(Response & Recovery)

Crisis Management & Business Continuity

Develop structured plans to manage incidents and restore operations effectively

Note: Firstly, watch the introductory video then read the text. Theres also a audio discussion at the end of the lesson.

In the event of a terrorist attack, how an organisation responds and recovers will ultimately define its resilience and reputation.

This lesson will delve into the intricacies surrounding crisis management and business continuity for protective security and counter terrorism practitioners and whats required to respond to a terrorist attack or serious incident and post incident recovery for small to large private sector organisations.

All the other lessons in the programme bring together other elements that make up all the requirements for effective crisis management and business continuity and ultimately help create a resilient organisation.

Several documents can serve as effective tools for handling immediate response and post event recovery, including crisis or emergency response plans.

However, Green (2008) advocates for the implementation of a comprehensive business continuity (BC) plan, which seamlessly amalgamates emergency response and post event recovery strategies.

This holistic approach ensures a cohesive and robust framework for navigating the immediate response and aftermath of a terrorist attack or serious incident, safeguarding organisational resilience.

Lesson 1 Objectives

This lesson will introduce you to:

• The purpose of response and recovery planning.
• The principles of an effective response and recovery framework.
• The relationship between preparedness, response and recovery.
• The contribution of response and recovery planning to organisational resilience.

Learning Outcomes

By the end of this lesson, you will be able to:

• Explain the purpose of response and recovery planning.
• Identify the key elements of an effective response and recovery framework.
• Describe the relationship between response, recovery and organisational resilience.
• Recognise the importance of maintaining and exercising response and recovery plans.

International Management Standards 

The lesson will not recommend a specific operating standard for organisations when developing plans and mitigation, such as British Standards, ASIS Standards, ISO documents, or customised hybrid versions tailored to a specific business’s needs.

No matter the specific standards adopted by any organisation, the following information has been carefully crafted to seamlessly integrate into any organisation.

Throughout the lesson, references will be made to various standards and resources, allowing businesses that haven’t adopted a particular standard to access the necessary “information” or conduct further reading.

This approach facilitates the option of implementing these standards should they be deemed desirable for the organisation’s overall security objectives.

Proven Systems

This lesson comprehensively explains effective and time proven strategies for establishing and managing a robust private sector organisational protective security processes that skilfully mitigates terrorist and hybrid threats.

It will illustrate how this process can be successfully designed, implemented, and monitored within the framework of any size of organisation within the private sector.

In small businesses, the entire protective security process can be managed by a lean team, consisting of one or two staff members, who take on the diverse responsibilities or, alternatively, by hiring a consultant to oversee the entire process on behalf of the business but work with members of the organisation to up skill.

The key distinction for small businesses lies in the formulation of a single, all encompassing preparedness plan that covers the entire protective security system to effectively combat terrorist & hybrid threats.

Or, current business security policy can be added to with CT mitigation.

On the other hand, in large organisations with multiple departments, each with their distinct policies and procedures, specific counter terrorism requirements must be seamlessly integrated to forge a comprehensive mitigation programme that naturally permeates throughout all business functions.

This cohesive approach ensures that protective security becomes organic to the organisation’s overall operations and reinforces its resilience against potential terrorist threats.

Other Elements

This lesson will not focus on other critical elements of a protective security, specifically Prevention & Detection systems, and the application of layered security principles. These aspects are thoroughly addressed in separate programmes within the Mildot Group Learning Platforms.

However, the information presented will be centred on response and recovery considerations for small to large organisations, crucial components that should be seamlessly integrated into the final plans, including Crisis & Business Continuity Plans, and other relevant elements.

By doing so, organisations can construct a robust and effective counter-terrorism programme that takes into account all essential aspects of preparedness and resilience.

By incorporating these response and recovery strategies into their overall framework, organisations can ensure they are well equipped to face and mitigate potential threats and swiftly recover from any adverse incidents.

.

Immediate Response Issues

Emergency Services Response Gap

During and within the aftermath of a terrorist or hybrid attack at a private sector organisation, the situation will be chaotic and unpredictable, leading to a critical “Emergency” Services Response Gap, which affects all emergency services.

The extent of this gap can vary significantly, ranging from a few minutes to as long as an hour, contingent upon the nature and method of the attack.

