{"id":175,"date":"2013-01-08T10:30:49","date_gmt":"2013-01-08T10:30:49","guid":{"rendered":"http:\/\/futureriskmanagement.co.uk\/?page_id=175"},"modified":"2016-04-14T14:04:06","modified_gmt":"2016-04-14T14:04:06","slug":"crisis-continuity","status":"publish","type":"page","link":"https:\/\/futureriskmanagement.co.uk\/?page_id=175","title":{"rendered":"Crisis &#038; Continuity Planning"},"content":{"rendered":"<p><span style=\"color: #000000; font-family: 'times new roman', times;\">It is important that at the time of a major disruption an organisation has in place a structure that will allow the management to make informed decisions and to take control of the situation.\u00a0 An <strong>Incident Response Structure (IRS)<\/strong> supports all levels of activities that take place during a disruptive incident. Our typical management style, based on debate and consensus will have to switch to a \u2018command and control\u2019 model, as illustrated above. The emergency services will have no problem with this approach as it is their normal management style.<\/span><\/p>\n<p><span style=\"color: #000000; font-family: 'times new roman', times;\"> The new international standard for Business Continuity Management ISO 22301 requires an organisation to establish <\/span><span style=\"color: #000000;\"><span style=\"font-family: 'times new roman', times;\"><em>\u201cprocedures and a management structure to respond to a disruptive incident using personnel with the necessary responsibility, authority and competence to manage an incident.\u201d<\/em><\/span><span style=\"font-family: 'times new roman', times;\"> <\/span><\/span><span style=\"color: #000000; font-family: 'times new roman', times;\">Future Risks&#8217;s Incident, Crisis and Continuity planning is structured around this key principle.<\/span><\/p>\n<p><a rel=\"attachment wp-att-186\" href=\"http:\/\/futureriskmanagement.co.uk\/?attachment_id=186\"><\/a><a rel=\"attachment wp-att-186\" href=\"http:\/\/futureriskmanagement.co.uk\/?attachment_id=186\"><img loading=\"lazy\" title=\"Crisis &amp; Recovery Cycle[1]\" width=\"640\" class=\"aligncenter size-large wp-image-186\" src=\"http:\/\/futureriskmanagement.co.uk\/wp-content\/uploads\/2013\/01\/Crisis-Recovery-Cycle11-1024x587.jpg\" alt=\"\" height=\"366\" srcset=\"https:\/\/futureriskmanagement.co.uk\/wp-content\/uploads\/2013\/01\/Crisis-Recovery-Cycle11-1024x587.jpg 1024w, https:\/\/futureriskmanagement.co.uk\/wp-content\/uploads\/2013\/01\/Crisis-Recovery-Cycle11-300x172.jpg 300w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/a><br \/>\n<strong><span style=\"font-size: small; color: #ff0000;\">A Mindmap of the Crisis and Recovery Cycle<\/span><\/strong><\/p>\n<p><strong><span style=\"color: #000080;\">Fundamental Requirements<\/span><\/strong><\/p>\n<p><span style=\"color: #000000; font-family: 'times new roman', times;\">There are some fundamental requirements to adhere within incident handling and crisis\u00a0 and continuity management capability, as follows;<\/span><\/p>\n<p><span style=\"color: #000000; font-family: 'times new roman', times;\"> 1.\u00a0A key requirement in the election of people to roles is to ensure that the individual has a decision-making capability commensurate with that position and this principle operates at all levels of the emergency management organisational structure.<\/span><\/p>\n<p><span style=\"color: #000000; font-family: 'times new roman', times;\"> 2.\u00a0The next key requirement is that each role must not be ambiguous, although there may well be overlapping tasks and responsibilities until all parties are in position.<\/span><\/p>\n<p><span style=\"color: #000000; font-family: 'times new roman', times;\"> 3.\u00a0Roles within emergency and crisis management should, in many ways, mirror the requirement\u00a0of any business and we find the need to have the most senior position in the company (MD\/CEO etc) occupying a similar position on the CMT, as we do with Finance, Human Resources, Facilities, and Legal\u00a0 for example. This mirroring runs through the whole structure and again, in simple terms, should be matched with the requirement to have, one,\u00a0 a strategic view of the world, two, a tactical middle management (business expertise\/decision making) capability and, three,\u00a0 an operational support of skilled, experienced incident handlers.