[CM] Implementing a CM & CC Plan - Part 2: Crisis Scenario Respond Lists

Part 2: Crisis Scenario Respond Lists

[1] Actions Steps for Terrorism, Civil Unrest, and Demonstrations

The definition of Terrorism encompasses a range of complex threats: organized terrorism conducted by terrorist fighters either foreign or home grown, radicalized ‘lone wolves’, and attacks using chemical, biological, radiological, nuclear and explosive materials.

A demonstration is an action by a mass group or collection of groups of people partaking in a protest over a cause of concern. 

This Incident action highlights some of the possible action steps CM & CC Coordinators may take in the event a Terrorist attack, demonstration, or even civil unrest threatens your organisation. Some steps participants should take note of can include:

• Contact availability of staff (Updated call tree)

• Staff preparedness 

• Updated evacuation plan

• Protection of vital documents (Stored in fire-proof safes, uploaded onto the cloud, backed up in file servers etc.)

• Entry/Exit precautions (Only one entrance, screening personnel, mail, briefcases, and handbags, limit access to staff etc.)

[2] Action Steps for Kidnap and Hostage Situations

A Kidnap and Hostage situation involves a staff member of the organization being taken and held against his or her own will. Some steps participants should take note of can include:

• Information Gathering (Conducting an in-depth check on the circumstances of the disappearance, obtaining the personal file of the victim etc.)

• Engaging with the hostage taker/kidnapper (Asking for proof of life of the victim, designating telephones to be used for negotiations)

• Liaise with local law enforcement

• Establishing the company's official position on paying out ransoms

• Reassurance and protection of victim's Next-of-kins 

• Establishing a media blackout

• Preparation of carefully crafted statements to the media

[3] Extortion and Blackmail

Extortion and Blackmail is an act of coercion using the threat of revealing or publicizing either substantially true or false information about a person or people or organization unless certain demands are met. Some steps participants should take note of in the event of a Blackmail and Extortion incident can include:

• Information Gathering (Obtain information on the person/organization making the demand)

• Liaise with local law enforcement

• Conduct a credibility assessment on whether the other party is capable of carrying out the threat

• Evaluate the 3 possible options:

  • Payment (Give in to the demands),

  • Resistance (Refuse to pay and allow the attack to take place), or

  • Removal (Appear to give in while arranging an arrest operation with law enforcement)

[4] Threats against People

Threats against People is defined as a declaration of violence against a person or people working within your organization. Very similar to the precautions taken for Terrorism, some steps participants should take note of in the event of a Threats against People incident can include:

• Liaise with local law enforcement

• Staff preparedness 

• Updated evacuation plan

• Increased Security (Additional Guards)

• Entry/Exit precautions (Only one entrance, screening personnel, mail, briefcases, and handbags, limit access to staff etc.)

• Consider personal protection for staff who have received threats (Ballistic vests, provision of bodyguards etc.)

[5] Threats against Property

Threats against Property is defined as a declaration of violence against a facility, facilities, or IT infrastructure within your organization. Some steps participants should take note of in the event of a Threats against Property incident can include:

• Update of BC, IT DR, CC and CM plans

• Protection of vital documents (Stored in fire-proof safes, uploaded onto the cloud, backed up in file servers etc.)

• Staff preparedness 

• Ensure that building guards have an immediate point of contact with the Incident Management Team members

• Increased Security (Checking premises and vehicles for unidentified packages)

More Information About Crisis Management Courses

To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer [CM-3] and the CM-5000 Crisis Management Expert Implementer [CM-5].