Business Continuity Management: Building an Effective Incident Management Plan, by Michael Blyth

BUSINESS CONTINUITY MANAGEMENT:
BUILDING AN EFFECTIVE INCIDENT MANAGEMENT PLAN
by Michael Blyth

Few businesses can afford to shut down for an extended period of time, regardless of the
cause. If the past few years have taught us anything, it’s that disaster can strike in any
shape, at any time. Be prepared with the time-tested strategies in this book: Business
Continuity Management: Building an Effective Incident Management Plan by Michael Blyth –
and protect your employees while ensuring your company survives the unimaginable!

Written by Michael Blyth – a consultant in the field of business contingency management –
this book provides cost-conscious executives with a structured, sustainable, and time-tested
blueprint toward developing an individualized strategic business continuity program. This
timely book urges security managers, HR directors, program managers, and CEOs to
manage nonfinancial crises to protect your company and its employees. Discussions
include:
* Incident management versus crisis response
* Crisis management structures
* Crisis flows and organizational responses
* Leveraging internal and external resources
* Effective crisis communications
* Clear decision-making authorities
* Trigger plans and alert states
* Training and resources
* Designing and structuring policies and plans
* Monitoring crisis management programs
* Stages of disasters
* Emergency preparedness
* Emergency situation management
* Crisis Leadership
* Over 40 different crisis scenarios

Developing and utilizing a business continuity plan protects your company, its personnel,
facilities, materials, and activities from the broad spectrum of risks that face businesses and
government agencies on a daily basis, whether at home or internationally. Business
Continuity Management presents concepts that can be applied in part, or full, to your
business, regardless of its size or number of employees. The comprehensive spectrum of
useful concepts, approaches and systems, as well as specific management guidelines and
report templates for over forty risk types, will enable you to develop and sustain a continuity
management plan essential to compete, win, and safely operate within the complex and fluid
global market.

===================================

PRAISE FOR BUSINESS CONTINUITY MANAGEMENT: BUILDING AN EFFECTIVE
INCIDENT MANAGEMENT PLAN

“In Business Continuity Management, Blyth has once again produced a comprehensive guide
to the subject. Whether a multinational organization looking to counter the threat of global
terrorism or a local business planning against loss of sensitive data, this book provides a well
structured and useful guide to construction and implementation of Incident Management
Plans. Blyth provides not only the theory and background to his subject but also invaluable
template guidelines for many of the incidents which we all should prepare for.” - Joe Pugh,
Head of European Project Management, Panasonic

“Business Continuity Management: Building an Effective Management Plan very effectively
details how and what a company should include in composing and executing a crisis
management plan. This book is a must read for both laymen and experts alike because it
itemizes the most relevant facts within silos that are comprehensive enough for the expert to
find value in, yet written in a manner that a layman can derive tangible value. The incident
response guidelines, broken down by the event type, provide an extremely useful tool that
bring immediate value to the reader.” - Robert G. Molina Jr., Global Security Manager,
Lyondell Basell

“For a business of any consequence to not have a business continuity plan is like a Boy
Scout not having a first aid kit. Advanced preparation and planning enable a business to deal
with a crisis and sooner or later every business will face a crisis of some nature. Author
Michael Blyth hits the nail on the head with his well organized book that weaves together
business continuity planning, incident management, and dealing with risks.” - John P.
Chamberlain, Executive Director, ESC

“Mike Blyth has produced another book, which is thought-provoking and a clear example of
the multilayered guidelines that companies should be encouraged to incorporate into their
BCP. A worthy read for anyone in business, irrespective of managerial level. The business
model and structure achieved will help determine the time and shape of any crisis. The
individual knowledge and understanding so achieved, interlinked with a robust BCP, will
determine the optimum time and cost to recover from crisis.” – Stephen Ackroyd, BMI
Security Manager, Middle East/Africa/Asia

“In the global economy, the guidelines presented by Michael Blyth are an essential
component for doing business worldwide. He has thought of every angle. In ultra-sensitive
environments like Afghanistan, his recommendations will be widely applied.” - Dr. Thomas
Stauffer, President/CEO, American University of Afghanistan