The key takeaway here is to acknowledge and embrace the fact that there will be a period of time during which staff and customers must be adequately prepared to “detect“, “respond” effectively under their own direction.

This underscores the importance of empowering individuals within the organisation to be self-reliant and well-trained in incident response procedures.

By fostering a culture of preparedness and equipping personnel with the necessary knowledge and resources, organisations can enhance their ability to cope with the immediate response and aftermath of a terrorist incident until professional emergency services “arrive” and assume control.

Organisations must prioritise the establishment of comprehensive incident response and risk communication action plans. These plans enable staff to take charge of the situation until the emergency services arrive and provide guidance on the type of response to expect from them.

This period, often referred to as “Organised Chaos” in military terminology, holds immense significance as it can be instrumental in saving lives and protecting valuable business assets. The key lies in empowering staff to initiate control over the situation at the earliest opportunity.

It may begin with a single individual taking charge, inspiring others to follow suit and gain confidence in their response efforts. The importance of this initial phase cannot be underestimated, as it sets the stage for effective crisis management.

Private sector organisations and contractors operating in complex and challenging international environments have long recognised the value of “training” programmes that equip staff to respond positively and efficiently during crisis situations, drawing from the principle of organised chaos.

Once the emergency services arrive, they will commence the process of taking control of the scene.

However, the specific Method of Attack employed will significantly influence how and when the emergency services can fully establish control and effectively manage the situation.

This critical period, as previously highlighted, represents the Emergency Services Response Gap, which could vary greatly, ranging from a few minutes to an hour or longer, depending on the nature of the attack.

Organisations must recognise the importance of their staff being prepared to respond effectively during the Emergency Services Response Gap. By having well-designed action plans and “training” programmes in place, organisations can enhance their ability to handle crisis situations, minimise potential harm, and protect both lives and assets.

 

Crisis Communications

The organisation’s crisis communications can be a significant problem, as local and international media will descend into the area. They will use all channels to communicate with senior management, staff and customers for a response, a holding statement will be required by the organisation and delivered by the designated “media” liaison using pre-planned lines.

Family and friends of staff will inundate the organisation with questions using all options such as social media, email, and phone lines and make their way to the site and start asking questions.

A pre-planned message management system must be initiated rapidly. Communication is one of the most critical aspects of an organisation’s emergency response (ASIS EM 2008).  Preplanning and training are the only way to get ahead of the problem. The next lesson explains what you need to know about message management.

 

Psychological Impacts

In the aftermath of a terrorist or hybrid attack on a private sector organisation, staff and customers may suffer injuries or even lose their lives, causing profound and devastating effects on the people connected to them.

The psychological impacts of such traumatic events can begin to manifest rapidly and may evolve into long-term issues for those directly involved in the attack, as highlighted in a RAND report of 2018.

The emotional toll on survivors, witnesses, and their loved ones can be overwhelming, leading to feelings of grief, anxiety, fear, and uncertainty. The trauma of the incident can also trigger a range of psychological responses, such as post-traumatic stress disorder (PTSD), depression, and other mental health challenges.

Addressing the psychological well-being of those affected is crucial in the aftermath of a terrorist attack. Providing immediate and ongoing support, counselling, and access to mental health “resources” is essential to help individuals cope with their experiences and navigate the healing process.

Furthermore, recognising the long-term nature of these psychological impacts, organisations should consider implementing long-term “support” programmes for those affected.

Creating a compassionate and supportive environment can make a significant difference in helping individuals recover and rebuild their lives after such a traumatic event.

In addition to the physical and infrastructural damage caused by a terrorist attack, addressing the psychological aftermath is equally vital to fostering resilience and supporting the recovery of both individuals and the community as a whole.

Staff Action Plans

During a terrorist attack, the survival instincts of both staff and customers will come into play. Their primary focus will be on self preservation, prompting them to seek ways to extract themselves from the location.

If the attack is still ongoing, they will look to the organisation’s staff for guidance on finding exits or shelter in place locations (MTA, 2022).

To effectively respond to such situations, it is imperative for the organisation’s employees to be well-trained in basic incident response actions for various scenarios. Equipping staff with this knowledge enables them to direct customers and others towards safety, potentially saving lives during critical moments.

