Technology Sectors

Market Sectors

Disaster Preparedness 2011 -- Lessons Learned

Tom Winn

Whether an incident occurs locally or overseas, the response to a disaster can become its own storm, pulling people in from their normal daily duties and placing them squarely in the middle of crisis response.

An organization may use a formal Incident Command Structure, variations of that structure, or take a completely different structure. No matter the direction taken, all organizations should have a formalized plan in place to address as many foreseeable disasters and crises as is reasonable.

The author’s personal experience has been that if a well-developed plan is put in place, with some minor adjustments that plan can be adapted to fit the odd, unforeseen crisis. The critical part is in the plan preparation and the maintenance of the plan after its creation.

This article will focus on lessons learned from recent crisis situations and the knowledge garnered from those experiences, which those who write plans can potentially incorporate into their own plan development. A parallel theme is, if you don’t have a plan now, or if the plan you have has not been updated in a year or more, creating or updating one should be a priority for your organization.

Plan writers can take note of the experiences discussed and apply them to their own situations. In the end, it is better to anticipate as many pitfalls as possible. While it is close to impossible to foresee every possible problem, the more potential issues that are considered, the more likely a solution will be included in the plan that is applicable to any odd-ball problem that may arise.  

These systems are limited in that they are reservation-based. If a traveler is not on the flight for which he or she is scheduled, it will not be changed in the system. The same can be said for hotels -- if an organization does not require travelers to stay at the hotel where they were originally booked, that change will not show up in the system. However, the quick, at-a-glance availability of the information is well worth the minimal investment, especially in times of crisis.

Who is under the protection of an organization during a crisis?

This question needs to be asked well in advance of a crisis. The author has witnessed that confusion over who will be evacuated can create unnecessary delays during an evacuation. Family members, house staff, local office personnel, pets, etc., should all be considered while writing and reviewing a plan. There is a natural human desire to want to take care of those people an organization considers “family,” especially during a large-scale disaster or political crisis. 

The reality is, the more people an organization must evacuate, the higher the cost. Also, relocating local nationals can present passport and/or visa issues. Something as simple as the definition of “family” can add complications. The group of individuals that people in the U.S. consider “family” is traditionally smaller than that which is seen in other cultures. A number of five to eight can easily grow to be 15 or 20 or more, further adding to the cost and complications of an evacuation.

Any service provider will need to know the exact numbers, locations and nationalities of the personnel they are moving. These numbers impact everything from vehicle selection to evacuation strategy and eventual destination. 

Another challenge the author has encountered is the issue of family pets. Pets present an entirely new set of complications, ranging from quarantine issues to whether or not the pets will be allowed on the evacuating vehicle (aircraft, boat, bus, etc.) The care that is necessary for a dog or cat can add further frustration to what may already be an extremely taxing and confusing situation. Attempting to evacuate with a pet may cause unnecessary delays and, in a worst case scenario, can preclude an evacuation from taking place at all. Again, it is critical that an organization answer the question of who, or what, will receive our care.

Preparations

 

Recent Webinars

Thu, 04/26/2012 - 2:00pm - 3:00pm

Extracting real-time intelligence from Big Data with deep analytics is valuable but dif

Upcoming Events

Event Details Dates of Event
SANS Security West 2012 May 10 - 18
SANS Toronto 2012 May 14 - 19
SANS Secure Indonesia 2012 May 14 - 19
SANS at iTWeb Security Summit 2012 May 17 - 18
New Fire & Emergency Communications Codes Educational Seminar May 18 - 18
Managing Your Physical Security Program: Collaborate and Manage Smarter May 21 - 24
SANS Brisbane 2012 May 21 - 26
CEIC 2012 (Computer and Enterprise Investigations Conference) May 21 - 24
NERC CIP Compliance Training May 24 - 24
Symantec NetBackup User Group May 24 - 24
NESCO Town Hall: Security Risk Management Practices for Electric Utilities May 30 - 31
Advanced Hands-On CAMEO Training Jun 4 - 6
Security Program Design: A Critical Infrastructure Protection Model Jun 4 - 5
Facility Security Design Jun 4 - 6
SANS Rocky Mountain 2012 Jun 4 - 9
F5 Government Technology Symposium Jun 6 - 6
SEL Modern Solutions Power Systems Conference Jun 6 - 8
Second Annual Citizen Engagement Seminar Jun 12 - 12
ASIS Assets Protection Course: Functional Management (APC III) Jun 18 - 21
SANS Malaysia 2012 Jun 18 - 23
Data Center Brainstorm 2012 Jun 19 - 19
SANS Forensics and Incident Response Summit 2012 Jun 21 - 27
Vanguard Security & Compliance 2012 Jun 25 - 28
SANS Canberra 2012 Jul 2 - 10
SANSFIRE 2012 Jul 7 - 15
Executive Protection Jul 9 - 10
Military Vehicles Exhibition & Conference Jul 10 - 13
NERC CIP Compliance Training Jul 12 - 12
Security Force Management Jul 16 - 17
Physical and Logical Security: Advanced Applications and Economics Jul 16 - 19
Investigative Interviewing Methods Jul 18 - 19
SANS Thailand 2012 Jul 23 - Aug 4
SANS San Francisco 2012 Jul 30 - Aug 6
College & University Police & Investigators Conference Jul 31 - Aug 3
SANS Boston 2012 Aug 6 - 13
Radiological Emergency Planning: Terrorism, Security, and Communication Aug 20 - 24