===================================

TABLE OF CONTENTS

CHAPTER 1. BUSINESS CONTINUITY MANAGEMENT PLAN.
The Value.
Common Failings.
Business Continuity Goals.
Defining a Crisis.
Mapping Risks.
Critical Dependencies.
Tactical Risk Evaluations.
Determining Risk Tolerances.
Incident Response versus Crisis Management.
Stages of Incident Management and Crisis Response.
Understanding Risk.
Immediate Response and Impact Levels.
Risk Management.
Response Trigger Points.
Decision and Authority Matrixes.
Business Continuity Management Plans.
Resourcing.
Structure of a Business Continuity Management Plan.
Design and Development.
Integrated and Compartmentalized Policies.
Reporting and Record Keeping.
Implementing the Business Continuity Management Plan.
The Communications Plan.
Organizational Interface Plans.
Medical Response and Repatriation Plan.
Public Relations Plan.
Resource and Procurement Management Plans.
Project Initiation Plans.
Business Recovery Plans.
Post Incident Reviews.
Summary.

CHAPTER 2. INCIDENT MANAGEMENT PLAN.
Incident Management Versus Crisis Response.
Principles Of Incident Management.
IMP Risk or Threat Overview.
Objectives of the IMP.
Incident Management Sequence.
Crisis Management Flow.
Incident Management Sequencing.
Incident Management Stages.
Macro and Micro Crises.
Understanding the IMP Needs.
IMP Design And Implementation.
Design and Development.
Reviewing and Testing.
Adjustment and Implementation.
IMP Policies And Procedures.
Information Security.
Resourcing The IMP.
The Incident Management Plan.
IMP Policies and Instructions.
IMP Cover Letter.
Immediate Resource Mapping.
IMP Communications and Tactical Resource Plan.
Initial Verbal Reporting.
IMP Decision and Authority Matrix.
IMP Alert States and Trigger Response Plans.
Alert Notification Systems.
IMP Information Capture Reports.
IMP Crisis Response Guidelines.
Destruction Plans.
IMP Risk Assessments.
Summary.

CHAPTER 3. CRISIS MANAGEMENT STRUCTURES.
Interorganizational Management.
Accessing and Managing Data.
Supporting Agencies.
Response Build-Ups.
Crisis Management Structures.
Corporate Crisis Response Team.
Country Crisis Response Team.
Program Incident Response Team.
Project Incident Response Team.
Special Response Teams.
Composition Of Crisis Response Teams.
Crisis Management Team Commander.
Crisis Team Coordinator.
Physical and Risk Security Manager.
Technical Security Manager.
Special Response Team Leader.
Administration Manager.
Intelligence or Information Officer.
Liaison Officer.
Communications Manager.
Public Relations Officer.
Legal Counsel.
Human Resources.
Health and Safety.
Stress Trauma Advisor.
Reception Team Manager.
Finance Officer.
Investor Relations.
Incident Management Structures.
Crisis Control Center.
Monitoring Crisis Management Programs.
Summary.

CHAPTER 4. SCOPE OF RISK.
Security and Safety Awareness.
Crisis Management Training.
Stages of Disasters.
Man-Made Risks.
Espionage or Information Security Breach.
Kidnap and Ransom.
Hostage Situations.
Monkey Wrenching (Domestic Terrorism).
Power Blackouts.
Road Traffic Accidents.
Complaints.
Mugging or Robbery.
Missing Persons.
Civil Unrest.
Arrest and Detention.
Pending Detention and Exit Denial.
Loss of Sensitive or High Value Equipment.
Unexploded Ordnance and Mines.
Indirect and Direct Fire Attacks.
Suspect Calls.
Workplace Violence.
Threats, Coercion, and Extortion.
Facility Intrusion.
Chemical, Radioactive, and Biological Threats.
Small Arms Fire.
Complex or Armed Attack.
Medical Emergency.
Repatriations.
Explosive Attack or Sabotage.
Suspect Packages and Letters.
Bomb Threats.
Vehicle Borne Improvised Explosive Devices.
Sabotage.
Family Liaison.
Media Management.
Computer-Related Incidents.
Disciplinary Issues.
Office Block, Facility, or Hotel Fire.
Labor Disputes.
Natural Incident Management.
Floods.
Earthquakes.
Pandemics.
Tsunamis (Tidal Wave).
Hurricanes and Tornados.
Volcanoes.
Sandstorms.
Landslides.
Forest Fires.
Summary.