Immediate “first” aid capabilities among staff members are also crucial during a terrorist attack, as there will likely be casualties that require immediate medical attention. I

n the chaos of the situation, medical emergency services may face challenges in promptly arriving on site, as indicated by the NCTSO (National Counter Terrorism Security Office) guidelines of 2021.

Having staff who can provide immediate first aid can make a significant difference in stabilising injured individuals and increasing their chances of survival until professional medical help arrives.

This preparedness underscores the importance of comprehensive staff training and the importance of each team member knowing their role in responding to emergencies effectively.

The ability of staff to guide and protect customers, along with their capacity to deliver immediate first aid, can be critical factors in mitigating the impact of a terrorist attack and potentially saving lives.

Proper training and preparation ensure that the organisation is better equipped to handle the immediate aftermath of an attack until emergency services can fully respond to the situation.

Critical Information

In the aftermath of an incident, emergency services will require vital staff information to account for everyone and assess the situation effectively. To facilitate this process, the organisation must have a readily accessible system that allows for the accurate and rapid accounting of all staff members.

However, in the event of ongoing danger or destruction at the site, it might be impossible to access the location physically. In such scenarios, critical information should be stored at an off-site location, ensuring that it remains available and accessible to emergency responders.

Additionally, emergency services will also need access to site plans to comprehend the layout of the location and strategise their response efficiently. In cases where no prior liaison had taken place between the organisation and emergency services, obtaining this critical information becomes challenging.

Nevertheless, it is imperative for the organisation to have a designated responsible party or team that can swiftly provide this information to emergency responders.

Designating a specific individual or team responsible for supplying critical information to the emergency services can streamline the process and avoid delays. This person or team should be well-trained and prepared to liaise with the emergency services, ensuring they receive the necessary information promptly and accurately.

Being proactive in preparing this liaison can significantly aid emergency services in their response efforts and contribute to a more coordinated and effective overall response.

Having an accessible system for staff information, off-site storage for critical data, and a designated responsible party for coordinating with emergency services are all vital components of an organisation’s preparedness to respond efficiently during and after a terrorist attack, as emphasised by the UNOCT (United Nations Office of Counter-Terrorism) guidelines of 2022.

Grab Bag/Box

The preparation and availability of a “Grab” Bag/Box is a widely employed and an effective approach in crisis situations, especially for organisations and security consultants operating in challenging and complex environments.

This approach involves having a dedicated container that contains essential crisis equipment and “information“, and it can be adapted for use by any UK based organisation for crisis management.

The Grab Bag/Box serves as a centralised location for critical “data“, communication systems, and necessary equipment that the crisis management team can readily access during emergency situations.

It ensures that the crisis team members have immediate access to both hard and soft copies of vital information that can be used when liaising with emergency services during their response and interaction with other stakeholders.

Having this well-organised and readily available resource allows the crisis management team to respond swiftly and efficiently during high-stress situations. It streamlines their ability to access critical data and communication tools, enabling them to make well-informed decisions and communicate effectively with all relevant parties.

The approach is adaptable and scalable, making it suitable for organisations of various sizes and sectors. By implementing a Grab Bag/Box system, UK-based organisations can enhance their crisis response capabilities and maintain a high level of preparedness during challenging circumstances.

It promotes a proactive and well-coordinated approach to crisis management, enabling organisations to navigate emergencies with greater efficiency and effectiveness.

Critical Assets

Critical assets that facilitate business operations are at risk of being destroyed or remaining active during or after a terrorist attack. To minimise the potential loss of assets and ensure the organisation’s longer-term viability, it is crucial to have a well-established system for remotely shutting down operations or initiating shutdowns from a shelter-in-place location.

The ability to shut down operations remotely can prevent further damage to assets and infrastructure. By promptly deactivating critical systems, the organisation can mitigate the impact of the attack and potentially safeguard valuable resources.

Additionally, initiating shelter-in-place procedures allows staff to find secure locations within the premises, minimising their exposure to immediate danger.

Implementing such a system aligns with the principles of business continuity planning, as highlighted in the ASIS Business Continuity Guideline of 2005. By having these procedures in place, organisations can better protect their personnel and assets while also ensuring the continuity of essential functions that support the business’s overall resilience.

Preparation and proactive measures, including the establishment of remote shutdown and shelter-in-place procedures, can make a significant difference in mitigating losses and ensuring the organisation’s ability to recover and resume operations as swiftly as possible after a terrorist attack.

