Planning is vital to any organisation in order to ensure that business continuity is maintained during the post-incident period. Preparedness for crisis and incidents is the key element of mitigation.
Examples of Threat Resolution Ltd (TRltd) services in the field of crisis and incident management that are designed to minimise injury and damage are, but not limited to:
Preparedness
- Design and development of incident procedures.
- Audit and validation of existing procedures.
- Testing of procedures.
- Threat survey and analysis.
Security Risk Analysis (SRA)
Security in any system should be commensurate with its risks. However, the process to determine which security controls are appropriate and cost effective, is quite often a complex and sometimes a subjective matter.
One of the prime functions of security risk analysis is to put this process onto a more objective basis.
There are a number of distinct approaches to risk analysis. However, these essentially break down into two types, quantitative and qualitative.
Quantitative Risk Analysis This approach employs two fundamental elements; the probability of an event occurring and the likely loss should it occur.
Qualitative Risk Analysis is by far the most widely used approach to risk analysis. Probability data is not required and only estimated potential loss is used.
A TRLtd Qualitative Risk Analysis methodologies make use of a number of interrelated elements including threats, vulnerabilities and controls.
Training
- Design and development of staff awareness packages.
- Design and conduct incident training exercises.
- Conducting Management Training Challenges.
Post-Incident Investigation and Analysis
- Investigation of incidents.
- Documentation, analysis and debrief of incidents.
- Production of “lessons learned” reports.
- Review of procedures.
TRLtd is experienced in assisting its clients with crisis and incident management in regions where terrorist attacks have already taken place as well as more routine environments.
