Government COOP: Essential Functions, Activation, and Devolution

A government Continuity of Operations plan, known in federal shorthand as a COOP plan, is the written playbook a public agency follows to keep its most important work running when a disaster, cyberattack, pandemic, or loss of leadership shuts down normal operations. At the federal level, Presidential Policy Directive 40 (PPD-40) makes maintaining a continuity capability mandatory for every executive branch department and agency, and FEMA publishes the directives that spell out what those plans must contain.¹ The plan identifies which functions absolutely cannot stop, who takes charge if senior officials are unavailable, where staff will work if the primary building is unusable, and how the agency will communicate, protect its records, and eventually return to normal.

Who Must Have a COOP Plan

PPD-40 establishes it as U.S. policy to maintain a comprehensive continuity capability through Continuity of Operations (COOP), Continuity of Government (COG), and Enduring Constitutional Government (ECG) programs. It directs the Secretary of Homeland Security, acting through the FEMA Administrator, to coordinate continuity across the executive branch, conduct biennial readiness assessments, and run a federal continuity training and exercise program.¹ The requirements reach all executive departments listed in 5 U.S.C. § 101, government corporations, independent establishments, the intelligence community, and the U.S. Postal Service.²

FEMA implements PPD-40 through two directives. Federal Continuity Directive 1 (FCD 1) sets the baseline program framework, covering leadership succession, alternate facilities, exercise schedules, and everything else a plan must address.³ Federal Continuity Directive 2 (FCD 2) provides the methodology agencies must use to identify and validate their essential functions, including the Business Process Analysis and Business Impact Analysis behind those determinations.⁴ FEMA’s Office of National Continuity Programs oversees implementation and assessment across federal, state, local, tribal, and territorial governments.⁵

Essential Functions Come First

Every COOP plan is built around a tiered set of essential functions. Getting this identification right is the most consequential step in the process, because staffing, facility selection, communication tools, and exercise design all flow from it.

Mission Essential Functions (MEFs) are the activities directly tied to an organization’s statutory mission. Most are unique to the agency and do not support a national-level function.⁶
Primary Mission Essential Functions (PMEFs) are the elevated subset of MEFs that support the National Essential Functions and must be performed continuously. PMEFs must be resumed within 12 hours of an event and maintained for up to 30 days or until normal operations resume. Not every agency has PMEFs.⁶
National Essential Functions (NEFs) are the eight overarching responsibilities of the federal government to lead and sustain the nation during a catastrophic emergency. They sit at the top of the hierarchy and drive the identification of PMEFs below them.¹

FCD 2 requires each agency to conduct a Business Process Analysis and a Business Impact Analysis, then validate candidate PMEFs through an interagency coordination process.⁴ PMEFs trigger the strictest activation timelines and staffing requirements. Other MEFs may have more flexibility in how quickly they resume.

Required Components of the Plan

Orders of Succession

Orders of succession establish who takes charge when the agency head or other senior leaders are unreachable or incapacitated. FCD 1 requires a minimum of three positions, not named individuals but titled positions, for each key leadership role in the succession chain.³ Succession lists have to be kept current; a plan that names people who left the agency two years ago is worse than useless in a real emergency.

Delegations of Authority

Delegations of authority address a different problem from succession: what powers the successor actually holds. A delegation might authorize an acting official to sign contracts, obligate funds, or reallocate staff, with specific dollar limits or other restrictions attached. Delegations must be established before an emergency. Without them, a successor may hold the title but lack the legal power to make the decisions the role requires.

Alternate Facilities

When the primary office is unusable, staff need somewhere to go. Alternate locations are classified by their readiness:

Hot site: fully operational with computer systems, telecommunications, and space for essential personnel, ready to use immediately.
Warm site: equipped with some infrastructure but requiring additional personnel, equipment, or customization before it can support operations.
Cold site: not staffed day-to-day; IT infrastructure may need to be installed and activated before work can begin.⁷

The alternate site should be far enough from the primary location that the same disaster is unlikely to knock out both, and it must be accessible to individuals with disabilities, including accessible entrances, exits, restrooms, and paths of travel.⁷ Selecting a backup site in the same flood zone as the primary facility defeats the purpose.

Essential Records

An agency that loses access to its critical files during a crisis can grind to a halt even with staff and a functioning building. Essential records fall into two categories: emergency operating records (policies, authorities, and procedures needed to function in a disaster) and legal and financial rights records (documents that protect the rights of both the government and private citizens).²

Agencies must designate an Essential Records Manager, conduct at least an annual risk assessment of where records are stored, and ensure continuity personnel can access those records from alternate sites, whether through cloud-based systems, off-site backups, or other storage methods.² The risk assessment must document the difficulty of reconstituting records if they were destroyed and identify off-site storage requirements.

Telework

The Telework Enhancement Act requires each executive agency to incorporate telework into its continuity plan.⁸ FCD 1 addresses this in Annex G, and the federal continuity program management directive requires annual testing of telework capabilities for performing essential functions.² For a localized building issue, a pandemic, or severe weather that makes travel dangerous, telework can keep essential functions running without relocating anyone to an alternate facility.

How Activation Works

When an emergency hits, activation follows a defined sequence intended to get essential functions running at an alternate location or via telework as quickly as possible. For agencies with PMEFs, the clock is unforgiving: those functions must be operational within 12 hours.⁶

The process starts with emergency notification through multiple channels — text messages, phone calls, email — directing staff to report to the alternate facility, begin teleworking, or stand by. Personnel assigned to the emergency response team move to the alternate site on a prioritized timeline, focusing first on bringing the most critical systems online. Successors identified in the plan assume their roles and verify their delegated authorities.

