People Risk Management and Agile Operational Resilience

White Paper
People Risk Management and Agile Operational Resilience
White PaperPeople Risk Management and Agile Operational Resilience
2© 2023 Everbridge | everbridge.com
With the COVID-19 pandemic, everything we
knew about operational resilience changed. Entire
economies, geopolitical landscapes, and social
norms crumbled, catalyzing the most diverse threat
landscape in decades.
Organizations looking to survive and thrive in this
increasingly diverse and tumultuous landscape must
adjust expectations and reevaluate what it means
to be operationally resilient and agile in the post-
COVID era: This means finding new ways to foster
organizational capabilities, processes, and systems
to the benefit of the organization while effectively
combating disruption, securing enhanced duty of
care, and creating a more cohesive and resilient
organization for years to come.
What do we mean by agile operational resilience? Gartner defines operational resilience as initiatives that expand business continuity management to focus on impacts, risk appetite, and tolerance levels for disruption. But what happens to organizations when new risks like COVID-19 bring into question what it means to be operationally resilient? Businesses must reevaluate their processes and assets, reconfigure their operations, reassess their potential risk appetites, and transform to protect their most valuable assets from harm.
In this paper, we will discuss THREE of the most important regulations U.S. businesses must understand to protect their employees and remain compliant. We will also cover what solutions businesses can implement to ensure success, compliance, and resilience across their entire organization.
Businesses must reevaluate their processes and assets, reconfigure their operations, reassess their potential risk appetites, and transform to protect their most valuable assets from harm.
https://www.gartner.com/en/information-technology/glossary/operational-resilience https://www.gartner.com/en/information-technology/glossary/operational-resilience https://www.gartner.com/en/information-technology/glossary/operational-resilience
White PaperPeople Risk Management and Agile Operational Resilience
3© 2023 Everbridge | everbridge.com
An evolving definition of duty of care An organization is nothing without the support and hard work of its people. As such, a key component of creating and maintaining agile operational resilience in the post-COVID era comes in fulfilling a duty of care to your people, no matter where they are.
Before the COVID-19 pandemic, organizations were mainly focused on fulfilling their duty of care to employees in the workplace or those traveling for company purposes. With titles like risk, security, emergency management, and travel, employers could keep watchful eyes on the workforce in their care. However, with organizations adjusting their expectations and creating cross-functional approaches to risk management, a new definition of duty of care has come to fruition.
• In the wake of so many working remote these days, oftentimes the person dialing 9-1-1 is nowhere near their headquarters’ location.
• In fact, they may be across the country in a completely different state. This becomes exceedingly challenging when the person in the emergency cannot speak or clarify their correct location.
• A solution is required to enable emergency responders to understand exactly where a person in distress is located and how to best get them the help they need, which is where E911 comes into play.
But what assets should organizations emphasize first? The answer is simple: People.
White PaperPeople Risk Management and Agile Operational Resilience
4© 2023 Everbridge | everbridge.com
Holistic risk management: the difference between TRM and PRM Travel risk management’s goal is to create operational resiliency by ensuring employee safety during instances of travel. However, with canceled flights, closed borders, vaccination requirements, and potential quarantining, not to mention an expanding hybrid workforce, travel risk management solutions are struggling to claw their way back to relevancy post-COVID. While TRM and PRM are often touted as being the same, they have some significant differences in how they manage risk.
Travel risk management: snapshot
Both TRM and PRM work to protect your people to fulfill your duty of care. However, TRM takes a narrower approach to this goal, resulting in disparate systems and inevitable gaps in protection. For example, if you had to ask employees to use different processes and systems to convey their location and check-in, confusion and inconsistency would follow. Asking employees to use a single application on their devices to receive and send communications helps businesses keep their employees safe during a risk event while maintaining vital employee privacy.
Asking employees to use a single application on their devices to receive and send communications helps businesses keep their employees safe during a risk event while maintaining vital employee privacy.
https://go.everbridge.com/successful-travel-risk-management-reg-page.html https://go.everbridge.com/successful-travel-risk-management-reg-page.html
White PaperPeople Risk Management and Agile Operational Resilience
5© 2023 Everbridge | everbridge.com
People risk management: snapshot
People risk management (PRM) provides a more holistic approach to risk management by taking a broader and more proactive stance. Unlike TRM, PRM focuses on providing a duty of care to employees regardless of time, location, or circumstance. Employers can ensure their employees are safe by doing things like supporting “see something, say something” programs, implementing digital security escorts, enabling panic buttons for help, and more.
Everbridge, for example, acts as a digital security escort by providing data points on employees regardless of where they are or where they’re going. Without limits, Safety Connection uses valuable data combined with leading intelligence feeds to monitor active threats concerning people’s safety: in or out of their home country, home office, or worksite.
Unlike TRM, PRM works to remediate the risk people in an organization face by taking the necessary steps to identify, assess, respond, and mitigate risks to and by employees, providing a more powerful approach to risk management and long-term operational resilience.