Pre-planned Response

A prompt and efficient organisational response to a serious incident can have a profound impact on the organisation’s overall recovery and the well-being of its staff. In such critical situations, all victims, including employees and customers, will require immediate assistance and support.

Having a pre-planned system in place for handling the entire process, from immediate response through to recovery and the eventual resumption of operations, is essential. This systematic approach is emphasised by Green et al. in 2008.

By swiftly and effectively responding to the crisis, the organisation can mitigate further damage, reduce the impact on staff and customers, and ensure that necessary support and aid are provided to all those affected.

This includes not only physical assistance but also psychological and emotional support to help individuals cope with the aftermath of the traumatic event.

Additionally, having a well-structured plan in place allows the organisation to maintain control of the situation and navigate the recovery process more efficiently. It helps ensure that resources are allocated appropriately and that essential operations are restored in a well-coordinated manner.

Overall, the combination of a rapid and efficient response, comprehensive support for victims, and a pre-planned system for managing the recovery process contributes significantly to the organisation’s resilience and ability to recover from the impact of a terrorist attack.

By prioritising preparedness and having appropriate measures in place, the organisation can better navigate the challenges and move towards the eventual resumption of operations with greater strength and stability.

Planning & Preparation for Post Event issues from a Terrorist Attack

The planning, preparation, and development of contingency plans play a pivotal role in enhancing an organisation’s overall resilience and business continuity capabilities.

By integrating contingency plans into the broader BC framework, the organisation gains a structured and unified response capability, particularly in responding to a terrorist attack, as underscored by the ASIS Business Continuity Guideline of 2005.

The BC planning model is well-suited to encompass the necessary measures for effectively responding to and recovering from a terrorist attack. By aligning specific contingency plans with the organisation’s main BC plan, unnecessary duplication of effort is avoided, ensuring that critical information and response strategies are well-integrated and streamlined.

The synergy between contingency plans and the overarching BC plan fosters a comprehensive approach to crisis management. It enables the organisation to address various scenarios and potential threats, including those posed by terrorist attacks, while maintaining a cohesive response strategy.

Furthermore, incorporating specific contingency plans into the BC framework enhances preparedness and ensures that the organisation’s resources, including personnel, equipment, and communication channels, are optimally utilised during a crisis.

This avoids confusion and facilitates a swift and coordinated response during high-stress situations.

By viewing contingency plans as an integral part of the broader BC planning process, organisations can proactively enhance their ability to respond to unforeseen events and recover efficiently from disruptive incidents like terrorist attacks.

This cohesive approach strengthens the organisation’s resilience and fosters a culture of preparedness that safeguards its overall continuity and long-term success.

 

Overall Responsibility

The size of an organisation plays a pivotal role in determining the specific requirements for effectively mitigating a terrorist attack. This process involves active participation from both internal departments and external stakeholders, particularly the emergency services, who collaborate to provide a multi agency response, as highlighted by Green et al. in 2008.

To ensure a comprehensive and coordinated approach, it is essential for a senior management team member to assume responsibility and oversee the planning process, implementation, and monitoring of the system.

This leadership role reinforces the understanding among management and staff at all levels that counter terrorism (CT) contingency plans are integral to the overall governance priorities of the organisation, aligning with the ASIS Business Continuity Guideline of 2005.

Having a senior management team member leading the effort instils a sense of importance and urgency regarding CT preparedness throughout the organisation. It underscores that CT planning is not just an isolated initiative but a fundamental part of the organisation’s overall risk management and business continuity strategies.

Moreover, active involvement from internal departments and external stakeholders, such as the emergency services, fosters a collaborative approach that draws on the expertise and resources of different entities. This multi-agency response (Interoperability) ensures a more robust and effective plan, taking into account diverse perspectives and expertise.

Tailoring the CT mitigation approach according to the organisation’s size, engaging all relevant internal and external stakeholders, and assigning a senior management team member to oversee the process are essential steps in fostering effective CT preparedness.

By doing so, the organisation can better protect its assets, people, and continuity, recognising CT contingency plans as integral components of its overall governance priorities.

Crisis Management Team Priorities & Appointments

Specific priorities must be established from the outset to ensure that the protective security planning process remains focused, efficient, and effective.

