2020-02-27

What can normal employees do during recovery?
- Everyone has a role.
How many roles can a person fill?
- If the roles aren’t all at the same time, a lot.
What happens when communication ist verbotten?
- Toxic material spill, eg, might not want to cause panic
what’s good with emergency services in a big disaster?
- They’ll have a crisis center to talk to
Crisis management and physical crisis?
- You wouldn’t need an e-ops site for a network outage
work area vs e-ops
- work area is getting a work area setup for all
- e-ops is for management only
Where does the containment team come from?
- They’re probably also in facilities
What happens when all backups fail?
- I would call this a ‘golden parachute’ scenario.
difference in terms
- Crisis - we don’t know what’s going on, or it’s a major immediate thing.
  - Must be addressed before work can continue
- Incident - something you can work around, doesn’t stop everything
  - network attack is an incident, building on fire is crisis
- Event - something happened, joe spilled his coffee. Situation.
- Disaster - Crisis stage 2.

Sounds like a crisis is resolved or becomes a disaster. difference is time-frame

crisis -> emergency response -> disaster

Crisis management plan
- key personnel
- assembly points
- communication plan
- responsibilities