CHAPTER 5. INCIDENT RESPONSE GUIDELINES.
VBIED Incident Management.
Incident Management Guidelines.
Casualty Incident Management.
Incident Management Guidelines.
Missing Persons Incident Management.
Incident Management Guidelines.
Road Traffic Accident Incident Management Data Call.
Incident Management Guidelines.
Facility Physical Security Breach Incident Management.
Incident Management Guidelines.
Kidnap and Ransom Incident Management.
Incident Management Guidelines.
Media Management Incident Management.
Incident Management Guidelines.
Detention and Arrest Incident Management.
Incident Management Guidelines.
Hostage Situation Incident Management.
Incident Management Guidelines.
Suspect Call Incident Management.
Incident Management Guidelines.
Civil Unrest Incident Management.
Incident Management Guidelines.
Unexploded Ordnance IED or Suspect Package Incident Management.
Incident Management Guidelines.
Suspect Mail Incident Management.
Incident Management Guidelines.
Destruction of Sensitive Materials Incident Management.
Incident Management Guidelines.
Repatriation Incident Management.
Incident Management Guidelines.
Domestic Terrorism and Special Interest Groups Incident Management.
Incident Management Guidelines.
Espionage Incident Management.
Incident Management Guidelines.
Site Occupation and Sit-Ins Incident Management.
Incident Management Guidelines.
Sabotage Incident Management
Incident Management Guidelines.
Demonstrations Incident Management
Incident Management Guidelines
Exit Denial and Pending Detention Incident Management
Incident Management Guidelines.
Complaints Incident Management.
Incident Management Guidelines.
Blackouts and Power Losses Incident Management.
Incident Management Guidelines.
Loss of Sensitive or High Value Materials Incident Management.
Incident Management Guidelines.
Indirect Fire and Direct Fire Attacks Incident Management.
Incident Management Guidelines.
Workplace Violence Incident Management.
Incident Management Guidelines.
Chemical, Biological, or Radiological Attack Incident Management.
Incident Management Guidelines.
Complex Attack Incident Management
Incident Management Guidelines.
Family Liaison Incident Management.
Incident Management Guidelines.
Office, Facility, or Hotel Fires Incident Management.
Incident Management Guidelines.
Threats, Intimidation, and Coercion Incident Management.
Incident Management Guidelines.
Mugging or Robbery Incident Management.
Incident Management Guidelines.
Small Arms Fire Incident Management.
Incident Management Guidelines.
Floods and Tidal Waves Incident Management.
Incident Management Guidelines
Earthquakes Incident Management.
Incident Management Guidelines.
Pandemics Incident Management.
Incident Management Guidelines.
Hurricanes and Tornados Incident Management.
Incident Management Guidelines.
Volcanoes Incident Management.
Incident Management Guidelines.
Sandstorms Incident Management.
Incident Management Guidelines.
Landslides Incident Management.
Incident Management Guidelines.
Forest Fires and Bush Fires Incident Management.
Incident Management Guidelines.
Summary.

CHAPTER 6. CRISIS INFORMATION CAPTURE REPORTS.
Immediate Verbal Reporting (SAD CHALETS).
Serious Incident Reporting.
IMP Risk Assessment Reports.
Example Crisis Information Capture Reports.

SUMMARY.
INDEX.

===================================

ABOUT THE AUTHOR

MICHAEL BLYTH is Director of Risk Strategies for RSM Consulting, a risk management and
training company. He holds a master's degree in security management and has eighteen
years of management and operational experience within over thirty-two countries, providing
strategic advisory services and management training for large multinationals and government
agencies. He is highly experienced in providing corporate risk mitigation and vulnerability
assessments, multi-billion dollar market entry program risk solutions and national crisis
management plans, as well as a wide spectrum of strategic policies and plans within
high-risk environments for ambassadors, major oil and gas programs, development
organizations and communications network corporations

===================================
2009, 362 pages.
ISBN: 978-0-470-43034-7
Order #DR838.
===================================