Thoughts, insights and topics to ponder regarding business continuity plan development, maintenance and management. And given the opportunity, I will surely comment on BCP testing and tabletop exercises too.
COVID-19 has been a decisive test of your
business continuity plan, and it may still be challenging you today as the
pandemic rages. So why would now be an optimal time to develop or revise your
plan? For one thing, you likely learned a lot about what worked, what you might
have done differently, and what definitely wasn't covered in your plan. For
another, especially since we may face similar challenges over the next few
months, you need to review your assumptions and decisions and identify any
required changes. In reality, COVID-19 may not be the only pandemic we face in
the year or years ahead.
The pandemic certainly has changed things - work, home life, school, socializing, etc. - in ways we would never have imagined. We work at home, school at home, socialize over Zoom, have our groceries delivered, and take all the precautions needed to keep ourselves and our families safe. At present, there is no real end in sight to COVID-19 and no view into what “normal” might look like in the future because the situation changes all the time. It’s hard to know if anyone has figured out the real impact of the pandemic on our home and work lives. For this reason, business continuity planning takes on even more importance since poor planning can hurt our ability to continue day-to-day operations.
January 15, 2020 - The recent situation with Iran brings again to mind the need to be aware of the potential for terrorism, both from overseas and from US actors who have been radicalized. While many of us have kept the possibility of terrorism in our sights, many others have become lax in their risk assessment and planning for the effects of terrorism. We hope these articles will help you refocus on this threat.
Terrorism is never far from the headlines and while the impact on human lives is, of course, the biggest and most important consequence of a terrorist incident, it is not the only one; businesses need to prepare for the potential impacts. (Item #1)
Effectively communicating information in a crisis is an important part of business continuity planning. Get the steps to follow in this emergency communication plan template. (Item #2)
Terrorism insurance is a corporate necessity and there are coverage options. Can you rely upon your insurance plan to protect your business interests? (Item #3)
In light of the recent attempted mail bombings, the deadly shooting at a Pittsburgh synagogue, and a rise in hate-related incidents, two of the country’s top experts in terrorism and homeland security discuss present and future threats to and in the United States. (Item #4)
December 11, 2019 - Communication is a critical component of planning for business continuity. Whether it's a crisis response team communicating among themselves or communicating to the public, communication is an area that should be considered in your business continuity plan. All too often, however, not enough time and attention is devoted to this area. This week we are providing some information about this critical aspect of business continuity.
Technology has advanced to the point of being a near-constant force in society, and as such has given many ways to help keep society safe. In today's world, planning for violence could end up being the most important decision a business can make. (Item #1)
Effectively communicating information in a crisis is an important part of business continuity planning. Get the steps to follow in this emergency communication plan template. (Item #2)
Here's what you should know when it comes to communicating efficiently and ensuring business continuity during a natural disaster. (Item #3)
A crisis communications plan helps you determine how to provide accurate information to the right people via the appropriate channels. (Item #4)
You may not be able to control the crisis---whether it's a life- or environment-threatening disaster (like an oil spill) or a reputational risk (like accusations of fiduciary mismanagement)—but you can control your response. (Item #5)
November 13, 2019 - Along with your employees, your good reputation is your most important asset. What are you doing to protect it and maintain its value? If you're not doing enough, you could be in danger of losing or having a tarnished reputation from which you may never recover. Look at this week's articles for some things you could be doing right now to maintain or improve your reputation.
(#1) There's one question, the answer to which can affect your longevity more than nearly anything else: How's your reputation?
(#2) We've compiled 72 of the most eye-opening reputation management stats for 2019.
(#3) If you take the right steps, you can protect your reputation and maintain a strong brand.
(#4) Here are five ways that you can protect your company's reputation on social media.
(#5) However, one defines reputation, everyone agrees it's a precious enterprise asset and recognizes a reputation that has been damaged beyond repair.
