Advance level knowledge for application of PSM

1. 1

2. 2
2
4
Contingency & Emergency
Planning
https://www.youtube.com/watch?v=SLw6Rrn6tsc&t=208s&ab_channel=SilvaConsultants
https://www.youtube.com/watch?v=I2GvuKnZfiA&t=420s&ab_channel=DavidShaw
https://www.youtube.com/watch?v=7g8rzvRYyuE&t=634s&ab_channel=CenterforDevelopmentofSecurityExcellence%28CDS
E%29
https://www.youtube.com/watch?v=fXbC_IFrhuE&t=845s&ab_channel=BEINFOSEC
https://www.youtube.com/watch?v=5w26EN2BOFI&t=1909s&ab_channel=robwiz30

3. 3
Contingency &
Emergency Planning

4. 4
Video: What is Planning

5. 5
Introduction
Contingency and Emergency Planning is a critical
aspect of physical security management that
focuses on preparing for and responding to
unexpected events or crises that can threaten the
safety, assets, and operations of an organization.
These plans are essential for ensuring the
resilience and continuity of an organization in the
face of various threats, including natural disasters,
security breaches, and other emergencies. In this
introduction, we will explore the key concepts and
importance of contingency and emergency
planning in physical security management.
CONTINGENCY
&
EMERGENCY PLAN

6.  Risk Mitigation: Contingency and emergency planning help organizations proactively
mitigate risks by identifying vulnerabilities and developing strategies to reduce their
impact.
 Protecting People and Assets: These plans prioritize the safety of employees,
visitors, and the security of physical assets, including buildings, equipment, and data.
 Business Continuity: Effective planning ensures that essential business functions can
continue during and after a crisis, minimizing downtime and financial losses.
6
Importance of Contingency and
Emergency Planning:

7. • Compliance: Many industries and jurisdictions require organizations to have
contingency and emergency plans in place to meet legal and regulatory obligations.
 Reputation Management: A well-executed response to a crisis can enhance an
organization's reputation and public perception, while poor handling can damage it
irreparably.
 Resource Allocation: Planning allows organizations to allocate resources efficiently
during emergencies, ensuring that critical needs are addressed promptly.
7

8. Contingency Planning: Contingency planning involves identifying potential risks,
vulnerabilities, and scenarios that could disrupt an organization's normal operations. It
aims to develop strategies and protocols to mitigate the impact of such disruptions and
maintain essential functions.
Developing a contingency plan for a business organization is crucial to ensure the
company's resilience in the face of unforeseen events or disasters. Contingency planning
involves several processes and procedures, each of which plays a key role in preparing the
organization for potential disruptions.
8
Key Concepts:

9. Risk Assessment Process: The first step in contingency and emergency planning is
conducting a comprehensive risk assessment. This assessment identifies threats and
vulnerabilities specific to the organization, its physical assets, and its geographical
location.
 Procedure: Identify and assess potential risks and threats to the business, including
natural disasters, cyberattacks, supply chain disruptions, and other relevant scenarios.
 Activities:
• Conduct a risk analysis.
• Prioritize risks based on their potential impact and likelihood.
• Identify vulnerabilities in the organization's operations.
9
Here are the Main Processes and their associated Procedures
and Activities when developing a contingency plan:

10. Business Impact Analysis Process (BIA): BIA assesses the potential consequences of various
disruptions, helping organizations prioritize their response efforts. It identifies critical functions,
dependencies, and recovery time objectives.
 Procedure: Determine the potential impact of identified risks on critical business functions and
processes.
 Activities:
 Identify critical business processes, systems, and resources.
 Evaluate the financial, operational, and reputational impacts of disruptions.
 Set recovery time objectives (RTOs) and recovery point objectives (RPOs) for each critical
function
10

11. 11
Resource Identification and Allocation Process:
 Procedure: Identify the necessary resources, both internal and external, required to
support business continuity and recovery efforts.
 Activities:
• Identify key personnel, their roles, and responsibilities.
• Inventory critical assets, IT systems, and data.
• Establish resource allocation priorities.