These priorities encompass a range of objectives aimed at safeguarding the organisation, its staff, and its assets in the event of a terrorist attack.

Some examples of these primary objectives are as follows:

1. Prevention & Consequence Minimisation. Implementing measures to prevent terrorist attacks or minimise their impact if they occur is paramount. This involves proactive security measures, threat assessments, and risk mitigation strategies.

2. Protecting “Human” Life. The protection of human life is of utmost importance during a crisis. Plans must prioritise the safety and well-being of staff, customers, and other individuals present on the premises.

3. Crisis & Risk Communications. Effective communication is crucial during a crisis. Establishing clear communication channels and protocols ensures that accurate information is disseminated to relevant parties, both internally and externally.

4. Minimising Personal Injury. Implementing safety measures and training staff in first aid and emergency response can help minimise personal injuries and increase the chances of survival in a crisis.

5. Reducing Exposure of Assets. Protective security planning should also include strategies to safeguard critical assets and sensitive information, reducing their vulnerability to potential threats.

6. Restoring Normal Operations. Swiftly restoring normal operations is essential for business continuity. Having contingency plans in place facilitates a smooth recovery process.

To achieve these objectives effectively, regular staff training and exercises are necessary. This ensures that the crisis management team and the entire organisation are well-prepared to respond efficiently during a crisis.

Moreover, promoting a security culture within and outside the organisation fosters a proactive and vigilant approach to security, encouraging everyone to play a role in safeguarding the organisation.

In addition, involving contractors and emergency services personnel in the planning process fosters a collaborative multi-agency “response“. This ensures that all relevant stakeholders are aligned and coordinated during a crisis, optimising the overall response effort.

By prioritising these objectives and incorporating comprehensive training and collaboration, organisations can enhance their protective security capabilities, fortify resilience, and effectively mitigate the impact of potential terrorist attacks.

Crisis Team Appointments

To facilitate the planning process, training, and response after an incident, the designated senior manager must assemble the crisis management team and assign key appointments (ASIS EM, 2008).

A. Crisis Director or Crisis Coordinator. Senior command and control personnel responsible for overseeing the entire crisis management process.

B. Public Affairs and Communications Lead. Responsible for handling communication, public affairs, and media relations during the crisis.

C. Family and Victim Liaison.  Responsible for providing support and assistance to families and victims affected by the incident.

D. Emergency Services Liaison. Responsible for coordinating and liaising with the emergency services, ensuring effective collaboration during the response.

E. Social Media and Digital Communications Lead. In charge of managing social media platforms and the organisation’s website communications during the crisis.

F. Employee Support and Welfare Officer. Responsible for providing human resource support and ensuring the welfare of employees during the crisis.

G. Training and Compliance Lead. In charge of training the crisis management team, maintaining records, and ensuring compliance with relevant protocols and regulations.

By assembling a well-structured and capable crisis management team with designated roles and responsibilities, the organisation can respond effectively to a terrorist attack, ensuring a coordinated and efficient response that addresses various aspects of crisis management and support.

CM Team Responsibilities

During the planning process, the crisis management team must collaborate and collectively determine the following:

1. Objectives and Priorities. The team needs to identify the primary objectives and priorities of the CT programme. This includes determining what needs to be protected, the key areas to focus on, and the overall goals of the program.

2. Roles and Responsibilities. Each team member’s specific roles and responsibilities should be clearly defined based on their expertise and competencies. This ensures a coordinated and efficient response during a crisis.

3. Decision-Making Process. The team must establish a decision making process, including how decisions will be made, who has the authority to make them, and how information will be communicated among team members.

4. Communication Channels. The team should establish effective communication channels to ensure seamless information sharing within the team and with external stakeholders, such as emergency services and media.

5. Resource Allocation. Decisions regarding the allocation of resources, including personnel, equipment, and finances, should be made based on the identified priorities and objectives.

6. Training and Preparedness. The team should plan and implement training sessions, drills, and exercises to prepare team members for different crisis scenarios and ensure their readiness to respond effectively.

7. Contingency Plans. The team should develop contingency plans for various scenarios and potential challenges, enabling the organisation to adapt quickly to changing circumstances during a crisis.