October 30, 2019 - As meeting planners, you are constantly planning for everything, but we hope you don't forget to plan for unexpected disturbances and crises. Especially in this day and age, we all need to have plans and strategies for dealing with terrorists, active shooters, strikes, and other disruptions. These articles may help you develop those emergency and crisis plans.
"Woulda-coulda-shoulda" regrets are never more painful than when we must admit, in retrospect, we didn't have a contingency plan in place. (Item #1)
The reality is that while you can't foresee and prevent many crises, there are steps that every planner should take to ensure they are prepared to handle any issue that comes along, as part of their "duty of care." (Item #2)
A strong and up-to-date plan should be in place to ensure the safety and security of attendees regardless of where a meeting is held. (Item #3)
No matter the size or location of the area you are trying to protect, following these steps will help you have a safe and enjoyable event for your attendees and staff. (Item #4)
These resources may be helpful when developing your emergency/crisis plan for meetings. (Item #5)
August 7, 2019 - If you're not, you should be planning to do so. Once you have your plan, you need to see if it will work as you think it will. Better to find out now that someone in a key role will freak out than wait until that individual does so in a crisis. Or, if there are a couple of steps missing, wouldn't it be better to find out now that in a critical situation? Silly question, right? Testing/exercising your plan will help you determine if your plan might be successful, but even any failures will teach you something.
How will your business respond if faced with a natural disaster, a cyberthreat or an active shooter scenario? (Item #1) It's only through a failover that you'll shake out the bugs and ensure that your alternate facility or alternate processing capability accounts for all the actual interdependencies. (Item #2) You need to thoroughly scrutinize how well your plan performs and allow enough time to resolve any issues before they impact the ability to restore operations in case of an emergency. (Item #3)
Exercising is, to this author, about enhancing capabilities, your people and the resources they need to have to respond effectively and confidently in situations they have never fully experienced before. (Item #4) This article attempts to provide some guidelines for developing and administering employee awareness training programs in organizations. (Item #5) Regardless of whether you call it a test or a drill, these lessons learned, tips and recommendations will enable you to develop and facilitate value-adding business continuity exercises. (Item #6)
July 10, 2019 - Corporate identity theft, which has been with us for years now, remains a huge threat as businesses continue to leave themselves vulnerable to this danger. Despite everything we do to protect our corporate identity, cyber thieves are continually discovering new ways to create havoc. Why should you worry? Identity theft can put your business - and you - at risk in many different ways. Check out this week's articles to learn how to protect your company or organization from identity theft.
As business identity theft increases, what you need to do to make sure that your company is secure? (Item #1) How do you prevent business identity theft? (Item #2) Don't let your company become an easy target for crafty cyberthieves; take control now to protect all that you've built today for tomorrow. (Item #3)
Here are some tips from BusinessIDTheft.org on protecting your business from fraud and identity thieves. (Item #4) Unfortunately, thanks to business identity theft, there are new unexpected risks to you and your business - risks they don't teach you about in business school. (Item #5) Here are some signs that indicate your business has been hacked, as well as the number one way to help put a stop to all attempts of cybercrime against your company. (Item #6)
June 26, 2019 - Cloud computing is growing by leaps and bounds and will continue to do so through the year and longer. If you haven't jumped on the cloud computing bandwagon yet, there are some benefits as well as risks you should be aware of. This week's articles provide some info on the state of cloud computing, the trends we are seeing, and the dangers lurking out there.
