Cybersecurity Incident Response: Building an IR Plan
What goes into a cybersecurity incident response plan, the NIST SP 800-61 lifecycle, and how the 2025 revision aligns it…
Spotlight · Operations & Project Delivery
Supply Chain Resilience: Managing Third-Party and Supplier Risk
How to build supply chain resilience: mapping and tiering suppliers, assessing their resilience, and planning for vendor disruption.
Latest Features
All stories →
Building a Crisis Communication Plan
How to build a crisis communication plan, grounded in the CDC's six CERC principles: be first, be right, be credible,…
How to Run a Tabletop Exercise (and Why Drills Matter)
How to run a tabletop exercise to test your emergency plan, plus how tabletops fit among the seven HSEEP exercise…
How to Conduct a Business Impact Analysis (BIA)
A step-by-step guide to conducting a business impact analysis: identifying critical activities, quantifying downtime, and setting recovery targets.
Building Organizational Resilience: Lessons from High-Reliability Organizations
High-reliability organizations like aircraft carriers rarely fail. Their five principles offer a practical blueprint for organizational resilience.
Workplace Emergency Action Plans: What OSHA Requires
What OSHA's emergency action plan standard (1910.38) requires: when a written plan is mandatory, the six required elements, and how…
By Industry
The brief, once a week
New profiles and the ideas behind them, delivered every Thursday. No noise.