Post on 13-Apr-2017
1
Ser i ous bus iness p l ay
2
Crisis Management and Business Continuity
DC ANALYSTS’ ROUNDTABLE
November 2016Sean S. MurphyLootok, CEO
3
Agenda 1. What is Business Continuity Management (BCM)? 2. What model should we use in complex situations? 3. How do we market our programs?
4
Build a common language
5
Traditional risk management
6
Are you too focused on the task at hand to notice threats in your environment?
7
Now what?
8
Do you understand how threats today will impact you tomorrow?
9
Crisis timeline 1. Facilitate evacuation or
sheltering-in-place2. Determine if the incident is
a crisis 3. Relocate employees to
continue critical processes4. Restore servers and
networks per recovery priorities
5. Monitor the media for potential media impact
6. Conduct investigations into malicious threats
Security
Emergency Response
Crisis Management
Time
Inte
nsity
of a
ctiv
ity
Incident Management Business Recovery
IT Recovery
10
What does a linear environment look like?
11
What model do we need for complex situations?
12
Understand our environment
13
We’ve evolved
14
What model can we use? Command and Control model
15
Command and control The nature of the situation and its significance.
UNDERSTAND
16
We’re back
17
Command and control Picture the desired outcome
VISUALIZE
18
Command and control Share the vision with the entire team, so they can focus their efforts and make decisions to achieve the desired outcome.
DESCRIBE
19
Command and control Establish relationships, provide continued guidance, assess and adjust as required, and allocate required resources.
DIRECT
20
Command and control Lead and assess
21
Crisis Cards activity • Choose a card at random from the deck and
reads the scenario to the group.• Based on the scenario, would you declare this
a crisis? Explain your answer. Fragments of blue plastic are found in your product in the morning. All product from the previous day’s production are still within your control.
22
Run your program like a business
23
How invested are your customers?
EVANGELIST Endorses the program to
other audiencesLOYALIST
Proactively participates in the program and sees its
valueENLISTED Is a willing
participant in the program but does not ask for it or endorse it
DRAFTEE Has been
mandated to participate in the program, does not see
its value
UNAWARE Does not know that Business
Continuity exists
Lootok Demand �Model®
24
Have you walked in your users’ shoes?
Lootok Experience Model®
25
Be a brand
26
Be a destination
27
Be timely
28
Questions?
29
Thank you!