Nuffield Group has established an emergency and crisis management capability – an Integrated Emergency Management Response & Recovery (IEMR) team – tasked to address the ‘before, during, and after’ phases of an emergency scenario. Our team of highly credentialed experts uses a holistic approach to the services it provides across risk management, emergency management planning, training, exercising, and coaching.

We provide expertise and advisory services to support an organisation, individuals and teams tasked with executing emergency management plans. This includes not only compliance before but execution during any major emergency.

We have re-imagined traditional approaches to provide more contemporary thinking in the area of emergency and crisis management. There is ample evidence on the value of investing in thinking and planning management strategies for emergency scenarios; And if nothing else, COVID-19 has taught us the value of having a plan that is not only tested but which considers a range of hazards and scenarios in order to help prevent or manage business disruption.

When framing a Business Continuity Plan, the first building block is an accountability matrix that identifies who is responsible, who is accountable, who needs to be consulted and who needs to be informed. Many organisations refer to it as the RACI model (Responsible, Accountable, Consulted and Informed). Bottom line is – if people are unclear on their roles then successful management of an emergency or disruption will be difficult, resulting in a poor performance.

There are generally four tiers of ownership and oversight of a Business Continuity Plan:

  • The Board
  • Audit and Risk Committees
  • Executive Teams
  • and Business Unit Managers

These four groups can be supported by internal and external audit teams.  It needs to be acknowledged that this is the ideal model and many businesses may have flatter structures. However, the principle of having particular people accountable for particular responsibilities is a foundational piece and the RACI model is a great tool for a cohesive and integrated approach supported by strong leadership.

Once clear accountabilities and responsibilities, and interdependencies vertically and horizontally across an organisation are established, an assessment of the critical products and services an organisation produces or delivers needs to be conducted. What are the tolerance thresholds an organisation can absorb if these goods and services are not being delivered?

A Business Impact Analysis should be conducted to identify the key facilities, equipment, materials, business systems and people (internal and external) involved in producing these goods and services. Conversations with suppliers and customers are critical to ensure a complete assessment and all impacts are fully understood. An investment in this process will enable an organisation to be creative and innovative in adopting solutions to address any identified (and emerging) problems. A focus on Business Impact Analysis outcomes will assist an organisation to develop its mitigation strategies and recovery objectives.

Following on from this organisations must document and adopt a Business Continuity Plan. The plan must be regularly updated, particularly following any disruption, so any lessons learned can be added to a review of the plan. Further, the importance of regularly testing and exercising the Business Continuity Plan cannot be overstated. Exercises must involve all business units to avoid a siloed outcome from occurring. The best results for business continuity are when an organisation works up, down, and across departments, and involves other key stakeholders. Internal and external auditors should be involved but the final document must be real and owned by the organisation. It is critical key leadership groups champion and invest in this aspect of the business.

Testing can occur on an annual basis but it would prove even more prudent to test and exercise when there are changes to business operations. This will build the skill, capability, and agility of an organisation to manage any future challenges.

A key driver of business success is Information Technology continuity services. It is important to ensure processes are in place to address the recovery of IT systems, infrastructure, and data. There is an ever-increasing amount of cybercrime and cyber-attacks on business systems – making it even more compelling to ensure these systems are resilient. Developing standards around service level continuity makes great sense, as does regular testing and reporting across the organisation.

Business Continuity is a function that has to be owned and valued by an organisation. It has to be part of the organisational way of life. It has to be owned by all and it needs to be inclusive; that is it cannot be owned by one person or one business unit. It must flow through the organisation’s attitude, DNA and temperament.

Clearly, Business Continuity Planning is the best form of insurance an organisation can invest in as the world we live in becomes more challenging, uncertain, complex, and ambiguous. It needs to be seen as part of everyday business and valued as something that will enable an organisation to flourish during testing times.

Nuffield Group’s IEMR team is ready to assist your business in developing well considered and sustainable business continuity plans.

Can we help you?

Call 1300 308 257 or +61 404 852 062

Or email us direct at

silience & Business Conitnuity Management

One of the key factors integral to the continued and effective operation of an organisation is a carefully planned and developed Business Continuity Management Planning framework.

Throughout this last 12 months organisations have continued to operate due to the planning they had completed prior to the COVID-19 pandemic challenges, enabling them to pivot and adapt to support the continued delivery of products and services to customers.

