We’ve talked on several previous episodes about the need for a single, defined crisis management framework in an organization.
In Episode #59 of the Managing Uncertainty Podcast, Bryghtpath Principal & CEO Bryan Strawser and Consultant Bray Wheeler go deeper into this need – and talk about the need to integrate all of an organization’s various incident management processes into a single unified crisis management framework.
Relevant previous episodes:
* #1 – Shouldn’t we have a plan for alien invasion?
* #23 – Crisis Management is not a pickup game
Episode Transcript
Bryan Strawser: Hello and welcome to the Managing Uncertainty podcast. This is Bryan Strawser, principal and CEO here at Bryghtpath.
Bray Wheeler: Hi, this is Bray Wheeler, consultant at Bryghtpath.
Bryan Strawser: And today we’re going to be talking about having a single, unified crisis management framework. And I guess I’ll sum the problem up because Bray and I were talking about this on the ride back from lunch today as we were struggling to figure out what to talk about on the podcast. And one of the things that we hit on is that we often see the issue in organizations that organically, for all the reasons that seem like the right reason at the time, a lot of companies wind up having siloed incident and crisis management processes that are totally rooted in the kind of problem that a single organization and the company has to deal with.
Bray Wheeler: Yes.
Bryan Strawser: And, over time they come to realize that they need other teams involved in that process. So what happens is, and I’m just going to pick on my two favorite people to pick on, physical security or corporate security and information security or cybersecurity, that they probably have in most companies, separate incident management processes, and then almost are definitely going to have separate crisis management processes.
Bray Wheeler: Most likely.
Bryan Strawser: And let’s say that both things happen in the same week. So the physical security, the corporate security team is dealing with a homicide, the cybersecurity team is dealing with some type of data breach. They’re probably sending out two different communications that are not coordinated, that have different templates, that have different people at the table to make decisions, maybe not the right people, and not everyone is being informed in a consistent manner. And at the top of that food chain is a CEO who is getting one set of comms from here about one incident and a different set of comms from here about a different incident, and says the infamous WTF, what’s going on here?
Bray Wheeler: Yep. They look different.
Bryan Strawser: They look different.
Bray Wheeler: They talk differently. They’re using different language.
Bryan Strawser: Maybe one informed me and maybe one didn’t.
Bray Wheeler: Asking me things or not asking me things.
Bryan Strawser: And I don’t know, what’s my role supposed to be?
Bray Wheeler: Yep.
Bryan Strawser: You can’t see me because I’m raising my arms up in the like, “What?”
Bray Wheeler: He’s gesticulating.
Bryan Strawser: What? What’s going on? So, how do we solve this problem? What do we want companies to do?
Bray Wheeler: I think the big thing is, it’s not inherently bad to have different response systems to, as we’re picking on physical security and ...