CPP Emergency Planning and Crisis Management 2 — Questions and Answers
Question 1: What is the FIRST step a security professional should take when a potential crisis is identified?
- Activate the emergency response team
- Notify the media of the situation
- Recognize and officially declare the crisis (Correct answer)
- Evacuate the facility immediately
Correct answer: Recognize and officially declare the crisis
Recognizing and declaring the crisis is the essential first step because it triggers the formal response process and activates notification chains.
Question 2: Which crisis communication principle is most critical for maintaining organizational credibility during a major incident?
- Providing exhaustive technical details to the public immediately
- Being transparent and timely with accurate information (Correct answer)
- Restricting all media access to the affected facility
- Limiting all communications to internal stakeholders only
Correct answer: Being transparent and timely with accurate information
Transparency and timely release of accurate information prevents speculation, builds trust with stakeholders, and protects the organization's credibility during a crisis.
Question 3: In crisis communications, what is a 'dark site'?
- A facility that has lost all power during an emergency
- An emergency operations center operating under blackout conditions
- A classified secure communications channel for senior management
- A pre-built website kept offline and ready to activate during a crisis (Correct answer)
Correct answer: A pre-built website kept offline and ready to activate during a crisis
A dark site is a pre-designed website kept inactive until a crisis occurs, enabling rapid deployment of crisis communications without building content under pressure.
Question 4: What is 'crisis creep' in the context of security management?
- The gradual escalation of a minor incident into a full crisis when not addressed promptly (Correct answer)
- Unauthorized personnel infiltrating a designated crisis response zone
- The progressive spread of misinformation through social media during an emergency
- Slow emergency service response times that worsen an incident's impact
Correct answer: The gradual escalation of a minor incident into a full crisis when not addressed promptly
Crisis creep occurs when a situation is not initially recognized as a crisis and gradually escalates due to delayed or inadequate response.
Question 5: Which element is most essential to ensure an effective Crisis Management Team (CMT)?
- A dedicated media relations specialist as the sole spokesperson
- Cross-functional representation including security, legal, HR, and communications (Correct answer)
- Only senior operations management with decision-making authority
- External crisis management consultants with no internal team members
Correct answer: Cross-functional representation including security, legal, HR, and communications
Effective CMTs require cross-functional representation to simultaneously address operational, legal, human resource, and communications dimensions of a crisis.
Question 6: What is the primary purpose of a Post-Incident Analysis (PIA) following a crisis event?
- To assign individual blame and accountability for the crisis
- To document financial losses for insurance claim purposes
- To identify lessons learned and improve future planning and response (Correct answer)
- To satisfy mandatory regulatory reporting requirements only
Correct answer: To identify lessons learned and improve future planning and response
A PIA primarily aims to extract lessons learned from the actual crisis response, enabling organizations to improve their plans, training, and capabilities.
Question 7: In the context of crisis response, what does 'consequence management' focus on?
- Identifying and prosecuting perpetrators responsible for the incident
- Minimizing the impact of an incident and facilitating recovery (Correct answer)
- Preventing future similar crises through enhanced security measures
- Managing media and public perception of the organization's response
Correct answer: Minimizing the impact of an incident and facilitating recovery
Consequence management addresses the immediate and long-term effects of an incident, working to minimize harm and restore normal operations as quickly as possible.
CPP Emergency Planning and Crisis Management 2
What is the FIRST step a security professional should take when a potential crisis is identified?