“….we fall to the level of our training”

The full quote, attributed to Greek philosopher Archilochus, is “We don't rise to the level of our expectations; we fall to the level of our training”.

Once upon a time an executive team might have days, possibly weeks, to ponder a problem and develop a response. In the 21st century they have minutes to identify the problem, push out a holding statement and start responding. They need to provide updates to staff, customers, shareholders, markets, and regulators who demand that action is decisive, swift, and precise. Expectations are high.

Being decisive, fast and precise under pressure comes from practice. We fall to the level of our training.

What is the delta between the expectation and the proven level of training in your organisation? Here’s a clue: if you hear people say “In the real crisis our start is always a bit disorganised, but we do scramble well” it is possible that confidence exceeds capability.

A useful model for developing your organisation’s capabilities is Plan/Prepare/Respond/Recover.

Let’s look at planning and preparation.

You’re an experienced risk manager who’s analysed your organisation’s risks. Controls have been established to reduce the likelihood and/or consequence of a realised risk to as low as reasonably practicable – but not zero.

What happens when the risk is realised? Now what?

A response is required. The plan you developed will help.

Or will it?

How do you know it will work? Did the assumptions you made in planning hold true? Will the resources you planned for be available? If you are not there, will anyone know what to do?

The critical bridge between “Plan” and “Respond” is “Prepare”. Preparation is the glue that holds the plan, and the people using it, together.

Deloitte published a useful paper in 2018 titled Stronger, Fitter, Better: Crisis Management for the resilient enterprise.  

Perhaps the most pertinent observation is that while executive teams reported confidence in their ability to respond, the rate of exercising to confirm that preparedness was low. Interestingly, the most obvious risks with the most obvious solutions were the ones people practised.

For example:

1.      IT System failure: 90% of respondents confident in their response and 50% had undertaken simulations

2.      Cyber-attack: 89% of respondents confident and 53% had undertaken simulation

In comparison, 88% of respondents stated they were confident to handle a corporate scandal. But only 17% of respondents had conducted an exercise using such a scenario. Similarly, the results for regulatory/policy change were 89% confidence but only 25% had practised managing such a crisis.

Deloitte posit that confidence outstrips preparedness. We agree.

Is your organisation practising the easy stuff, like problems where there’s an obvious, technical solution? Compare your organisation’s risk profile to its recent crisis exercises. Are your exercises related to the risk register?

The Deloitte study suggests that executives are more comfortable participating in an IT Disaster Recovery-related crisis or a cyber-breach response. Why are they less comfortable to participate in a corporate scandal scenario?

Perhaps they think such a crisis is a Black Swan. Some of our clients have said their executive is uncomfortable or believes it’s too difficult to deliver these scenarios in an exercise.

To the first point: Yes. It is (and should be) uncomfortable. If it is on your organisation’s risk profile it is something of concern. Would your CEO and Executive Team prefer to be uncomfortable in an exercise or under-prepared for reality?

With respect to being difficult to deliver, that is why you use an external provider like Tigertail. Designing plausible and realistic exercises requires special skill and experience. In our collaboration with you we develop:

  • opportunities for your crisis management team to practise using procedures and tools in the context of a complex problem

  • a safe environment to practise using procedures and tools

  • a collaborative environment for your executive and subject matter experts to test assumptions, recognise and manage biases

  • an exercise that is as controlled or dynamic as you choose

  • assessment criteria to inform an exercise report and assure the Risk and Audit Committee

Well-developed and run exercises validate your plans, reinforce good practice, refresh memories and rehearse responses. Your people, and your bottom line, will benefit.

Tigertail Australia has the background and experience to equip your organisation with skills to manage risk, crisis, and emergencies confidently and effectively. The Tigertail team includes crisis and emergency management leaders, business continuity specialists, risk management advisors, planners, and trainers with more than 150 years of combined experience, covering prevention and preparedness to response and recovery.

Author: Craig Moroz

W: www.tigertail.com.au T: +61 2 8907 1900 E: craig.moroz@tigertail.com.au

TIGERTAIL AUSTRALIA: CONFIDENCE / CLARITY / CONTINUITY

SA Water Executive Team Crisis Management Training and Exercise

SA Water Executive Team Crisis Management Training and Exercise

United Nations International Day for Disaster Reduction

The number of people exposed to extreme weather and earthquakes continues to grow in 2017. Death, serious injury, losing the family home or the ability to earn a living are just some of the consequences of this exposure.

Droughts across the globe and especially in the Horn of Africa; a record breaking Atlantic hurricane season battering the Caribbean, Central America and the United States; and flooding across Bangladesh, India and Nepal have disrupted the lives of millions.

Here in Australia we are not immune; we’ve just had our driest September on record in many places, bushfires are already affecting the southern part of the country, and the Bureau of Meteorology’s most recent outlook shows a mixed bag of risks.

The UN’s Sendai 7 Targets Campaign and International Day for Disaster Reduction are aimed at ensuring all communities in all countries continue to build resilience to be able to withstand and recover from emergencies.

As the UN Secretary-General’s Special Representative for Disaster Risk Reduction, Robert Glasser explains:

“Despite many successes there are still far too many lives being lost in predictable events because of failures to deploy early warning systems [and] learn lessons from past events […] Disaster risk reduction is everybody’s business.”

Just as the UN and aid agencies strive to learn from the past as a tool to protect the future, you can improve your business’s preparedness to a volatile and disruptive world. It is your business to ensure your business is prepared and we can help.

Tigertail helps organisations build the resiliency they need in time of crisis. We bring experience and energy to de-risking your business through planning and training as well tailored practice, drills and exercises.

Get in touch to learn more today, because tomorrow may be too late.

 
049.jpg