Best Practices for Plan Review
Conducting an annual review of your Organizational Resilience Plan(s) is always a best practice. At Risk Resiliency we use a XX step process that incorporates best practices to ensure a comprehensive review and accurate update.
Where Should You Start?
Engage both internal and external stakeholders to form a planning workgroup. Often, you may need to establish threat-specific workgroups depending on the sensitivity of the threat. Or, depending on your threat profile, establish just one workgroup. Ensure a regular cadence of meetings and consider starting a workgroup charter. Once the workgroup is established, update and refresh your risk assessment, or conduct a new one. I find it best to engage a third party to conduct risk assessments, as they can provide an unbiased opinion of the organization's risks and threats without succumbing to the "Oh, that will never happen here" bias. You should always have your risks ranked by most likely and most severe impacts. This will allow a gap analysis of your incident-specific response plans to ensure you have plans that cover the highest frequency and impact scenarios.
Now, it is time to assess the plans against changes in operations or hazards to ensure that there are no gaps. Conduct a tabletop exercise or full-scale drill to test the updated plan's effectiveness and identify opportunities for improvement. You should track changes and record them in a log to clearly document the updates, assigning any additional responsibilities for each emergency scenario to the correct stakeholder. Finally, release an internal memo to ensure all employees, contractors, and vendors are familiar with the plan and their role within it.
By following these best practices, organizations can ensure their emergency response plan is comprehensive, regularly reviewed, and effectively addresses potential hazards to protect people and property during an emergency.
领英推荐
Key Steps for an Emergency Response Plan Review
Important Aspects to Consider During a Plan Review