Emergency Planning and Crisis Management Flashcards
7 cards from real CPP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Emergency Planning and Crisis Management flashcards as text
What is the FIRST step a security professional should take when a potential crisis is identified?
Answer: Recognize and officially declare the crisis
Recognizing and declaring the crisis is the essential first step because it triggers the formal response process and activates notification chains.
Which crisis communication principle is most critical for maintaining organizational credibility during a major incident?
Answer: Being transparent and timely with accurate information
Transparency and timely release of accurate information prevents speculation, builds trust with stakeholders, and protects the organization's credibility during a crisis.
In crisis communications, what is a 'dark site'?
Answer: A pre-built website kept offline and ready to activate during a crisis
A dark site is a pre-designed website kept inactive until a crisis occurs, enabling rapid deployment of crisis communications without building content under pressure.
What is 'crisis creep' in the context of security management?
Answer: The gradual escalation of a minor incident into a full crisis when not addressed promptly
Crisis creep occurs when a situation is not initially recognized as a crisis and gradually escalates due to delayed or inadequate response.
Which element is most essential to ensure an effective Crisis Management Team (CMT)?
Answer: Cross-functional representation including security, legal, HR, and communications
Effective CMTs require cross-functional representation to simultaneously address operational, legal, human resource, and communications dimensions of a crisis.
What is the primary purpose of a Post-Incident Analysis (PIA) following a crisis event?
Answer: To identify lessons learned and improve future planning and response
A PIA primarily aims to extract lessons learned from the actual crisis response, enabling organizations to improve their plans, training, and capabilities.
In the context of crisis response, what does 'consequence management' focus on?
Answer: Minimizing the impact of an incident and facilitating recovery
Consequence management addresses the immediate and long-term effects of an incident, working to minimize harm and restore normal operations as quickly as possible.