<\/span><\/p>\n<p><span style=\"color: #000000; font-family: 'times new roman', times;\"> 4. That the structure recognises, Business Continuity Management, Crisis Management and Incident Management as three interconnected, but associated disciplines.<\/span><\/p>\n<p><span style=\"font-size: large;\"><strong><span style=\"font-family: 'times new roman', times;\">Operational Aims<\/span><\/strong><\/span><\/p>\n<p><span style=\"color: #000000;\">An organisation&#8217;s\u00a0Incident, Crisis and Continuity Management plans should be designed to;<\/span><\/p>\n<ul>\n<li>A<span style=\"color: #000000;\">llow mobilisation of the right resources with the relevant expertise for the problem at hand.<\/span><\/li>\n<li><span style=\"color: #000000;\">Facilitate full concentration on emergency management tasks.<\/span><\/li>\n<li><span style=\"color: #000000;\">Allow business to continue as normally as possible.<\/span><\/li>\n<li><span style=\"color: #000000;\">Enable an organisation to show competence in the face of the unexpected.<\/span><\/li>\n<\/ul>\n<p><span style=\"color: #000000;\"><strong> <\/strong><\/span><\/p>\n<p><span style=\"color: #000000;\">As within any business <\/span><span style=\"color: #000000;\">organisational structure there are defined roles for individuals, in both management and functional positions, which are, in large part, now duplicated within the three broad operating areas of this emergency management system. In simple terms, we are<\/span> p<span style=\"color: #000000;\">ositioning people, whose current business expertise and position makes them ideal to occupy what we will refer to as either an<\/span> <strong>Operational<\/strong>, <strong>Tactical<\/strong>,<span style=\"color: #000000;\"> or <\/span><strong>Strategic<\/strong> <span style=\"color: #000000;\">space.<\/span><\/p>\n<p><span style=\"color: #000000;\">The following diagram illustrates the positioning of the specific plans, set against the three levels of\u00a0 involvement, which in official organisations &#8211; police, fire, and local government emergency planning, is referred to as Gold, Silver and Bronze control.<\/span><\/p>\n<p><span style=\"color: #444444;\"><a rel=\"attachment wp-att-214\" href=\"http:\/\/futureriskmanagement.co.uk\/?attachment_id=214\"><\/a><a rel=\"attachment wp-att-214\" href=\"http:\/\/futureriskmanagement.co.uk\/?attachment_id=214\"><\/a><a rel=\"attachment wp-att-214\" href=\"http:\/\/futureriskmanagement.co.uk\/?attachment_id=214\"><img loading=\"lazy\" title=\"Untitled6\" width=\"300\" class=\"alignleft size-medium wp-image-214\" src=\"http:\/\/futureriskmanagement.co.uk\/wp-content\/uploads\/2013\/01\/Untitled6-300x177.jpg\" alt=\"\" height=\"177\" srcset=\"https:\/\/futureriskmanagement.co.uk\/wp-content\/uploads\/2013\/01\/Untitled6-300x177.jpg 300w, https:\/\/futureriskmanagement.co.uk\/wp-content\/uploads\/2013\/01\/Untitled6.jpg 881w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><br \/>\n<\/span><\/p>\n<p><span style=\"font-size: small;\"><span style=\"color: #ff0000;\">The concept upon which this structure is based operates on the basis that<\/span>;<\/span><\/p>\n<ul>\n<li><span style=\"font-size: small;\">Information is escalated up<\/span><\/li>\n<li><span style=\"font-size: small;\">Decisions and resource allocation cascade down<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong><span style=\"color: #000080;\">Background to the Three Disciplines<\/span><\/strong><\/p>\n<p><strong> <\/strong><\/p>\n<p><strong>1. Incident Management<\/strong><\/p>\n<p><span style=\"color: #000000;\">T<span style=\"font-family: 'times new roman', times;\">he starting point where, if handled speedily and correctly, the consequences an<\/span><span style=\"font-family: 'times new roman', times;\">d implications of the event may be contained. The Business Continuity British Standard BS 25999<\/span><\/span><\/p>\n<p><span style=\"font-family: 'times new roman', times; color: #000000;\">Crisis Management defines an incident as follows: <strong><em>\u201cA situation that might, or could lead to, a business disruption, loss, emergency, or crisis.