2.1 Readiness Strategy
- A Readiness Strategy that includes an overarching approach to creating resilience including document management, structure and alignment, stakeholder management, equipment, facilities, tools and training.
- Plans align within the organisation and where necessary with critical suppliers, Joint Venture Partners and key agencies.
2.2 Stakeholder Management
- A consistent approach and process for Stakeholder Management to identify and manage internal and external key stakeholders.
- Pre-considered strategies to manage and communicate with stakeholders such as staff, regulators, customers, shareholders, media and the community are understood and documented.
2.3 Plans and Procedures
All relevant plans that reflect the current risk profile of the organisation, industry standards and regulatory requirements are developed and maintained and may include:
- Crisis Management Plans; Crisis Communications Plans; Business Continuity Plans; Disaster Recovery Plans; Emergency Management Plans; Cyber Security Strategy; Data Governance Strategy, Cyber Security Architecture and Controls, Cyber Incident Response Plan.
- Testing of plans on a regular basis and provide on-going management and training on the plans.
2.4 Equipment, Facilities and Tools
- Disaster recovery capabilities and alternate site arrangements and facilities in place for critical systems and processes.
- Identification of off-shore key business processes that need on-shore contingency planning arrangements that are tested against a range of scenarios.
- Response teams have access to aide memoires including a Crisis Management Handbook and Decision Support Tool.
2.5 Training and Awareness
Training and awareness to develop the knowledge and skills of individuals and teams including:
- Board level training and awareness and executive training for key roles; for example, members of a Crisis Management Team or Crisis Chair.
- Practitioner Training—for people with a role to play in developing the organisation’s capability.
- User Training—competency-based training for individuals and teams.
- General Awareness—for all staff.
Our Sites