8. Coordination with External Stakeholders: The crisis management team must also establish liaisons and communication protocols with external stakeholders, such as emergency services, and other organisations, to facilitate a multi-agency response.

 

 Common Elements

Emergency planning often includes generic elements that are common across different organisations.

Many key responsibilities outlined above may already exist within an organisation’s current Crisis Management & Business Continuity Team, as noted by Fennelly in 2004. This is especially true for medium to large organisations that have established crisis management structures.

In such organisations, crisis management and business continuity teams are likely to have pre-assigned roles and responsibilities to handle various aspects of emergency planning and response.

These teams may have personnel who fulfil roles similar to those mentioned earlier, such as communication and media relations, victim support, emergency services liaison, and more.

Having these key responsibilities already in place streamlines the planning process and enhances the organisation’s readiness to respond to emergencies effectively.

The existing crisis management team’s experience and expertise can be leveraged to build upon and tailor the emergency planning to the organisation’s specific needs and risks.

While the general elements of emergency planning may be similar, each organisation should adapt its approach to fit its unique characteristics, operational environment, and potential threats.

This customisation ensures that the emergency planning aligns closely with the organisation’s structure, culture, and objectives, ultimately strengthening its preparedness and response capabilities.

Needs Assessment & Risk Analysis

A Needs Assessment & Risk Analysis details a comprehensive list of threats and vulnerabilities that will be similar for all organisations. 

This lesson lays out how to put the team together and who is best suited to lead and conduct the Needs & Risk Analysis and the main reporting elements that the report and recommendations must communicate.

Utilising the existing crisis management team as a foundation can be highly advantageous, as they are already familiar with the organisation’s structure and operations.

This team can facilitate a smooth and ready made group to undertake the protective security programmes design and implementation, enabling a coordinated effort in anticipating, planning, responding, and recovering from a terrorist attack.

Involving a consultant during the initial stages of the programme can provide valuable guidance and expertise, ensuring that the planning process is efficient and effective.

This consultant can help the team stay focused and avoid unnecessary tangents or duplication of efforts, streamlining the overall process.

An alternative option is to up skill the head of resilience and security within the organisation to lead the team through the CT programmes development.

This approach not only leverages internal expertise but also bridges the knowledge gap within the team, ensuring a comprehensive understanding of private-sector counter-terrorism measures.

For small businesses with fewer resources, a more streamlined approach using one or two individuals with the guidance of a consultant can still lead to an effective protective security system.

By consolidating requirements into a single document, these businesses can cover all necessary aspects of the protective security system without unnecessary complexity.

Overall, whether through a well established crisis management team or a smaller group with external guidance, the team approach to CT and protective security programme development enhances an organisation’s ability to address threats cohesively.

By bringing together a team with a shared understanding of private-sector counter-terrorism measures, the organisation can maintain a credible and robust system that mitigates risks and enhances overall resilience. 

Needs, Threat, Vulnerability & Risk Assessment Recommendations

The following are more recommended elements that assists in communicating the report to senior management (ASIS BC, 2005):

1. Human Costs. Assessing the potential human costs involves evaluating what is required for an effective emergency response to mitigate physical and psychological harm to employees and customers. This includes estimating the potential loss of life and the number of injuries that could result from various methods of attack. Understanding the human impact of the event is crucial for developing appropriate support and recovery measures.

2. Financial Costs. Evaluating the potential financial costs is essential to understand the economic impact of the crisis. This includes considering the costs of legal claims and compensation, business downtime, and staff pay. Additionally, estimating the costs of medical and psychological assistance for affected staff and customers is vital for financial planning and resource allocation. The Needs Assessment produces most of these costs.

3. Corporate Image Costs. Mitigating corporate image costs is crucial for protecting the organisation’s reputation and public perception. A planned immediate response, post-event recovery with a controlled message management plan, and a designated media relations point of contact help to shape the organisation’s narrative during and after the crisis. Close liaison with emergency services as part of the multi-agency response can also ensure that accurate and timely information is shared with the public.

When preparing the report and CT recommendations, it is essential to keep them succinct and focused on explaining the key issues and how the organisation can mitigate each risk. The report should avoid delving into the detailed timelines or the full-blown implementation plan, as it may not be necessary at this particular stage of the planning process.

