Crisis Mgmt Flashcards
The goal of continuity planning should be
Save lives, protect assets, restore critical business process and systems, reduce the length of interruption of business , control media, maintain customer relation.
Types of crisis team
Operational teams, tactical crisis teams, strategic crisis team
The crisis team list should describe for each person on the team
Their role in the incident, the critical contact information, Alternate chains of command
Effective crisis planning included all areas within the organization
That can be activated if necessary
In large organization it is common for the senior leadership team to be separate from that can be activated if necessary
Crisis Management Team
Information that may be obtained from some of the entities an other organization can be of great value in
Developing and implement the emergency plan
Planner should take a wide range of agencies and individuals into account
When developing an emergency plan
What are the major function of emergency response
Coordinating across multiple groups and departments with differing responsiblities
With whom security professional should build relationships
With public safety and supply chain partners, conducting joint drill and other exercise
If the incident involve multiple agencies or jurisdictions
Then a single command structure is typically established
If an incident command system needs to be formally implemented due to size of the incident
It would be single incident command
Emergency response requires
Organization structure
In large organization with multiple location what is essential
To require overall emergency operations plan
What are the elements, the primary training of emergency response personnel should focus
The most likely situations and the location, construction, size and function of each site
Emergency or crisis can overwhelm to whom
Those who have done no planning or preparation
What is essential to ensure recovery from business interruption and to protect the profitability of the enterprise
Planning
Natural or Environmental, Human, Active or Cyber based threats are categories of
Crisis
The incident policies and procedures are tested through
Drills & Exercises
Methods of emergency Drills, Policies & Procedures are
Table top or Full scale exercises and drills
Inclement weather can pose a serious threat to
Property, Critical infrastructure & Lives
During floods elevators to be positioned at
Raise elevators to the second floor and turn off
What is to be done after a flood
Implement disaster recovery plan and monitor communication of local authorities.
What is to be done to protect windows and doors in hurricane
Install shutters and plywood in order to protect windows and doors from windborne debris
Facilities with freezing temperatures should turn off and drain the following lines in the event of a long term power loss
- Fire Sprinkler System.
- Standpipes.
- Portable water lines.
- Toilets.
Seismic building codes are studied to understand the Risk of
Earthquake
Precautions during earthquake
- Inside a building: Take shelter under a desk or table, stand against an inside wall, move away of windows.
- Outside of building : Move away/Clear of buildings, poles and trees. 3. While driving: Move away of overpass &underpass
Which fire has become increasingly serious threat to business and infrastructure and require a different type of planning.
Wildfire
The most important thing a security department can do in case of a wild fire is.
Preparing an evacuation plan
Which department is often a key component of fire evacuations.
Security Department
Steps to be taken after medical emergency
Investigate the root cause and ensure any hazards & safety concerns are addressed.
When planning for a hazmat incident, one aspect that is often overlooked on the crisis planning team is
Public relations
During medical emergencies following information should be provided to emergency medical person/Emergency helpline number attendant
Nature of medical emergency, Location of emergency, caller name and phone number
The impact of pandemic to any community or organization is driven by
The number of people infected and the severity of the impact to people and how much it impacts their ability to function in the community.
WHOs global influenza preparedness plan distinguishes ____________ phases of a pandemic.
6
It is projected that ____________percentage of workforce may be absent for various timeframes during a pandemic.
40%
Post pandemic transition period: Business continuity
Assess all physical, economic and social impacts to the company. Provide continuous updates concerning business recovery and preparedness efforts
Post pandemic transition period: Communication
Address and rumors and misinformation quickly
Post pandemic transition period: Facility
Check maintenance schedules to assure delayed items are handled first
Post pandemic transition period: Legal
Assess insurance coverage
Critical elements of an effective crisis management response plan include
Collaboration, communication, education, mutual aid assistance, training &exercises.
Which factor is the cause of 95% of cyber security breaches
Human Factor
The ultimate decision to evacuate is made by
Organizations Leadership
If the bomb threat is determined to be plausible/credible
Advise the police and if necessary, request assistance with any evacuation
ASIS defines workplace violence as
A spectrum of behaviors, including over acts of violence, threats and other conducts that generate a reasonable concern for safety from violence, where a nexus exists between the behaviour and the physical safety of employees from any internal or external relationship.