As multicloud strategies, 5G and containerization take hold, cloud computing is set to see some major disruption. (Item #1) A Forrester study predicts that enterprises must respond nimbly to address changing cloud markets and technologies. (Item #2) While today, it sometimes seems like we've seen the main components of cloud operations and all that's left to do is optimize them, history tells us that's not the case. (Item #3)
In its second decade, cloud computing has become a mature and reliable technology, but we still have only scratched the surface of the cloud's full potential as an enabler of digital business transformation. (Item #4) The white paper points out that cloud-based solutions can reap great rewards but also harbor hidden dangers. (Item #5) Chances are if you are in the events industry you have used AV at your events. There are proactive steps you can take to protect your data in the cloud. (Item #6)
June 12, 2019 - When it comes to events, Murphy's Law is always at work. All of us have no doubt been victims of it at one time or another. This week we are focused on avoiding those disasters that Murphy can cause, from natural disasters to technical ones to faulty marketing messages. We hope you'll find some helpful tips in these articles.
Chances are you won't avoid any and all problems that come up during your event but following this guide will certainly help you avoid the biggest disasters, even including dinosaurs running rampant and eating your guests. (Item #1) Here are 10 painful moments every event manager will have experienced at one time or another and how to tackle them. (Item #2) Learn from some of the industry's experienced individuals and consider the best ways to prepare for and tackle the unforeseen. (Item #3)
In this EventTalk, Dr. Gleb Tsipursky, known as the Disaster Avoidance Expert, talks about using a scientific approach to avoiding event disasters. (Item #4) Prospects are getting smarter. They'll avoid you and your marketing messages unless you also are smart about them and know how to build value and trust so they convert into attendees. (Item #5) Chances are if you are in the events industry you have used AV at your events. Chances are you've also run into an AV disaster...or two...or three. (Item #6)
May 29, 2019 - It's a crisis and your response has to help prevent the situation from going from crisis to chaos or worse. Your communication plan could help with this, but have you developed it enough to be useful in the current situation? Do you know what to do first and second? Or might there be another alternative to your current plan? (see Item #3) All of this week's articles talk about what to do and how to do it if a crisis occurs.
Communications must be at the heart of crisis operations from the very outset. (Item #1) Take some time to be sure that your communication and disaster response plan is up to date and ready. (Item #2) Anything you utter orally or digitally can and will be used against you. It's time to take a tough look at the PR crisis communications rulebook and write a new one. (Item #3)
This article addresses the crisis communication necessary for a business' employees and specific external stakeholders in relation to a business continuity plan. (Item #4) Failure to address the many communications issues related to crisis or disaster response can result in greater damage to the organization. (Item #5) In this article, seven communications executives from Forbes Communications Council offer tips for crafting more effective apologies from leadership, from swiftly addressing the issue to being sincere and empathic. (Item #6)
May 1, 2019 - Risk identification, analysis, and evaluation as well as risk management and mitigation... how many of these steps have you taken in your organization? We hope the answer is NOT zero, but, if it is, these articles can set you on your way. And if you have taken some steps, now might be the time to review what you've done and what you need to do. With risk, you're never finished.
Risk mitigation and management need to be long-term efforts by project directors throughout a project. (Item #1) Here are some of the forthcoming challenges facing risk management in 2019. (Item #2) Here are the biggest op risks for 2019, as chosen by industry practitioners. (Item #3)
Here are eight risks that may impact organizations in the next 12 months, no matter where they are on their digital journey. (Item #4) In the year ahead, companies will need to find meaningful and measurable ways to align and integrate risk management with core business objectives to pursue and meet their company's goals. (Item #5) Taking the steps outlined in this article enables all involved to have a comprehensive understanding of the hazards and risks that exist within facilities and processes, the consequences of the hazards present, and how those can be prevented or mitigated to protect workers' health and safety. (Item #6)
April 17, 2019 - If you have a business continuity plan, that's terrific. Obviously, you know how important it is to have a plan. But have you updated it lately? Considered any new risks for which you should plan? Made necessary changes in personnel? And if you don't have one, perhaps it's time you got started on one. This week's articles can be helpful regardless of your situation.