Communication during activation relies on hardened systems that operate independently of public networks. Two federal programs provide priority access when normal circuits are overwhelmed:

Government Emergency Telecommunications Service (GETS): a card-based service that gives subscribers priority access and processing on landline telephone networks when circuits are congested.⁹
Wireless Priority Service (WPS): a cellular add-on that gives authorized devices priority calling on nationwide wireless networks. WPS does not preempt calls already in progress or block public access to cell networks.¹⁰

CISA’s Emergency Communications Division manages both services, and eligibility is limited to individuals who play critical roles in an organization’s continuity or crisis response structure.⁹ The emergency team maintains operations at the alternate site until leadership determines the original threat has passed or a long-term replacement facility is established.

Devolution When the Primary Organization Is Gone

Devolution is the more drastic cousin of a standard activation. A normal activation relocates essential staff to a nearby alternate site. Devolution transfers statutory authority and responsibility for essential functions to a completely separate group of employees at a geographically distant location. It applies when the primary leadership and staff, including those at the normal alternate facility, are all unavailable, or when the threat is catastrophic enough that a regional transfer is necessary.²

Every agency must maintain a devolution plan that identifies the specific triggering conditions, ensures the devolution site has the legal authorities and personnel to perform essential functions, and provides access to essential records and communications systems. The plan must include a defined process for transferring authority back to the primary organization once the emergency subsides, and agencies must train and exercise devolution regularly so the receiving site is actually ready when the call comes.²

Reconstitution Back to Normal

Reconstitution is the process of winding down emergency operations and returning to a normal posture. It begins when the agency head or another authorized official determines the emergency has ended and is unlikely to recur. FEMA’s framework breaks the process into four sub-phases: pre-event preparedness (appointing a Reconstitution Manager and forming teams before any emergency); event planning (tailoring the plan and developing courses of action for the agency head’s approval during the emergency); implementation (relocating operations and restoring access to records and systems); and end of reconstitution (confirming normal operations have resumed, conducting an after-action conference, and feeding lessons learned into the corrective action program).¹¹

The severity of the disruption determines how complex reconstitution will be. If the primary site suffered minimal damage, the process may be as simple as moving people back. If the facility was destroyed, reconstitution involves securing a new permanent location, rebuilding IT infrastructure, and potentially renegotiating service contracts, which can stretch for months.

Testing, Training, and Corrective Action

A plan that sits in a binder untested is a plan that will fail. Federal continuity directives impose a detailed schedule.

Monthly: testing of alert rosters and critical contact call-down lists.
Quarterly: testing of alert and notification procedures for continuity personnel, plus testing of internal and external communications and IT system interoperability.
Annually: exercises to validate the ability to sustain each PMEF using continuity options in the plan, testing of recovery strategies for essential records and critical information systems, testing of backup infrastructure at alternate sites, and testing of telework capabilities.²

Exercises range from tabletop discussions, where leadership walks through a hypothetical to identify gaps, to full-scale drills that physically relocate staff to the alternate facility and bring backup systems online. Tabletop exercises are cheaper and easier to schedule, but they cannot reveal the logistical problems that only surface during an actual move.

Training is required annually at multiple levels: awareness briefings for the entire workforce, role-specific training for continuity personnel, threat and hazard training for leadership, and training for all officials listed in the orders of succession and delegations of authority on their specific responsibilities and limitations.² New personnel receive continuity awareness briefings as they onboard.

Every exercise and real-world activation must conclude with an After-Action Report/Improvement Plan that documents strengths, areas for improvement, and specific corrective actions. Those corrective actions feed into an improvement planning process where organizations track implementation, and findings from previous events inform the design of future exercises.¹²

State, Local, Tribal, and Territorial Governments

The federal continuity directives apply directly only to the executive branch, but continuity planning extends well beyond Washington. FEMA publishes the Continuity Guidance Circular as a planning resource for state, local, tribal, and territorial governments, along with nonprofits and private-sector critical infrastructure operators.⁷ A companion document, the Guide to Continuity of Government for State, Local, Tribal and Territorial Governments, describes how COOP, COG, and ECG concepts apply to non-federal entities and provides planning factors tailored to their needs.¹³

Whether a legal mandate exists varies by jurisdiction. Some states mandate continuity planning for all agencies by executive order or statute; others treat it as a best practice without legal teeth. Regardless, the planning elements are largely the same: identify essential functions, establish succession and delegations, select alternate facilities, protect vital records, and test the plan regularly. A county clerk’s office and a federal intelligence agency face very different threats, but the underlying logic of keeping essential services running during a crisis applies equally to both.

1
Federal Emergency Management Agency. Federal Continuity Directive: Planning Framework
2
Federal Emergency Management Agency. Federal Continuity Directive: Federal Executive Branch Continuity Program Management Requirements
3
Federal Emergency Management Agency. Federal Continuity Directive 1: Federal Executive Branch National Continuity Program and Requirements
4
Federal Emergency Management Agency. Federal Continuity Directive 2: Federal Executive Branch Mission Essential Functions and Candidate Primary Mission Essential Functions Identification and Submission Process
5
FEMA. Office of National Continuity Programs
6
Federal Emergency Management Agency. Federal Executive Branch Essential Functions Risk Identification and Management
7
Federal Emergency Management Agency. Continuity Guidance Circular
8
U.S. Office of Personnel Management. Emergency Telework
9
CISA. Priority Services
10
Financial and Banking Information Infrastructure Committee. GETS/WPS Policy
11
Federal Emergency Management Agency. Reconstitution Plan/Annex Template and Instructions
12
Federal Emergency Management Agency. Homeland Security Exercise and Evaluation Program
13
Federal Emergency Management Agency. Guide to Continuity of Government for State, Local, Tribal and Territorial Governments