Targeted or intended violence is defines as
The conscious decision to kill or physically harm specific or symbolic victims in a workplace or on a campus
Targeted violence is characterized as
Planned, Emotionless and predatory
Research and case studies suggest that those who commit targeted violence begins with
Pathway to violence
The goal for responding to and preventing workplace violence is to
Break the pathway as early as possible through identification, mitigation and response to pre-incident indicators.
The crisis response to workplace violence revolves around
Identifying and responding to persons who might be on the pathway to violence.
Stages of the pathway to violence include
Ideation, planning, acquisition, probing/surveillance and action/implementation.
The workplace violence policy in workplace is approved and endorsed by
Upper management
During a workplace violence, for any violent action who should observe, document and report behaviour for further assessment?
Security
What is to be done if violent or threatening behaviours is observed that poses an immediate danger to person or property.?
Evacuate and initiate workplace violence protocols. Ensure your own safety and safety of others
Domestic violence
Domestic violence is a type of workplace violence that is often overlooked
Threat evaluation requires
Procedure, planning, training and rehearsals
To respond effectively to a bomb threat
The organization must recognize that it has been threatened. Capture information about the threat. Report it to relevant authority within the organization. Evaluate the threat
In bomb threats the primary goal of suspect is to
Incite panic and anxiety of employees or customers, disrupt operations and cause economic harm
After an active threat incident : Long term phase
Conduct post incident debrief with internal and external responders and stakeholders. Employee assistance programs. Accounting for the financial impacts. Consult legal counsel for possible litigation.
After an active threat incident : Short term phase
Preserve crime scene. Work with law enforcement in criminal investigation. Prepare statements for media coverage.
After an active threat incident: Immediate phase
Life safety, Accounting for all individuals onsite, communication with employees, family and the media. Continuity of business or crisis response. Evaluate the incident to ensure danger no longer exist
What is to be done during an active threat event as a last resort when life is in imminent danger?
Attempt to disrupt or incapacitate the attacker (Fight/Resist/Overcome/Take action).
What can have a significant impact in the prevention and response to active threat events?
Regular training and Drills
A comprehensive active threat plan should include the following sections
Prevent, protect, Mitigate, Respond, Recovery
In workplace Active threats are the results of
Targeted or predatory violence
Active threats were also called as
Active shooter events
What is essential to ensure recovery from business interruptions and to protect the profitability of the enterprise?
Planning
Even with emergency planning, why it is necessary to improvise and remain flexible when a disaster or other emergencies strikes?
Because the varieties of emergencies make planning for every possible contingency impossible
What are the elements, the primary training of emergency response personnel should focus?
The most likely situations and the location, construction, size, and function of each site.
While developing a plan for emergency management what elements should be included in the plan?
The development of a plan for emergency management include:
1‐ defining of “emergency”,
2‐ establishment of an organization to perform specific tasks before, during, and after an emergency,
3‐ establishing a method for using available resources and for obtaining additional resources at the time of an emergency,
4‐ a means from moving normal operations into and back out of the emergency mode of operations.
What an emergency plan should provide?
An emergency plan should provide the basis for orderly actions and for making decisions that minimize loss
What are the elements an emergency management consists of?
The four elements of emergency management are mitigation, preparedness, response, and recovery.
How it is possible to prevent from causing substantial loss from an emergency?
By responding promptly to an emergency
After what types of action, each emergency plan should be evaluated and modified?
The emergency plan should be evaluated and modified as required after the following :
1‐ each training drill,
2‐ each emergency,
3‐ changes in personnel or their responsibilities,
4‐ changes in the facility’s physical design,
5‐changes in policies or procedures.
Depends on what an organization need to develop a plan for emergency?
Depends on the nature of the organization’s activities, the organization’s criticality, its attractiveness as a target, and the types of facilities it occupies, among other considerations
What is the effective tool can be utilized in the development stage of the emergency plan for determining the probability of a threat or a disaster, and its impact on an organization
To conduct a risk analysis
Explain the term continuity of operations (COOP)?
Continuity of operations or COOP is a term normally applied specifically to the U.S federal government. COOP is different from BC in that COOP entails movement of critical functions and personnel to an alternate operating site or sites in accordance with a pre‐established COOP plan.
What are those key elements to achieve the objectives of emergency management?
What is to be done, and who is to do it
What kind of activities included in the recovery efforts of emergency management?