Keep in mind these types of risk as you develop or refine your business continuity plan. (Item #1) The more things change, the more they stay the same. What will 2019 bring for the world of BCM and IT/DR? (Item #2) What will be the most efficient ways to put the pieces of your business back together, following an emergency? (Item #3)
Business disasters come in all shapes and sizes. Prepare yourself and avoid the worse. (Item #4) The importance of business continuity planning is most strongly reflected in the 10 ways listed in this article. (Item #5) Identifying the benefits of a business continuity program helps you define benchmarks and see the light at the end of the proverbial BCM tunnel. (Item #6)
April 3, 2019 - Nearly all businesses use social media in one form or another, whether it's for marketing, customer/client communication, or other applications. We're not sure, however, if any businesses have made plans to respond to and manage a social media crisis. If you don't have a plan, these articles should convince you that you need one and also help you create one. Don't wait until it's too late to get started.
Use the tips in this article as a guide to help curb the spread of misinformation and improve your social media response to any crisis. (Item #1) What can you do about Twitter? (Item #2) Here's what to do if you end up with a full-blown social media crisis management situation on your hands. (Item #3)
Every company should have a social media crisis management plan in place; equipped with your crisis survival guide, you'll be prepared for even the worst situations. (Item #4) The worst time to start planning for a crisis is when you're in the middle of one. (Item #5) Like any other emergency strategy, a social media crisis plan is designed to offer a quick and appropriate response and funnel correct information to anyone looking to access it, including customers, employees, and the media. (Item #6)
March 20, 2019 - Every year recently seems to be the year of the cyberattack, and 2019 will be no exception. We no sooner figure out how to fend off one cyberattack than a new one is on the horizon. This week's articles focus on what types of attacks you need to look out for, how to strengthen your defenses, and even writing a cyberattack playbook. We think you'll find some helpful information here.
To better prepare one's company and employees for cyberattacks in this article, look to implement cybersecurity processes and strategies that are both layered, automatic and dynamic. (Item #1) Threat-based cybersecurity is a journey spanning the entire corporate lifecycle and requiring an ongoing commitment to cyber defense. (Item #2) There are ways to strengthen your systems against hackers, but first, you've got to know your threats. (Item #3)
If 2018 was the year of the ransomware attacks, 2019 will likely be known as the year our over-reliance on technology was tested. (Item #4) Business owners and web developers must prepare for the worst and take steps securing their web sites from the smartest hackers out there. (Item #5) The sort of cyber incident playbooks should be written for are the basic attacks including ransomware, DDoS attacks and data loss (this might want to be segregated into the different types of data the organization holds). (Item #6)
March 6, 2019 - A recent survey indicated that about 2/3 of the businesses that have continuity plans do not test them. Are you one of these businesses? If you don't test the plan, you will never be sure it will work as expected. There don't have to be elaborate scenarios or schemes; even simple tabletop testing will help you determine if things will go as planned. This week's articles provide some help with testing and training.
How will your business respond if faced with a natural disaster, a cyberthreat or an active shooter scenario? (Item #1) There are a variety of methods you can utilize to test the usability and effectiveness of your Business Continuity Plan. (Item #2) This article looks at the objectives, format, and scenario of business continuity exercises, and explains why scenarios are not the most important factor when planning an exercise. (Item #3)
Business continuity planning must be a process---not a one-time task. (Item #4) This article addresses several issues in an attempt to provide some guidelines for developing and administering employee awareness training programs in organizations. (Item #5) Without training, employees cannot be expected to know what is written in your plans, which hazards they could face, or how to respond to emergency situations. (Item #6)
February 20, 2019 - Just one year and a day after the anniversary of the Parkland shooting, another workplace active shooter took five lives in Illinois. Such violence has become so commonplace that it's critical we know what to do in the event of an active shooter or other violence -- and also how to recognize potential trouble and what to do about it. This issue can be helpful in determining your policies with regard to workplace violence.