Without limits, Safety Connection uses valuable data combined with leading intelligence feeds to monitor active threats concerning people’s safety
White PaperPeople Risk Management and Agile Operational Resilience
6© 2023 Everbridge | everbridge.com
10 Essential elements of a successful PRM solution
1 Policy and procedure The right PRM solution has infrastructure supporting policy and procedure development, implementation, and continuous improvement.
Training A PRM solution should ensure personnel have the necessary skills to comply with program policy and procedure by providing individual training items.
Risk assessment PRM solutions should have a consistent, documented methodology for evaluating risk and use risk provided as input for overall risk-based decision processes.
Risk disclosure With a PRM solution, information derived from risk assessment analyses ensure all potentially affected individuals understand the risk before it occurs.
Risk mitigation PRM solutions employ strategies resulting in a level of risk acceptable to all stakeholders.
2
3
4
5
Risk monitoring By continuously monitoring potential threats or incidents affecting personnel, a PRM solution provides an easy-to-use process for reporting problems and accessing assistance.
Response and recovery A PRM solution helps by responding proactively to loss and avoiding or mitigating loss with location awareness of personnel, proactive threat monitoring, wellness checks, protective measures, and life safety procedures.
Notification Equipped with the best technology, a PRM solution helps ensure the appropriate people are informed of any relevant risk information while addressing internal and external communications such as stakeholder notifications, escalations, and information requests.
Data management By establishing and maintaining the data required to monitor and manage business assets, a robust PRM solution helps by adhering to privacy and security requirements.
Program communication The best PRM solutions strategically communicate throughout layers of the organization to ensure understanding of both organizational and individual responsibilities. PRM helps customize and automate necessary risk management processes to protect employees in times of low to high risk.
6
7
8
9
10
A PRM solution can help fulfill changing duty of care standards while keeping employees safe and operations running at a higher level.
https://www.everbridge.com/blog/travel-risk-management-and-agile-organizational-resilience/ https://www.everbridge.com/blog/travel-risk-management-and-agile-organizational-resilience/ https://www.everbridge.com/blog/travel-risk-management-and-agile-organizational-resilience/
White PaperPeople Risk Management and Agile Operational Resilience
7© 2023 Everbridge | everbridge.com
PRM and CEM: CEM as the master key to risk management As organizations rethink their position on TRM and PRM solutions, it’s important to restate that both serve as pieces of a risk strategy – and neither should work as the only solution for securing agile operational resilience. To create a holistic approach to risk management, organizations should consider adopting a critical event management (CEM) solution into their long-term risk management and operational resilience strategy.
Successful CEM solutions use technology to automate manual processes and amplify ad hoc data to provide richer intelligence and comprehensive incident assessment and remediation. While PRM works to secure personnel in times of strife, CEM protects people and other valuable business assets, like at-risk equipment and operations. For example, the Everbridge CEM Platform provides end-to-end processes and visibility, allowing organizations to speed up response times to critical events and improve outcomes to risk threats by mitigating or eliminating the impact before, during, and after a threat unfolds.
A PRM solution can help fulfill changing duty of care standards while keeping employees safe and operations running at a higher level.
https://www.everbridge.com/platform/critical-event-management/?trk=google-branded-search&utm_campaign=ggl-main-lp-9-steps-to-critical-event-management&utm_medium=cpc&utm_source=google&utm_content=north-america-white-paper&utm_term=cem%20everbridge&gclid=EAIaIQobChMIluDwgZyx9AIVFxfUAR1fsQezEAAYASABEgJK6vD_BwE https://www.everbridge.com/platform/critical-event-management/?trk=google-branded-search&utm_campaign=ggl-main-lp-9-steps-to-critical-event-management&utm_medium=cpc&utm_source=google&utm_content=north-america-white-paper&utm_term=cem%20everbridge&gclid=EAIaIQobChMIluDwgZyx9AIVFxfUAR1fsQezEAAYASABEgJK6vD_BwE https://www.everbridge.com/platform/critical-event-management/?trk=google-branded-search&utm_campaign=ggl-main-lp-9-steps-to-critical-event-management&utm_medium=cpc&utm_source=google&utm_content=north-america-white-paper&utm_term=cem%20everbridge&gclid=EAIaIQobChMIluDwgZyx9AIVFxfUAR1fsQezEAAYASABEgJK6vD_BwE
Get in touch to learn about Everbridge, empowering resilience.
PR-WP-EN-People Risk Management_03.20.23
About Everbridge Everbridge, Inc. (NASDAQ: EVBG) empowers enterprises and government organizations to anticipate, mitigate, respond to, and recover stronger from critical events. In today’s unpredictable world, resilient organizations minimize impact to people and operations, absorb stress, and return to productivity faster when deploying critical event management (CEM) technology. Everbridge digitizes organizational resilience by combining intelligent automation with the industry’s most comprehensive risk data to Keep People Safe and Organizations Running™.
For more information, visit Everbridge.com, read the company blog, and follow us on LinkedIn and Twitter.
https://www.everbridge.com/ https://www.everbridge.com/ https://www.everbridge.com/blog/ https://www.linkedin.com/company/everbridge/ https://twitter.com/Everbridge