Recovery efforts include implementation of continuity of operation, or business resumption plans, activations of emergency relocation sites, and reconstitution or restoration at the original location or a new permanent location.
To achieve what business continuity encompasses all the actions taken by a business before, during, or after an emergency?
To minimize the emergency’s negative impact on the organization’s operations and to bring about a timely response, resumption of critical business functions, and recovery if an emergency does occur.
What basically all‐hazard approach recognizes?
All‐ hazard approach recognizes that many emergency planning requirements are similar regardless of whether an incident is a natural threat, a human threat, or an accident.
In choosing a planning format for an emergency, what are the significant considerations?
The dissemination of the plan, the maintenance of the plan.
While developing emergency operations plan what kind of approaches can be undertaken?
The emergency planning approaches are: 1‐ all‐hazard approach, 2‐ stand‐alone plans, 3‐ combination of all‐hazard and stand‐alone
How it is possible to make emergency plan effective?
Every emergency plan should be reviewed and updated regularly
Why it is essential that all emergency plans are reviewed at least once a year?
To ensure that all dynamic information, such as floor plans, contact numbers, key personnel, and key assets, are accurate
What is the inconvenience of choosing a series of stand‐alone emergency plans for an organization?
It will have to update every plan each time common points of contact or emergency number change
When an emergency operations plan(EOP) capable of addressing the preparedness and response aspects of business continuity?
When an emergency operations plan (EOP) developed with the all‐hazards approach.
Who can make risk analysis more manageable in an organization?
Managers directly involved in day‐to‐day operations
How an emergency plan can be made effective?
For an emergency plan to be effective,
1‐ which it pertains,
2‐ all personnel tasked it must reflect the requirements of the organization to with responsibilities must clearly understand their responsibilities and be trained to fulfill them,
3‐ the plan must be tested through practice,
4‐ the plan should be revised in light of such testing.
For what reasons emergency tests and exercise are conducted?
Emergency tests and exercises are conducted for many reasons:
1‐ checking the workability of a plan or a part thereof,
2‐ determining the level of staff awareness and training,
3‐ evaluating the adequacy of emergency communications,
4‐ identifying shortcomings in evacuation procedures.
What are the elements that scope of the emergency training in the organization depends?
Depends on the nature of the entity’s activities, it employees and its recurring visitors, contractors, and others who have frequent access to the facilities.
What procedure should be followed to validate an organization’s emergency plan?
An unannounced test should be conducted with appropriate controls and safeguards in place.
What kind of special planning needs to be addressed in the development process of emergency plan?
Special planning needs such as personnel with disabilities, including those of vision hearing, mental function, and mobility.
To control losses, a business needs emergency response systems. What should be the component of emergency response systems?
People, equipment and procedures
In setting priorities in emergency operations plan (EOP), certain time‐tested principles should be applied to the protection of life. What could be those principles?
Those principles include:
1‐ evacuation and shelter,
2‐ personal protection,
3‐rescue and relief
What could be guiding principles for preventing or minimizing injury during an emergency?
The guiding principles could be :
1‐ design safety
2‐ training
In developing emergency operations plan (EOP), why planning assumptions need to be considered?
To reduce the number of “what if”.
What could be done to avoid gap in emergency plan maintenance?
There should be a designated alternate, by name or position
After designating primary and alternates decision maker, what are important things to do?
It is important to brief, train, and tests them on their assigned duties and on most significant aspects of the planning process
What type of organization should not handle emergencies?
A totally new organization should not be developed to handle emergencies
What is one of the most important considerations in developing an emergency management structure?
To designate alternates for the primary decision maker and for anyone else who is charged, by name or position, with a particular responsibility under the plan.
What are the primary elements Incident Command System consists?
The Incident Command System consists of five primary elements:
1‐command,
2‐ operations,
3‐ planning,
4‐ logistics, and
5‐ finance and administration.
Based on what an organization ultimately determines its level of response during crisis or emergency?
The nature and scope of the emergency
In forming a mutual aid association, organization’s emergency planners usually take few steps. What are those steps?