12. Plan Development Process:
 Procedure: Create comprehensive contingency plans that outline how the
organization will respond to and recover from disruptions.
 Activities:
• Develop specific response procedures for each type of disaster or disruption.
• Document communication plans for internal and external stakeholders.
• Define roles and responsibilities for the incident management team.
• Design recovery strategies and alternatives
12

13. Communication Planning Process:
 Procedure: Establish a framework for communicating with internal and external
stakeholders during a disruption.
 Activities:
• Identify primary and alternate communication channels.
• Develop contact lists for employees, management, and external partners.
• Create templates for crisis communication messages.
13

14. Testing and Training Process:
 Procedure: Regularly test and train employees on the contingency plan to ensure
its effectiveness and readiness.
 Activities:
• Conduct tabletop exercises and simulations.
• Evaluate and update the plan based on testing outcomes.
• Provide training to employees and stakeholders on their roles and
responsibilities during a crisis.
14

15. Documentation and Documentation Management Process:
 Procedure: Maintain comprehensive documentation of all aspects of the
contingency plan.
 Activities:
• Store the contingency plan, contact lists, and relevant documentation in
a secure and easily accessible location.
• Regularly update the plan to reflect changes in the business, technology,
or risks
15

16. Plan Maintenance and Review Process:
 Procedure: Regularly review and update the contingency plan to ensure its
relevance and effectiveness.
 Activities:
• Schedule periodic reviews, at least annually.
• Incorporate lessons learned from testing and real incidents.
• Revise the plan to reflect changes in the business environment
16

17. Incident Response Process:
 Procedure: Activate the contingency plan and execute predefined response
procedures when a disruption occurs.
 Activities:
• Alert the incident management team.
• Execute recovery and business continuity procedures.
• Monitor the situation and make necessary adjustments.
17

18. Post-Incident Analysis and Improvement:
 Procedure: Analyze the response to a disruption, identify areas for
improvement, and make necessary changes to enhance the plan.
 Activities:
• Conduct a post-incident review.
• Document lessons learned and update the plan accordingly.
• Share feedback with employees and stakeholders to enhance future
preparedness
18

19. 19
CONTINGENCY PLAN FRAMEWORK
https://www.youtube.com/watch?v=6MDqTba8pX4&ab_channel=SafetyVideos.com

20. 20
A Framework Example: Contingency Plan for Fire Emergencies in a Manufacturing Facility:
a. Evacuation Procedures:
 Designate assembly points for personnel to gather safely outside the facility.
 Establish clear exit routes with well-marked evacuation signs.
 Assign trained fire wardens to assist with evacuation.
 Regularly conduct fire drills to ensure staff are familiar with evacuation procedures.
b. Firefighting Equipment:
 Install fire extinguishers at strategic locations throughout the facility, based on fire risk
assessments.
 Implement a fixed fire suppression system in high-risk areas, such as server rooms.
 Maintain fire hose reels and fire hydrants around the facility.
 Equip designated personnel with fire-resistant gear and train them in fire response.

21. 21
c. Communication Protocols:
 Install fire alarm systems with manual call points and automatic detection.
 Connect fire alarms to an off-site monitoring service.
 Establish a communication tree to notify emergency services and staff.
 Equip personnel with two-way radios to coordinate during emergencies.
 Develop a clear incident command structure with designated roles and responsibilities.

22. 22
Video:Fire Evacuation

23. Developing a contingency plan is an ongoing process that requires continuous
monitoring and improvement to adapt to changing circumstances and evolving
threats. Regularly testing and updating the plan is essential to ensure it remains
effective in safeguarding the organization's operations and reputation.
23
https://www.youtube.com/watch?v=KR-2PSeG-rM&ab_channel=Bizconsesh
https://www.youtube.com/watch?v=E9ghPvudrW8&ab_channel=CorpSecurity
https://www.youtube.com/watch?v=MhsAJoS_27E&ab_channel=CorpSecurity

24. 24
Summary:
Here are some key
steps to follow
when creating a
contingency plan:
Identify
Potential Risks
Assess the Impact
Develop Response
Strategies
Assign
Responsibilities
Establish
Communication
Protocols
Document Your
Plan:
Keep in mind that a
contingency plan is only
effective if you regularly review
and update it to reflect
changing circumstances and

