Crisis Management & Emergency Response Flashcards

A facility security officer discovers an employee has been sending proprietary production data to an external competitor during a crisis event. This represents what type of threat?

Answer: Insider threat compounded by crisis exploitation

An employee deliberately exfiltrating proprietary data, especially during a crisis when monitoring may be reduced, is a classic insider threat scenario.

Which international standard provides the framework for organizational crisis management and business continuity management systems?

Answer: ISO 22301

ISO 22301 is the international standard specifically for Business Continuity Management Systems, providing requirements for planning, implementing, and improving continuity capabilities.

During a declared emergency at an industrial facility, mutual aid agreements with neighboring facilities and local agencies are MOST valuable because they:

Answer: Provide pre-authorized access to additional resources when internal capacity is exceeded

Mutual aid agreements pre-authorize resource sharing—personnel, equipment, supplies—ensuring help is available quickly when the facility's own capacity is overwhelmed.

The 'scalability' principle in emergency response planning means that the response system should:

Answer: Expand or contract to match the complexity and size of the incident

Scalable response ensures resources are matched to incident needs, preventing both under-response to serious events and costly over-response to minor ones.

In industrial emergency planning, 'consequence analysis' of a potential crisis event is performed to:

Answer: Estimate the scope of human, environmental, and economic impacts to guide planning priorities

Consequence analysis quantifies potential impacts of emergency scenarios, enabling planners to allocate resources and develop response strategies proportionate to the risk.

When an industrial facility activates its emergency plan due to a natural disaster, the Emergency Support Functions (ESFs) framework used in coordination with government agencies is defined under:

Answer: The National Response Framework (NRF)

The National Response Framework organizes federal emergency support into 15 Emergency Support Functions that coordinate government and private sector response to major disasters.

A facility's crisis management plan should be reviewed and updated at minimum:

Answer: Annually and after any major incident, exercise finding, or significant organizational change

Annual reviews combined with post-incident and post-exercise updates ensure the plan reflects current conditions, personnel, and lessons learned rather than becoming outdated.