Uncategorized

Why crisis management in companies? "They'll never go bankrupt, they're so big and professional..." This sentence is often heard and in the end it nevertheless happens. A crisis occurs and is not handled professionally. Often negative consequences up to insolvency are imminent. Crises due to market dependencies or changes. The globalization of markets and the expansion and merging of companies into large corporations create a complicated network of dependencies. The more interconnected a system is, the more susceptible it is to disruption or crisis. The trend toward globalization and networking of markets will continue in the future. Accordingly, market crises are not entirely avoidable, even for medium-sized companies and large corporations. Political factors such as Brexit or trade wars also lead to massive uncertainty. Yet it is only in these situations that companies become aware and more visible of their many dependencies. Why Brexit should be considered an emergency [...]

Keeping an eye on the numerous legal requirements for companies is a great challenge for many entrepreneurs. And yet it is worth taking up this challenge. Legal violations can quickly turn into a tangible crisis for the company. Claims for damages (e.g. from product liability), fines (e.g. breaches of antitrust law or data protection requirements), but also financial losses due to loss of reputation; whether committed intentionally or negligently, the legal consequences of a breach of law can endanger the continued existence of the company. The entrepreneurial framework of responsibility and action and the associated obligations and risks should therefore be known and regularly reviewed. A functioning compliance management helps to identify the requirements and risks and can serve business continuity management as the basis for a comprehensive risk analysis. Furthermore, it supports the prevention of legal violations with suitable measures such as training and sensitization and thus [...]

Immediate Action Plan, Business Continuation, Recovery Emergency management has its own vocabulary. The graphic from the BSI 100-4 Emergency Management provides a good overview of the chronological sequence. We explain this using a simple example: You have planned a romantic dinner for your partner's birthday and are sitting at home in your living room opposite the dinner table. Suddenly, all four light bulbs of their ceiling lamp fail. Unexpectedly you face a crisis. The time until you notice the failure is the detection time. Ideally, this time is short. A smoke detector, for example, has a shorter detection time of a room fire than your sense of smell when you sleep. So, you are sitting in a pitch-dark room. While you are still thinking about what to do, your partner has already pulled out the smartphone, switched on the flashlight, placed it on a glass and continues to [...]

Trust generates an expectation of a certain type of behaviour. This expectation of behaviour is the basis of all private, professional and business relationships. If the trust is abused, misled about ones true intentions and fooled, the trust is "BROKEN". For organizations and their processes, a breach of trust by the people involved means the destruction of process security, the loss of quality control and manageability. This destructive process has a name: Corruption. (Corruptio (lat.): Corruption, corruption, decay of morals) General definition of corruption ISO 37001: Offer, promise, grant, accept or demand an undue advantage of any value (which may be financial or non-financial), directly or indirectly and regardless of the location(s), in violation of applicable law, as an incentive or reward for any person in connection with the performance (3.16) of, or failure to perform, that person's duties. Corruption is first and foremost an ethical activity category. [...]

Gartner, Inc. has identified seven emerging security and risk management trends that will impact security, privacy and risk managers over time. Gartner defines the top trends as ongoing strategic changes in the security ecosystem that are not yet widely recognized, but are expected to have a broad impact on the industry and a significant impact. According to Gartner, the seven most important trends for security and risk management are for 2019 and beyond: Trend #1: Risk appetite statements are linked to business results. As IT strategies become more closely aligned with business objectives, the ability of Security and Risk Management (SRM) executives to effectively present security issues to key decision-makers in the organization is gaining in importance. "To avoid focusing solely on IT decision-related issues, create simple, practical, and pragmatic risk-taking statements that are related to business objectives and relevant to board level decisions," said Peter Firstbrook, research [...]