25. Emergency Planning:

26. Emergency Response Plan
26
Developing an emergency response plan for a business organization is essential to
ensure the safety of employees, protect assets, and minimize operational
disruptions during emergencies. Here are the key processes and associated
procedures involved in developing an effective emergency response plan:

27. 27
•Procedure: Identify and assess potential hazards and risks specific to the
organization's location and industry.
•Activities:
• Identify natural and man-made hazards (e.g., fires, earthquakes,
chemical spills, cyberattacks).
• Evaluate the likelihood and potential impact of each hazard.
• Prioritize hazards based on their risk levels
Hazard Identification and Risk Assessment:

28. • Procedure: Determine the necessary resources, including personnel,
equipment, and supplies, required to respond effectively to emergencies.
• Activities:
• Identify and allocate emergency response team members and their roles.
• Inventory and maintain emergency response equipment and supplies.
• Establish resource allocation priorities
28
Resource Assessment and Allocation:

29. • Procedure: Create a detailed plan that outlines how the organization will
respond to various types of emergencies.
• Activities:
• Develop specific response procedures for each type of emergency
(e.g., fire, medical emergency, active shooter).
• Document evacuation routes, assembly areas, and emergency contact
information.
• Define roles and responsibilities for emergency response team
members
29
Emergency Response Planning and Documentation:

30. • Procedure: Establish protocols for communicating with employees, emergency
responders, and other relevant stakeholders during an emergency.
• Activities:
• Create and maintain contact lists for employees, management, and external
partners.
• Develop and test communication methods (e.g., phone trees, mass
notification systems).
• Establish clear communication procedures and message templates
30
Communication and Notification Procedures:

31. • Procedure: Regularly train employees on emergency response procedures and
conduct drills to ensure readiness.
• Activities:
• Provide emergency response training for all employees.
• Conduct regular drills and exercises to practice response actions.
• Evaluate and update the plan based on training and drill outcomes
31
Employee Training and Drills:

32. • Procedure: Develop and document evacuation plans to ensure the safe and
orderly evacuation of employees and visitors during emergencies.
• Activities:
• Identify primary and alternate evacuation routes.
• Designate assembly areas for accountability.
• Establish procedures for assisting individuals with disabilities.
32
Evacuation Planning:

33. • Procedure: Activate the emergency response team and execute predefined
response procedures when an emergency occurs.
• Activities:
• Alert the emergency response team members.
• Initiate emergency response actions, such as evacuations or medical
assistance.
• Coordinate with external emergency services when necessary
33
Emergency Response Team Activation:

34. • Procedure: Conduct a post-emergency review to assess the response, identify
areas for improvement, and update the plan accordingly.
• Activities:
• Analyze the response to the emergency.
• Document lessons learned and feedback from participants.
• Revise the plan and procedures to enhance future preparedness
34
Post-Emergency Evaluation and Improvement:

35. • Procedure: Regularly review and update the emergency response plan to
ensure its relevance and effectiveness.
• Activities:
• Schedule periodic plan reviews, at least annually.
• Incorporate changes in hazards and risks.
• Revise the plan based on post-emergency evaluations and feedback.
35
Plan Maintenance and Review:

36. • Procedure: Ensure that the emergency response plan complies with local,
national, and industry-specific regulations and standards.
Note:
Developing an effective emergency response plan is an ongoing process that
requires continuous monitoring, training, and improvement to adapt to
changing circumstances and evolving threats. It is critical to involve employees,
emergency responders, and relevant stakeholders in the planning process and
to keep the plan up to date.
36
Regulatory Compliance:

37.  In conclusion, contingency and emergency planning in physical security management
are essential for identifying, preparing for, and responding to potential threats and
crises that can disrupt an organization's operations and jeopardize its assets and
people. These plans provide a structured framework for risk mitigation, business
continuity, and effective response, ultimately contributing to the organization's
resilience and long-term success.
 In summary, Contingency and Emergency Plans include detailed response and
recovery procedures. These plans outline how to respond to specific incidents, how to
protect people and assets, and how to restore normal operations as quickly as
possible.
37
Conclusion

38. 38
38