In forming a mutual aid association, organization’s emergency planners usually take few steps which are :
1‐ obtain the advice, assistance, and guidance of the local government representative responsible for disaster planning,
2‐ invite local industries, utilities, and other businesses to send representatives to an organizational meeting,
3‐arrange to have the group addressed by someone experienced in the operation of a mutual aid association,
4‐ elect association officers and appoint a coordinator,
5‐appoint committees to develop plans and procedures for various aspects of mutual aid operations, such as membership and bylaws, traffic and security control, fire protection, communications, etc,
6‐ schedule periodic meetings.
To avoid confusion, what the emergency plan should provide?
The orderly release of information, preferably through a single source in the organization.
Where generally successions lists are recorded
Successions lists are recorded in the written emergency plans
What is one of the most important ingredients in affectively managing an emergency event
Communications.
What are the perquisites must be fulfilled by the primary and alternate EOC/CMC?
The primary and alternate EOC/CMC locations should be able to accommodate the CMT and should provide redundant communications capabilities. In addition, the locations should have backup power and an independent supply of potable water
In emergencies that develop during non‐working hours, telephone communications and electrical power may be severed, preventing contact with appropriate executives and making road travel to the facility impossible. Therefore, initial implementation of the plan and control of the facility may rest with under whom?
With the senior manager present at the site, who is some cases may be a security manager, security supervisor, or security officer
What types of element dictate the location and scope of emergency operations center (EOC)/crisis management center?
The size, nature, and location of the organization
When the unified command (UC) is established
If incident involve multiple agencies or multiple jurisdictions
What is the purpose of the mutual aid organization?
The purpose of the mutual aid organization is to establish a workable emergency management organization that minimizes damage and ensures the continued operation or early restoration of damaged facilities.
When the names of those who have been killed or injured in an emergency should be released?
As soon as possible but relatives of victims must be informed before such information can be released to the public
What can pose a serious challenge in an emergency?
Aiding the welfare and morale of employees and their families
During or post crisis situation, what may have an extremely negative effect on public perception of the organization?
Any missteps connected to media relations
While developing the medical services portion of an emergency plan, what planners should first ascertain?
The type and capabilities of any in‐house medical support
With regard to fire and rescue operations, why a distinction needs to be made between industrial and non‐industrial facilities
Because industrial facilities may have a volunteer in‐house fire and rescue operation; however, non‐industrial facilities, particularly office buildings, operate differently. Their occupants are typically instructed to identify the problem, notify the appropriate authorities, and evacuate the affected area
For which type of crisis situation, emergency plans should provide for shelter‐in‐place?
Where evacuation is infeasible or undesirable, such as a hazmat release, tornado, or earthquake
In evacuation planning, organizations must consider alternate exists, routes, and assembly points. Furthermore, use of these alternates must be practiced regularly. What is way to do it?
One way to do so is to block the primary exit for a different exit for a different floor or part of a building for each fire drill.
What the emergency evacuation considerations should be?
The emergency evacuation consideration can be as follows :
1‐ need to think well beyond simply sounding an alarm and asking the building occupants move to the nearest emergency exit,
2‐ consider alternate exists, routes and assembly points,
3‐ use of these alternates must be practiced regularly,
4‐the evacuation drill should continue until all occupants have reached the designated assembly points,
5‐ emergency plan need to also provides for shelter in place for situations where evacuation is infeasible on undesirable.
Why the alert and warning system should be tested periodically when employees are in the facility?
So they can experience and become familiar with the warning
While planning for alert and warning system, why outdoor as well as indoor warning systems must be considered?
Because individuals might be outdoors during an emergency
During an emergency looting by employees and outsiders is a hazard that must be considered because spectators are attracted to any disaster scene. To maintain security and protect the assets and personnel of the organization what measure need to be undertaken?
Additional security personnel may need to be deployed
Why a survey of neighboring installations should be conducted regularly
To ascertain the existence of any potential hazards that could aggravate the impact of a crisis for the organization
During emergency shutdown who may be the last to leave the facility or establishment when evacuation is ordered, or who may even have to stay in the facility?
Emergency shutdown crews
If restoration has been planned, recovery is less difficult and more efficient. What can simplify emergency operations?
If restoration has been planned, recovery is less difficult and more efficient. Developing a list of key recovery items simplifies emergency operations.
Business continuity a comprehensive managed effort to prioritize what?
Business continuity a comprehensive managed effort to prioritize key business processes, identify significant threats to normal operation, and plan mitigation strategies to ensure effective and efficient organizational response to the challenges that surface during and after a crisis