This article about workplace violence answers these questions for the health and safety of your employees. (Item #1) For some occupations, violence is the 3rd leading cause of death. (Item #2) Where there is awareness of workplace violence, there is prevention. (Item #3)
Workplace violence prevention policies must be carefully crafted and legally balanced to offer support for victims and consequences for perpetrators. (Item #4) With mass shootings on the rise, experts share best practices for training employees how to react in an active shooter situation at work. (Item #5) You're at work and suddenly you think you hear a gunshot. What do you do? (Item #6)
February 14, 2019 - Event-Aware is a mobile application from Attainium Corp that simplifies building and deploying emergency response plans for meetings and events by putting the information literally at your fingertips. The service is the first of its kind, combining hands-on guidance with an easy-to-use consumer-style app that makes meeting and event emergency response plans actionable and visible.
Users of the Event-Aware app can retrieve all relevant plan components through an interface that is simple, powerful and intuitive. Whenever on-site event staff launch the app, it downloads the latest updates to plans, contact lists, schedules, and links to emergency services, venue staff, and local authorities. This ensures that event personnel on the ground have access to the current version of the plan whenever and wherever they need it, especially in a crisis situation.
“Every event organizer knows the importance of having an emergency response plan, but making that plan available to everyone who needs it and keeping it updated has always been an issue,“ said Bob Mellinger, Attainium CEO. “Event-Aware gives all users access to vital information even when their mobile devices are not connected to wireless or cell networks.”
The app, which is available for both Android and iOS devices, is supported by the Event-Aware team, who create tailored and relevant emergency response plans based on industry best practices. The team is available to assist users throughout the development and deployment process, incorporating the unique issues of various events.
If your next meeting/event needs:
- an Emergency Response Plan -
- a more prepared on-site team -
- venue, hotel, and local resources -
- immediate access to response procedures -
February 6, 2019 - Finding negative information or reviews of your company online is definitely troubling, but what are you doing to prevent such information from finding its way to Google searches or social media sites in the first place? It's a fact of life today that online reviews and information are the chief way people are getting information about your company and statistics show that those reviews are considered accurate by the majority of people reading them. Are you actively seeking ways to minimize the impact any negatives on your reputation? This week's articles may give you some insight in how to strengthen your online reputation.
Every touchpoint that a customer has with your business online is a contributor to its online reputation. (Item #1) You have significant control over your reputation as long as you are monitoring your Reputation Score and using the data to improve your customers' experiences. (Item #2) Whether you're just starting to take charge of your online reputation, you want to stay ahead of the pack, or you're a marketing agency offering valuable reputation management to clients, take a look at these trends in online reputation management in 2019. (Item #3)
In this day and age, small business owners can no longer afford to ignore their online reputation. (Item #4) With a careful marketing strategy and ORM best practices in place, it is possible to shape an online identity that conveys integrity, leadership, and trustworthiness. (Item #5) Online reputation management can take a considerable amount of effort. Luckily, there is a range of paid and free tools that can make your efforts easier. (Item #6)
January 23, 2019 - Communication -- internal, external, crisis, and just plain every day -- is a key component of every successful organization. We all have stakeholders with whom we need to communicate on a regular (even daily) basis but we often don't have plans that enable us to implement effective communication when we need it. This week we look at some of the components of effective communication and the impact communication has on the continuity of operations.
Communication planning is an intricate part of preparedness and any continuity process. (Item #1) Given its important role, crisis communication must be part of an effective business continuity plan, and not come as an improvised afterthought. (Item #2) At the center of a business continuity plan for instances such as last year's Strand gas leak is the challenge of communication. (Item #3)
Communicating during a crisis is one of the most important elements of a workplace disaster. (Item #4) Effective customer communication during a crisis really comes down to organization and collaboration. (Item #5) Despite having more channels, more ways to reach out to each other and more content, communication is breaking down in organizations. (Item #6)
Founder and president of Attainium Corp, which delivers business continuity, disaster recovery and crisis management services. Bob is also a much requested speaker and conducts the highly-interactive Disaster Experience tabletop exercises.
Posts
