The organization should form a planning team of the key people in A.2.2 to develop, run, maintain and improve the plan, each knowing their own and the others' roles in planning, response and recovery, and should assign the following. Pre-incident: protection aims and risk-reducing measures in line with corporate strategy and continuity planning; an annual risk assessment or gap analysis with changes or plans to address what it finds; evaluation of physical protection (access control, video surveillance) and security measures (emergency communications, WVPI programs); independent site security reviews and scenario-based violence assessments with qualified outside experts; ties with police at local, state and federal level and with other agencies; proactive resource allocation with key stakeholders, such as budgets for staffing and training time and a safety element in employment evaluations; naming the on-site leader and protocols for handing command to first responders; primary and alternate sites for the emergency operations center, incident command, media area and equipment; logistics and employee support needs such as family notification and reunification, crisis counselors, childcare, evacuation and transport, and basics like water and restrooms, with supplier relationships where needed; adopting and training on a standardized incident management system; reviewing procedures in light of program evaluation; and joint planning with other tenants of shared facilities. Incident response: the on-site leader carries out response protocols and oversees crisis management, directing response and continuity actions, keeping real-time contact between the site and executive management, acting as liaison with executives, vendors and providers, and reporting on response, recovery and resource needs; other tasks include directing and reporting on site security, setting perimeters, securing communications, accounting for and evacuating people to a safe area, notifying families, monitoring home and global media and social media, deciding what media statements say, when they go out and how, and running emergency IT plans. Post-incident: identifying the three recovery phases, immediate, short-term and long-term (A.4.1).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.