\u201d <\/em><\/strong><\/span><\/p>\n<p><span style=\"font-family: 'times new roman', times; color: #000000;\"><strong><em> <\/em><\/strong><\/span><\/p>\n<p><span style=\"font-family: 'times new roman', times; color: #000000;\">The key to avoiding loss, business disruption and crises is, therefore, to have prepared, rehearsed and comprehensive plans for managing a range of incidents that, from a risk assessed perspective, have the possibility, however remotely in some cases, to affect the business. The difference from an incident and a crisis can be found in the definition of a crisis, for example: \u201can inherently abnormal, unstable and complex situation that represents a threat to strategic objectives, reputation or existence of an organisation.\u201d<\/span><\/p>\n<p><strong>2. Crisis Management<\/strong><\/p>\n<p><span style=\"font-family: 'times new roman', times; color: #000000;\">So crises are associated with highly complex problems, the full implications and nature of which may well be unclear at the time and it is therefore argued that pre-prepared solutions (of the sort we will find in the Incident Response and BCM manuals) are unlikely to work in complex and ill-structured crises, especially external communications, a minefield in itself. As such, crisis management needs to be able to deal with issues that may not be manageable within these other structures, as each possible solution may have severe consequences of one form or another. Often it is a case of choosing the \u201cleast bad\u201d solution, and accepting that there will be some strategic dilemmas.<\/span><\/p>\n<p><strong> <\/strong><\/p>\n<p><strong>3.\u00a0 Business Continuity Management (BCM)<\/strong><\/p>\n<p><span style=\"font-family: 'times new roman', times; color: #000000;\">BCP (Business Continuity Planning) and BCM are interchangeable titles for the same practice of having in place policies, plans and processes (and having exercised these) for recovering business functionality following a serious incident. We often hear of reference to Disaster Recovery, which today has come to refer to the subset of plans specifically for IT recovery. Disaster recovery Planning (DRP) includes planning for resumption of applications, hardware, communications (such as networking) and other IT infrastructure. There are usually contingency arrangements in place for migrating these functions to a pre-arranged alternate site.<\/span><\/p>\n<p><span style=\"color: #000000; font-family: 'times new roman', times;\">Many organisations start by developing continuity plans against perceived risks such as loss of IT services or building facilities &#8211; a traditional disaster recovery approach. However, many organisations recognise that this may well overlook critical activities outside these services and facilities. The direction that \u00a0BCM should take therefore is based on ensuring the continuity of critical processes and activities that deliver key products and services; which is more aligned with \u2018total quality management\u2019, itself based on the supplier\/customer relationship and the processes that serve them.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It is important that at the time of a major disruption an organisation has in place a structure that will allow the management to make informed decisions and to take control of the situation.\u00a0 An Incident Response Structure (IRS) supports &hellip; <a href=\"https:\/\/futureriskmanagement.co.uk\/?page_id=175\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"onecolumn-page.php","meta":[],"_links":{"self":[{"href":"https:\/\/futureriskmanagement.co.uk\/index.php?rest_route=\/wp\/v2\/pages\/175"}],"collection":[{"href":"https:\/\/futureriskmanagement.co.uk\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/futureriskmanagement.co.uk\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/futureriskmanagement.co.uk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/futureriskmanagement.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=175"}],"version-history":[{"count":31,"href":"https:\/\/futureriskmanagement.co.uk\/index.php?rest_route=\/wp\/v2\/pages\/175\/revisions"}],"predecessor-version":[{"id":191,"href":"https:\/\/futureriskmanagement.co.uk\/index.php?rest_route=\/wp\/v2\/pages\/175\/revisions\/191"}],"wp:attachment":[{"href":"https:\/\/futureriskmanagement.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}