Despite our best efforts to strategically apply every piece of technology available and all best practices, eventually, every organization will experience a crisis of some magnitude.
At that point, regardless of the initiating event, the most crucial goal is to recover the business as quickly and cost-effectively as possible.
As a professional in the crisis management industry know all about crisis avoidance and prevention. After all, the primary task of our jobs is to implement a program to prevent or deter unacceptable behaviour directed at our organization. Moreover, within this context, security and crisis management become adjacent and, in some circumstances, overlapping functions.
The two functions are adjacent in that specific threats must pass through the security program to cause a crisis impacting the organization. For example, a disgruntled former employee must bypass technological, procedural and administrative security controls to regain access to a corporate facility and take a hostage. Crisis management takes over after the threat "defeats" the security program. However, these functions also overlap since security would play an ongoing role in resolving the crisis.
The crisis management or emergency operations plan is the strategic response to a potential organization-threatening crisis. In broad terms, the strategy is to prevent or avoid the initiating event, mitigate the event's consequences should it occur, and recover from the event as quickly as possible.
Crisis management is all about planning and preparation. This planning is usually subdivided into five categories:
Category of CM Planning |
Description |
|
Long-range |
The event is not in sight. |
|
Near-term |
The event is expected in two to three days. |
|
Event |
The crisis is ongoing. |
|
Response |
The short-term response action after an event has occurred. |
|
Recovery |
The “last-leg” response actions and transition to normal operations. |
This list recognizes what an organization can do to prepare for a crisis.
Generally, any crisis defined regarding an initiating event with subsequent consequences can be the object of long-range CM planning activity.
Events that lend themselves particularly well to this approach include weather abnormalities (tornados, hurricanes, ice storms, floods), fire, power outages, water outages, communications failures, bomb threats, and incident and computer system failures.
Other types of incidents can also be the object of long-range planning; however, these incidents are, in some respects, less frequent and are inherently more variable than the incidents above, with which we are much more familiar.
This latter category includes explosions, workplace violence, hostage incidents and social unrest or civil disorder.
There are several common problems in organizations' crisis management programs today.
Many organizations do not have a formal CM plan or structure to begin preparing for or responding to a crisis event. In many organizations, ongoing business activities quickly consume the available staff resources. Unfortunately, this organization will not have an essential structure for a response when an unexpected event occurs.
While the argument can be made that every business cannot afford to put off CM planning, those businesses with limited resources should at least assemble an essential planning and response document. At a minimum, this document should contain contact information for those designated to be in charge during a crisis. This basic structure will provide a starting point.
Many organizations view their crisis management as a completed document on the shelf in various locations within the organization. If it is needed, the right people know where to find it.
The CM plan is an ever-evolving document that changes as personnel and response strategies change. At a minimum, awareness briefings should be provided to those with crisis management responsibilities to provide the foundational information necessary to deal with a crisis event.
Third, there is little staff training concerning translating the crisis management plan guidelines into action. This can only be accomplished through various tabletop exercises or full-scale simulations.
The development and maintenance of a corporate crisis management plan are often complicated by the geographical and functional diversity of an organization.
Most organizations find it challenging to dedicate the necessary resources to develop a core CM plan. Under the enterprise model, a CM plan may need to be developed or tailored to each significant facility in the portfolio. Under these circumstances, organizations should provide as much commonality as possible in the core CM plan; the distributed facilities would only have to modify the external support agencies' emergency contact lists to fit their particular location. While this places the burden of CM planning on corporate shoulders, this usually is where these resources reside.
Because of potential functional and geographical diversity, the range of possible crisis types the organisation faces can be extensive.
Again, corporate-level planning should consider this diversity and provide the necessary core response structures to address all hazards. Local tailoring with corporate support will provide the local information and strategy needed for local applicability.
The identification and coordination of support from local agencies, such as law enforcement, will need to be done locally. The corporate crisis planning team must ensure these relationships are in place.
Sometimes, the Local Crisis Management Team is called the Incident Management (IM) Team.
Many CM guides stress the importance of managing the information provided to interested and affected parties, including employees, families, stockholders, and the media. Individual facilities may not have individuals designated or trained to interface with the press. The corporate public affairs person may be thousands of miles away at the corporate headquarters with second-hand information. This difficulty must be planned for in advance to ensure a clear and correct version of the event is conveyed to all parties.
Practising is one of the most important ways to improve your CM plan. The familiarity with the plan brought about by practice will enable your team to come to quick decisions about crisis responses and efficiently access the resources necessary to protect the organizational assets, staff, and capital.
Organizations, similar to individuals, try to deny their weaknesses (Hamidovic, 2012). The reasons why organizations do not engage in proper crisis management are often:
Organizations deny that they might be vulnerable to threats of imminent crisis and, thus, decide that no measure is to be taken.
Organizations recognize that a crisis will affect the organization, but its impact is too small to be considered; in other words, the magnitude and importance of the crisis are significantly diminished.
Organizations presume that “we are so big and powerful that we will be protected from the crisis.”
Organizations consider that crises do not happen to good organizations, thus ignoring all existing crisis signals.
Organizations minimize the probability of the occurrence of a crisis.
The organization believes that if a crisis should affect the company, it will affect only some departments.
Goh, M. H. (2016). A Manager’s Guide to Implement Your Crisis Management Plan . Business Continuity Management Specialist Series (1st ed., p. 192). Singapore: GMH Pte Ltd.
Extracted from Challenges in CM Planning
Please feel free to send us a note if you have any of these questions to sales.ap@bcm-institute.org |