The primary goal of the assessments report is to provide a clear and concise overview of the identified risks and the corresponding strategies to address them. It should highlight the existing systems or measures that already mitigate certain risks, acknowledging the organisation’s current strengths.

Avoiding unnecessary elaboration and lengthy implementation plans is crucial to streamline the process and prevent wasting time. Senior management may require revisions or request additional versions of the report, and it’s best to take one step at a time in this phase of the planning process.

By focusing on the key issues and providing actionable recommendations, the report can effectively guide senior management in making informed decisions and prioritising risk mitigation efforts.

This approach ensures that the organisation remains agile and responsive, enabling a smooth and efficient progression toward strengthening its capabilities.

Planning & Report Process

The C.A.K.E process, as used by the British military, offers a valuable approach to efficiently plan and implement a protective security programme while being steps ahead in the planning process. This principle is another option similar to the Economy of Effort Principle.

This method revolves around delegation and making effective use of downtime and personnel not directly involved in the final report drafting and sign off, allowing them to work on other tasks to progress the planning process.

The CAKE process comprises the following components:

1. Concurrent Activity. Delegate tasks related to the next stage of the planning to appropriate staff members. This ensures that multiple tasks are progressing simultaneously, maximising efficiency and productivity.

2. Anticipation at all levels. Engage department heads and personnel responsible for organisational policies, briefing them on upcoming requirements and asking for their input on potential hurdles or legal considerations. This proactive approach helps anticipate and address issues in advance.

3. Knowledge of specific requirements. Delegate team members to gather specific information needed for the planning process in the future. This includes acquiring cost and technical data, such as those related to Hostile Vehicle Mitigation (HVM) and technical security costs and lead times.

4. Efficient use of time. Plan and brief team members on delegated tasks daily, if necessary, to ensure timely progress. Request situation reports from designated personnel at set times or dates to stay informed and maintain accountability.

By adopting the CAKE process, organisations can ensure that the implementation plan is prepared efficiently and effectively, avoiding delays and unnecessary duplication of efforts.

This systematic and streamlined approach fosters a cost and time-efficient planning and implementation period, allowing the organisation to stay ahead of potential challenges and enhance its overall security preparedness.

Media Relations

Media relations can be a critical area of weakness for many organisations during and after a crisis, especially in the aftermath of a terrorist attack. The media plays a crucial role in disseminating information and shaping public perception, making it a significant challenge for organisations to manage effectively.

To address this challenge, it is essential for the crisis management team to be well-prepared in media relations.

This includes developing clear and consistent media lines, which are key messages that convey accurate and essential information to the public and media.

Training all members of the crisis management team in media relations is crucial to ensure that everyone understands their role in communicating effectively during a crisis.

Poor communication with the media can have severe consequences for an organisation’s reputation and long-term viability.

Misinformation, confusion, or delayed responses can lead to speculation and loss of public “trust“. Conversely, well-handled media communications can demonstrate transparency, competence, and a commitment to managing the crisis responsibly.

An organisation’s reputation is a valuable intangible asset that takes time to build but can be damaged quickly by inadequate crisis communication.

Therefore, having a well-prepared crisis management team that includes media training can significantly mitigate risks and help the organisation maintain control over its narrative during a crisis.

By addressing media relations proactively, organisations can minimise reputational damage, effectively manage public perception, and emerge from a crisis with their reputation and long-term viability intact.

Effective crisis communication is an integral part of an organisation’s overall resilience and preparedness in the face of potential threats and challenges.

Conclusion

Understanding and addressing the issues discussed above are crucial in guiding the design and implementation team to deliver a credible and comprehensive report and recommendations to senior management.

Moreover, this process will also contribute to the development of a detailed and effective Crisis & Business Continuity plan that also incorporates interoperability considerations for the emergency services.

By involving the crisis management team throughout the whole process, key members of the organisation’s management can be up skilled for the crisis management and business continuity plans.

This not only enhances the organisation’s preparedness for potential serious incidents but also strengthens its overall crisis management capabilities. Recognising that terrorist and hybrid attacks are also a crisis for staff, families, and other stakeholders underscores the importance of a well-prepared and coordinated response.

Building relationships with public sector agencies and developing effective multi-agency response plans are essential aspects of mitigating the impact of a terrorist attack.

Copyright & Terms of Use Apply

Audio Option. Listen to the audio discussion to help you assimilate the information