Last updated: November 2015
Scope Crisis
TU Oeucumene can identify strategic, operative and other threats that can cause damage, which may develop into a crisis. Crises can be caused by
- Physical, such as fires, shooter incidents and other direct threats that can lead to loss of life.
- Strategic, such as political, financial, university reputation threats
- Operational threats to the continuation of the primary processes of the University: research and education
The so-called high-priority risk areas include cyber security, data management, corporate reputation and trust, and strategic service delivery as agreed.
Crisis Escalation
The crisis procedure is invoked when
- A member of the Management Team directorial level or higher requests the commencement of the crisis procedure.
- If a critical service sustains a service outage which has lasted 24 hours or is determined as likely to do sosomeone alerts the crisis coordinator to a significant threat to the physical safety, reputation or the primary of the university.
Crisis Management Team
The Crisis Management Team consists of:
- Security manager
- Communication specialist
- Experts/ head of services
- The service security officer (responsible for service continuity and recovery plan).
- The service owner or system administrator
- The crisis management team can also include, if necessary:
- Someone from senior management
- Human Resources Director
- Other expert services or service management
Flow of Information
...
Role | Responsibilities |
Crisis Coordinator |
|
Plotter |
|
1 or 2 Crisis Communicator(s) |
|
1 or 2 Technical Advisor(s) |
|
1 or 2 HR Advisor(s) |
|
1 or 2 Observers |
|
...
Procedure Crisis Management Team
Intro
You can use the following procedure to handle the crisis during the exercise. Of course, you are also free to follow another process with your team.
...
- What can you do?
- What is your operation framework (handelingskader)?
- What are the short-term options and what long-term actions can you take?
...
If you have completed all the steps, you should have enough information to start making decisions. Determine your goal. What do you want to achieve and when? What should you do to achieve this and who has to do this? Make your decisions explicite explicit and formulate your goals SMART (Specific, Measurable, Assignable, Realistic, Time-related).
Actions.
The last step is delegating actions and monitoring the progress of the crisis management. After that you can start again with step 1 of the cycle: getting a clear view of the situation, after you’ve set out actions. Ask yourself:
...