience led to the establishment of a more reliable water supply system and improved abilities to treat the injured and maintain order during a crisis 8.

Comparison to Other Major Cities

While a detailed comparison is beyond the scope of this analysis, San Francisco's DPR3 Policy and DRP share similarities with disaster recovery plans in other major cities. Many cities prioritize IT resilience, public participation, and learning from past events 10. However, San Francisco's unique geographic location and vulnerability to specific hazards, such as earthquakes, necessitate a tailored approach to disaster preparedness and recovery.

For instance, the Cross Dependency Initiative (XDI) provides independent climate risk analyses and public datasets to help governments make informed decisions on disaster risks and strategies 11. Based on XDI data, European regions most at risk from climate events face increasing threats from flooding, sea level rise, and fire. Cities like Milan, Venice, Antwerp, Bologna, Hanover, Munich, and Nuremberg are among the most vulnerable in Europe 11. This highlights the global nature of disaster risk and the need for cities to adapt their resilience strategies to their specific contexts.

International Comparison and Frameworks

The MCR2030 initiative provides a valuable framework for cities to assess their disaster resilience and develop improvement plans 12. This initiative, led by the United Nations Office for Disaster Risk Reduction (UNDRR), helps cities understand their disaster risk, improve their disaster risk reduction strategies, and build resilience. By participating in MCR2030, cities can learn from each other and access resources and support to strengthen their disaster preparedness and response capabilities.

Recommendations for Improvement

While San Francisco's DPR3 Policy and DRP provide a strong foundation for disaster resilience, there are always opportunities for improvement. Some recommendations include:

  • Enhanced Coordination: Strengthen coordination between city departments and external partners, such as utility companies and community organizations, to ensure a unified and effective response to disasters 1.
  • Increased Public Awareness: Develop public awareness campaigns to educate residents about the DPR3 Policy, DRP, and their roles in disaster preparedness and recovery 8.
  • Climate Change Adaptation: Integrate climate change considerations into the DPR3 Policy and DRP to address the increasing frequency and intensity of climate-related hazards, such as sea level rise and extreme heat 8.
  • Vulnerable Communities: Prioritize the needs of vulnerable communities in disaster preparedness and recovery planning, ensuring equitable access to resources and support 7.
  • Building Codes and Retrofitting: Incorporate the recommendations from the Post-earthquake Repair and Retrofit Requirements (ATC-52-4 Report) to improve building codes and retrofitting practices 13. While this report focuses on earthquakes, its emphasis on building codes and retrofitting can inform broader resilience strategies by highlighting the importance of these measures in mitigating the impact of various disasters.

Conclusion

San Francisco's DPR3 Policy and DRP demonstrate the city's commitment to disaster resilience. By prioritizing IT resilience, physical infrastructure planning, public participation, and continuous improvement, these plans provide a strong framework for ensuring the city's ability to withstand and recover from natural disasters. The interconnectedness of these plans is evident in their combined focus on these key elements, contributing to a holistic approach to disaster resilience.

The recommendations for improvement further emphasize this holistic approach. Enhancing coordination, increasing public awareness, adapting to climate change, addressing the needs of vulnerable communities, and improving building codes and retrofitting practices are all interconnected aspects of creating a more equitable and resilient city. By continuously striving to improve these areas, San Francisco can strengthen its ability to face future challenges and ensure the safety and well-being of its residents.

Works cited

  1. Citywide IT focused- Disaster Preparedness, Response, Recovery, and Resilience Policy - City and County of San Francisco, accessed January 11, 2025, https://www.sf.gov/sites/default/files/2021-05/Disaster%20Preparedness%20Response%20Recovery%20and%20Resiliency%20Policy_Approved%20FINAL%20Version.pdf
  2. Disaster preparedness, response, recovery, and resiliency policy (DPR3) | San Francisco, accessed January 11, 2025, https://www.sf.gov/resource/2021/disaster-preparedness-response-recovery-and-resiliency-policy-dpr3
  3. sfplanning.org, accessed January 11, 2025, https://sfplanning.org/sites/default/files/forms/DRP_InfoPacket.pdf
  4. Discretionary Review Public (DRP) - SF Planning, accessed January 11, 2025, https://sfplanning.org/resource/drp-application
  5. Discretionary Review - SF Planning, accessed January 11, 2025, https://sfplanning.org/resource/discretionary-review
  6. Safety and Resilience Element - SF Planning, accessed January 11, 2025, https://sfplanning.org/project/safety-and-resilience-element
  7. Safety & Resilience Element - San Francisco General Plan, accessed January 11, 2025, https://generalplan.sfplanning.org/I8_Safety_and_Resilience.htm
  8. PUBLIC REVIEW DRAFT JULY 29 2024 - Office of Resilience and Capital Planning, accessed January 11, 2025, https://onesanfrancisco.org/sites/default/files/inline-files/2025_HCR_PublicReviewDraft_0.pdf
  9. 1906 San Francisco Earthquake Facts & Lessons - Blog - Jumpstart Insurance, accessed January 11, 2025, https://blog.jumpstartinsurance.com/1906-san-francisco-earthquake-lessons-from-history/
  10. Government IT Disaster Recovery Plan for Municipal & County Governments - GovPilot, accessed January 11, 2025, https://www.govpilot.com/blog/government-it-disaster-recovery
  11. Why smart cities need pre-disaster recovery plans - Urbequity, accessed January 11, 2025, https://urbequity.com/en/why-smart-cities-need-pre-disaster-recovery-plans/
  12. Making Cities Resilient 2030 - UNDRR, accessed January 11, 2025, https://mcr2030.undrr.org/
  13. Here Today—Here Tomorrow: The Road to Earthquake Resilience in San Francisco, accessed January 11, 2025, https://sfgov.org/sfc/sites/default/files/ESIP/FileCenter/Documents/9757-atc522.pdf