Week 5 - Crisis Management & Disaster Planning Flashcards
Crisis Management/Disaster Planning Principles
ID Phases of crisis (pre to post crisis phases)
1.THREAT- likely but not happened
- WARNING - imminent
- EVENT - occurs at time/place with POTENTIAL adverse affects
- IMPACT - the effects of the event
Define Crisis
Any EVENT with impact that exceeds normal response capacity.
Any CRITICAL INCIDENT threatening life & safety of people; damage to environment, property or data; disruption of operations or ability to carry out mission & goals of organization; threat to financial welfare & image of organization
ID and define 7 (seven) characteristics of crisis
- Potential to damage reputation
2. One or more asset classes affected (people, property, etc)
3. Loss or interruption of operations
4. Damage to consumer, shareholder, employee confidence (or sometimes strengthen image)
- May involve multiple audiences
- May be of interest to the media, or forgotten
- May be unique & entirely unpredictable or may be largely anticipated
What are the potential impacts of a crisis - what does a DR plan need to address
- disruption in operations, shutdown or possible bankruptcy
- serious injury to people
- threat to organization reputation
ID SIX general sources (causes) of crisis
- Human hazards
- Environmental or natural hazards
- Industrial or technological disasters
- Biological or pandemic disasters
- Infrastructure breakdowns
- Transportation breakdowns
ID characteristics of Human hazards
- may be accidental, organized or deliberate
- difficult to avoid
- very expensive to mitigate
ID characteristics of environmental or natural hazards
- can be challenging or impossible to control
- can be widespread and far-reaching
ID characteristics of Industrial or technological disasters
- can run gamut from loose connection to failed system
- can be mitigated, reduced or avoided by REDUNDANCY
- far less expensive to PREVENT through maintenance
Define crisis management
act/process of managing crisis to prevent occurrence of catastrophic loss AND reduce impact of losses to the organization, including reputation and brand
Define 8 ( eight) principles of EFFECTIVE crisis management
1. COMPREHENSIVE - take into account all hazards, phases, stakeholders, impacts, etc
2. PROGRESSIVE - anticipate future, develop preventive & preparatory measures to build disaster resilient plans and operations
3. RISK DRIVEN - use sound RM principles (hazard ID, risk analysis, impact analysis) to assign priorities and resources
4. INTEGRATED - ensure unity of effort among all levels of enterprise and all elements of customers, suppliers, government and community
5. COLLABORATIVE - develop relationships to encurage trust; advocate team atmosphere; build concensus; facilitate communications
6. COORDINATED - synchronize activities to achieve common purpose
7. FLEXIBLE - use creative and innovative approaches to solve disaster challenges
8. PROFESSIONAL - value approach based on education, training, experience, ethical practice & continuous improvement
ID PRE-LOSS general goals (three) and RM goal
General Goals
- economy of operations
- legality of operations
- humanitarian activities
RM Goal: obtain full mgmt support & commitment to the DR program
ID POST-LOSS general goals (four) and RM goal
General goals
- restore/maintain operations
- sustain profits & stable earnings
- return to pre-loss ops, work towards growth
- maintain good public image
RM Goal: effectively & economically minimize the operational & financial impact of the crisis
ID 4 (four) essential steps to crisis management process
- disaster planning - most important step
- preparation
- response
- recovery
ID Disaster Planning Components (process) (long list)
- establish DR team
- conduct vulnerability and disaster analysis
- ID types & effects of disasters or crises
- ID critical products, services, operations
- assess current situation & capabilities
- ID external resources & their emergency plans
- ID internal resources & capabilities
- ID resource requirements (cash is king)
- **Prioritize activities **
- Others: Murphy’s law, vendor supply; proximity to risk factors (EQ, bomb factories)
- develop DR plan
planning process: ID components of DR planning team
1. Composition - all represented - levels depts, etc.; leader, mgmt support, etc
2. team member qualifications: expertise, authority, special knowledge/other skills, leadership skills
- establish team structure & responsibilities
- define authority & limits (crisis site & central authority)
- establish reasonable time line & budget for training, exercises & report to mgmt