Writing A DRP
April 26, 2013
Writing A DRP
One of the biggest aspects of your physical security plan and prevention of WPV is creating a DRP. A Disaster Recovery Plan is a crucial element in order to have the necessary recovery program in place for you to stay in business and avoid many unhappy lawsuits and public relations nightmares.
There are innumerable books out there that will show you how to write a comprehensive plan to survive any kind of crisis. So I will only skim over the relevant sections that you need to give attention to and hopefully, this will give you a head start on actually writing your plan. And understand as well, that there are just as many good books out there as there are bad ones. And many of them have conflicting points of view on forming and running a DRP.
The one hard part, and I’ll admit complicated part, of this process is planning your DRP. Each and every disaster that you may encounter needs to have a part in the plan and its own section with appropriate actions attached to it. You can certainly adapt sections from other areas, but ensure that there is no confusion within the plan. So what kind of disasters will a DRP cover? Numerous, but here is a short list them;
Large scale vandalism
Active shooter events
Hazardous chemical spills
Bacterial contamination of a food processor
And these are only a few of the innumerable events that could hit your company with a disaster. And if you wanted you could even count war as one to plan for! Each of these will have certain things in common within the plan, but it is just as important to have a separate plan for each kind of event. And if the probability of the event is extremely remote, then don’t dwell on it to long just develop a cursory plan outline.
One of the main concerns that you have to think about is the simplicity of the plan. While it may be of great interest by your legal department to have all the detail in the world it really isn’t necessary. As with your policies & procedures, it needs to be simple and easily read and understood. That means keeping it concise and not verbose.
This will be especially true for the parts that will receive general distribution throughout the company. Your employees who have been designated for certain responsibilities only need to have the relevant sections of the plan. And while they need to know how important their part is overall, they don’t need to be burdened by the entire thing. You can always keep a full can complete DRP in your main office for perusal by anyone at their convenience, but it doesn’t need to be distributed to everyone.
On the other hand, c-suite management needs to have a full and complete copy of the DRP. And they need to understand it and how to implement it as well, no matter the cost in time and energy. The expenditure in those areas will pay dividends later.
First of all I would propose 3 groups of people in your plan. Each set will be responsible for a separate unit of action after the disaster strikes. Now each of these groups will have responsibilities within your DRP and they must be allowed to carry them out. As with other segments I’ve talked about fiefdoms must be put aside and everyone work together for the betterment of the entire company and its employees.
(This article will be continued)
If you have any questions or concerns about your DRP(s)? Contact Sollars Security Shield at 480-251-5197 or see our website at www.sollarssecurityshield.com.
While we specialize in workplace violence, we can help you with your DRP, especially when it comes to an active shooter or WPV incident.