Emergencies, disasters and crises can be stressful, chaotic and financially imposing for organizations, yet some companies are still not prioritizing preparedness and response planning. To ensure the implementation of effective corporate emergency response plans, three essential steps must be performed on a continual basis. Companies must: (1) identify risks, threats and preparedness needs when developing response plans; (2) review plans for accuracy and update to account for new variables; and (3) verify the plan’s overall effectiveness. As a result, the ongoing process of preparedness is established, giving companies the best possible prognosis for a response.
Identify Preparedness and Response Plan Criteria
Company profiles are becoming increasingly sophisticated with an intricate network of technology, human resources and global influences. Companies must routinely identify relevant risks and threats to develop practical, compliant and up-to-date response plans. Improvising and implementing unplanned response actions for unrecognized scenarios often results in inadequate and potentially damaging outcomes.
Preparedness is a continual sequence of analysis. Operational consolidation, growth and changing threat variables require recognition. To prepare for and respond to an incident, emergency managers should identify the following preparedness and response planning criteria:
- What risks and hazards may result in an emergency or disaster response event?
- What processes are put in place to limit exposure to risks and hazards?
- What community/environmental sensitivities exist?
- Who will respond when an incident occurs?
- What processes, procedures and training are in place for responders?
- How will individuals/employees secure their safety?
- What tools/equipment are necessary to respond to an incident and who will provide them?
- What local, state and/or federal organizations should be consulted?
- What regulations apply?
With risks, threats and preparedness needs identified, companies should move forward with developing site-specific response plans. However, preparedness does not end with a completed response plan.
Review and Update Response Plans
Corporate preparedness programs and applicable emergency response plans should be reviewed for accuracy and updated for effective responses to newly identified variables. Employees familiar with and trained in preparedness efforts are more likely to ensure best practices are carried out.
Reviews of response procedures, risk mitigation opportunities, best practices, response objectives and operational requirements are necessary to ensure preparedness and effective response measures are in place. Reviews should include, but are not limited to:
- Data and computer needs: Review the procedural details of computer backups, data restoration methods and the minimum program needs to re-establish critical business processes. Companies should examine current data center outsourcing or other alternatives to ensure continuity and accessibility.
- Notification lists: Response plan administrators must be certain that newly-assigned personnel are included in the plan and that notifications are being delivered to accurate e-mail addresses and/or phone numbers. Review contact lists to ensure all necessary information is correct.
- Communication needs: Clear and effective communication channels must remain available to disseminate information to employees, assess and relay damage, and coordinate a recovery strategy. Evaluate current communication equipment and/or mass notification systems to communicate with key individuals, company employees or an entire client base, as each scenario deems necessary.
- Supply chain: As company needs change and new suppliers come online, potential suppliers should be evaluated and plans should be updated to reflect any changes. Alternate resources should be reviewed to ensure availability, delivery and continued operations in the event primary suppliers are not available when needed.
- Essential personnel: Ensure necessary minimum staffing levels are acceptable to remain operational. Review individual responsibilities and recovery time objectives with staff, contractors and suppliers.
- Equipment needs: To minimize downtime and additional recovery efforts, review availability of necessary equipment and establish processes for response, recovery and continued operations.
Reviews of company emergency response plans should include debriefings with collaborative response entities. Meetings with these outside responders should confirm specific plan and response details that can be carried out to be consistent with best practices and company protocols. Groups to consider in planning reviews include, but are not limited to:
- Local responders (e.g., fire, police, emergency medical services)
- Government agencies (e.g., LEPC, emergency management offices)
- Community organizations (e.g., Red Cross, weather services)
- Utility companies (e.g., gas, electric, public works, telephone)
- Contracted emergency responders
- Neighboring businesses
Verify Effectiveness and Accuracy of Response Plans
The overall accuracy and effectiveness of the emergency response plan must be evaluated and verified regardless of the threat or hazard. Training and exercises are valuable verification tools that can confirm effective response planning and preparedness efforts. Verification includes, but is not limited to:
- A system for assessing emergency scenarios and prioritizing incident responses.
- Thresholds and procedures for activating the Incident Management or Crisis Management Team.
- Notification information. If maintaining accurate contact information is challenging, consider opting for an e-mail verification system that enables each contact to verify their contact information.
- Roles and responsibilities of the Incident Management or Crisis Management Team members.
- Communication and notification procedures to facilitate interaction among responders and the Incident Management Team.
- Guidelines and checklists to assist in an efficient and organized response.
- Confirmation of on-site hazardous materials details, response equipment and response times.
Technology like SMARTPLAN™, our web-based response planning application, provides companies with the tools to balance enterprise-wide standardization and site-specific regulatory criteria. Companies responsible for multiple buildings, possibly in various locations, should demonstrate a commitment to effective emergency response management and planning by creating a systematic template for incident response policies, procedures and practices. These templates should enable users to incorporate the detailed, site-specific data necessary for an effective response.
Learn more about how Jensen Hughes can assist with emergency preparedness, response and recovery in your organization.