The Devil Never Sleeps

1. Disasters are the new normal: Prepare for the inevitable

There will be a devil next time, and the next time, and the next time, and the time after that.

Paradigm shift. We must move away from viewing disasters as rare, random events and accept them as recurring phenomena. This shift in mindset is crucial for better preparation and response. The traditional focus on prevention (left of boom) and recovery (right of boom) neglects the critical moment of impact and immediate response.

Practical implications. This new paradigm requires:

• Continuous preparedness efforts
• Focus on consequence minimization rather than prevention alone
• Development of adaptable response strategies
• Integration of disaster management into all aspects of business and personal life

By accepting disasters as the norm, we can better position ourselves to handle the inevitable challenges that arise, reducing their impact and increasing our resilience.

2. Assume the boom: Get your head around impending crises

"Get your head around it" is my simple five-word refrain to wake the hell up.

Mental preparation. Accepting that disasters will happen is the first step in effective crisis management. This mindset shift allows leaders and individuals to move beyond denial and focus on practical preparation and response strategies.

Key aspects of assuming the boom:

• Recognize early warning signs
• Avoid wishful thinking or minimizing potential threats
• Prepare mentally and emotionally for challenging situations
• Develop and practice response plans before crises occur

By assuming the boom, organizations and individuals can proactively address potential vulnerabilities, allocate resources more effectively, and respond more swiftly when disasters strike.

3. Cultivate situational awareness: Know what's happening in real-time

WTW isn't just about what information is collected during a crisis. It is also about what information is conveyed.

Information is power. Effective crisis management relies on accurate, real-time information about unfolding events. Situational awareness involves not only gathering data but also interpreting and communicating it effectively.

Key components of situational awareness:

• Establish systems for real-time information gathering
• Develop processes for analyzing and interpreting data
• Create clear communication channels for disseminating information
• Train personnel to recognize and report critical information

By cultivating robust situational awareness, organizations can make informed decisions, allocate resources efficiently, and adapt quickly to changing circumstances during crises.

4. Foster unity of effort: Align security architecture for better response

Place matters—place at the table matters.

Structural alignment. Effective disaster management requires a unified approach across all levels of an organization. This unity of effort ensures that resources are used efficiently and response strategies are coordinated and coherent.

Key elements of fostering unity of effort:

• Align organizational structure with security priorities
• Ensure clear lines of communication and authority
• Integrate security considerations into all aspects of operations
• Provide security personnel with access to leadership and decision-making processes

By fostering unity of effort, organizations can overcome silos, reduce redundancies, and create a more resilient and responsive security architecture.

5. Avoid the last line of defense trap: Plan for multiple points of failure

We need to begin to think about successive responses for the right side of the boom.

Layered defense. Relying on a single "last line of defense" is a dangerous approach to crisis management. Instead, organizations should develop multiple layers of protection and response strategies to address various failure points.

Strategies for avoiding the last line of defense trap:

• Conduct thorough risk assessments to identify potential failure points
• Develop redundant systems and backup plans
• Implement a "defense in depth" approach to security
• Regularly test and update response plans

By planning for multiple points of failure, organizations can create more robust and adaptable crisis response systems, increasing their chances of successfully mitigating disasters.

6. Stop the bleed: Minimize cascading losses during crises

Less bad is our standard. You are here.

Damage control. When disasters strike, the goal shifts from prevention to minimizing cascading losses. This approach focuses on containing the immediate impact and preventing further damage.

Techniques for stopping the bleed:

• Develop rapid response protocols for various crisis scenarios
• Train personnel in immediate damage control techniques
• Implement systems for quickly assessing and prioritizing response efforts
• Create flexible resource allocation strategies for crisis situations

By focusing on stopping the bleed, organizations can limit the scope and duration of crises, potentially saving lives and resources in the process.

7. Learn from near misses and past disasters: Don't normalize deviance

The normalization of deviance is that "gradual process through which unacceptable practice or standards become acceptable."

Continuous improvement. Near misses and past disasters provide valuable learning opportunities for improving crisis management strategies. However, organizations must resist the temptation to normalize deviant behavior or ignore warning signs.

Strategies for learning from near misses and past disasters:

• Conduct thorough post-incident analyses
• Identify and address root causes of failures
• Update response plans and protocols based on lessons learned
• Foster a culture of continuous improvement and open communication

By treating near misses and past disasters as learning opportunities rather than anomalies, organizations can continuously refine their crisis management capabilities and increase their resilience.

8. Measure success by consequence minimization: Less bad is the new standard

Consequentially, the challenge isn't that nothing was known, but that what was known wasn't acted on.

Redefining success. In an era of recurring disasters, success should be measured not by prevention alone but by the ability to minimize consequences when crises occur. This shift in perspective allows for more realistic goal-setting and better assessment of crisis management efforts.

Key aspects of consequence minimization:

• Focus on reducing the impact and duration of crises
• Develop metrics for assessing response effectiveness
• Prioritize actions that save lives and protect critical resources
• Continuously improve response capabilities based on real-world outcomes

By adopting consequence minimization as the standard for success, organizations can better align their efforts with the realities of modern crisis management and develop more effective strategies for handling recurring disasters.

Last updated: October 20, 2024