Hurricane Decision with a Penalty Clause
You are the corporate security director for a chemical blending plant on a river, 320 employees, running 24/7. A Category 2 hurricane is forecast to make landfall within 54 hours and the track has shifted twice in 12 hours. The plant manager wants to keep the second shift running because the customer contract carries $250,000 a day in penalties. EHS wants a full shutdown and evacuation at 36 hours out. The corporate crisis team is in another hemisphere. Nine contractors and two truck drivers are on site without badges. The last full exercise was 14 months ago, 40% of supervisors have no crisis training, and the siren test failed in two of six zones last quarter. The county EOC has asked for your status.
1. What decision framework and timeline do you put in front of the plant manager, and who decides?
Read the worked answer
Predefined triggers, not a debate at hour 50. Convene incident command now with the plant manager, EHS, operations, HR and security, and agree the trigger table: wind speed threshold, river gauge level, storm surge forecast, and any county evacuation order - any one of which initiates shutdown, with a hard decision point at 36 hours and evacuation complete by 24 hours.
Who decides: the plant manager has site authority but not unilateral authority over a life-safety call. Bring the corporate crisis team in by phone immediately, and if they cannot be reached, invoke the delegation-of-authority clause in the crisis plan and document who assumed it and why. A plan that stalls because headquarters is asleep is not a plan.
Put the economics in front of him honestly: two to three days of shutdown is $500,000-$750,000 in penalties, plus the insurable and negotiable contract exposure. That is smaller than the cost of one serious injury, one chemical release into a flooded river, or one regulatory action. Life safety outranks the penalty clause, and the decision and its reasoning get written down.
2. How do you handle communications and accountability for everyone on site, including the nine unbadged contractors and two drivers?
Read the worked answer
Accountability first, because you cannot evacuate a population you cannot count. Physically walk the site and headcount against the gate log - the nine contractors and two drivers are exactly the population that gets missed, so treat the gate log as unreliable and verify by area. Issue temporary badges or a signed visitor log immediately, and give names to the EOC.
Notification: activate mass notification with a confirmation/roll-call requirement, not a broadcast, so silence is visible. One spokesperson, pre-scripted messages, and a designated employee hotline for family inquiries so the front desk is not overwhelmed.
External: report to the county EOC with current headcount, chemical inventory on site, and your evacuation routes - they need the inventory in case flooding causes a release. Coordinate with EHS on tank anchoring, shutoff and containment before water arrives.
Also confirm the two failed siren zones have an alternative: personal notification, physical runners, or a public-address sweep. Do not rely on a system you know is 67% functional.
3. What do you do in the first 24 hours, and what after-action items follow?
Read the worked answer
First 24 hours: close the badge gap and headcount the contractors; get the siren vendor on site to test the two failed zones or designate the manual alternative; name the ride-out team by name (not by role) with supplies, fuel and communications; run 30-minute just-in-time briefings for supervisors, since 40% have no training and there is no time for a course; confirm the mass notification system actually reaches the contract workforce; and document every decision with time stamps.
After action - schedule while the event is fresh: a full exercise within 60 days covering the exact scenario, a supervisor crisis-training requirement with a completion deadline, a siren maintenance contract with monthly test reporting, a contractor pre-registration requirement that makes unbaged presence impossible, and a review of the delegation of authority so a hemisphere of distance never again stalls a life-safety decision. Assign each item an owner and a date, and report completion to the corporate risk committee. After-action lists that are not tracked become the next exercise's findings.