Crisis Preparedness and Planning
Preparedness converts intention into capability. Know the planning hierarchy: a strategic crisis management plan (governance, activation, team roles), functional emergency response plans (life safety, evacuation, hazardous materials), business continuity plans (continuity of prioritized products and services), and recovery or restoration plans. Plans should be built from risk assessment and business impact analysis, not from a borrowed template.
Know the crisis management team: chair, coordinator and scribe, operations, communications, legal, HR, finance, IT, and liaisons, each with a named alternate and clear activation authority. Readiness depends on resource inventories, contact data, primary and alternate facilities, vendor and mutual-aid agreements, and training that progresses from awareness to tabletop, functional, and full-scale exercises.
Traps: treating an approved plan as readiness; writing a single-scenario plan that collapses when the scenario changes; omitting alternates and succession; running exercises with no objectives or no after-action follow-through; storing plans where they cannot be reached during a power or network outage; and assuming supplier or cloud continuity because a contract says “resilient.”
Rule of thumb: if an alternate cannot execute the first 60 minutes at 03:00 without the primary lead, the plan is not ready. Keep the first page to activation triggers, the call tree, and a first-hour checklist.
Worked example: Exercise design follows a loop: objective → scope and scenario → control and evaluation criteria → conduct → hot wash → after-action report → corrective actions with owners and dates → retest. An exercise without a corrective-action tracker is entertainment, not preparedness.