Now, as we face further disruption, it is timely to focus on ensuring your business invests the time and effort to review your continuity plans and make any necessary adjustments to build your resilience. The process needs to combine individual and industry learnings and should address issues such as insurance, lease arrangements, supply chains and their resilience, workforce requirements and business systems.

This article focuses on Business Continuity Management, which is a key element of any Risk Management Framework – the purpose of which is to manage actual or predicted disruptions.

A Risk Management Framework is a critical function for successful operations and helps businesses:

  • Identify their risks
  • Determine risk appetite
  • Develop and strengthen risk controls
  • Monitor and measure level of risk

Risk Management is an overlay that organisations adopt to enable them to operate effectively and Business Continuity is a key element of any Risk Management Framework.
A Business Continuity Management System is a tangible demonstration by an organisation to its customers, employees, stakeholders, and suppliers of how resilient their business will be with the supply of products and services during a disruption.

The purpose of an organisation undertaking Business Continuity Planning is to deal with any potential business disruption, including natural and manmade disasters, which do not discern who they impact or when. It is significant to note the frequency of these events, from the evidence available, has substantially increased. Therefore, it makes perfect sense for organisations to spend time in examining the critical functions performed in their business and adopting controls to manage the impacts from any disruptive events.

Organisations are also encouraged to examine their business systems such as information technology, supply chains and third-party providers, to fully understand their vulnerabilities and the mitigation controls that can be adopted to strengthen these systems.

Further, many organisations have clear expectations from investors, stakeholders, regulators, shareholders and the community to prevent or manage these foreseeable events. So, by investing in Business Continuity Management to deal with disruptive events an organisation can minimise impacts to customers, operations, finances, legal & regulatory obligations, brand reputation and materiality.

A Business Continuity Management Framework is the mechanism that facilitates the development of a Business Continuity Plan. The key components of the framework aim to govern, assess, create, train, exercise, maintain and continuously improve the Business Continuity Plan.

Governance is about leadership, structure, accountability, roles and responsibilities, performance standards, communication and integration within and outside of an organisation in considering the importance and needs of suppliers and major customers.

Assessment concerns understanding the critical components of the business that are fundamental to its operation and the controls that can be adopted to manage disruptions.

Creation, or the formalising of arrangements, is another important step and should be conducted across all business units to capture all the interdependencies within an organisation. This approach addresses any siloed culture issues that will prove detrimental to an organisation during a crisis period. There are many examples of plans that have failed due to internal disconnection and siloed approaches. The best results are produced when plans are fully integrated and a ‘whole of organisation’ approach is nurtured and rewarded.

The training, exercising and maintenance aspects of the framework are somewhat self-explanatory but take note: Developing the plans is not the end of the story. Exercising and regularly reviewing to continuously improve plans, particularly after an event, is also critical (and highly recommended).  It simply makes sense to include training, exercising and scenario planning in your corporate training calendar to continually drive success and to overcome any complacency.

A regular ‘review cycle’ allows an organisation to align its changing business strategy with its Business Continuity Plan. During this Covid-19 period organisations that were agile and had given consideration to business continuity were innovative in their operational responses to disruptions.

The Business Continuity Plan should be tailored to the needs of the business and the plan should be scalable and flexible, recognising there will be differences in the impacts and consequences associated with the various types of events an organisation may experience.

There is strong evidence that points to the benefits organisations derive from Business Continuity Management and Planning. The thinking, planning, documenting, exercising and reviewing enable an organisation to absorb and bounce forward more effectively from the shocks and stresses of any disruptions.

Nuffield Group has built a highly capable team to deliver sustainable Crisis and Emergency Management solutions to organisations. Find out more here.

Can we help you?

Call 1300 308 257 or +61 404 852 062

Or email us direct at

Women In Engineering

June 23rd is International Women in Engineering Day (#INWED21) – a day when we celebrate the work and achievements of female engineers and technicians around the world. At Nuffield Group we are blessed to have some really talented women, and whilst not all are qualified engineers, all are highly skilled, experienced and critical to the ongoing success of our organisation and our customers businesses.

International Women in Engineering Day began 7 years ago and has grown spectacularly every year since. Of course, there have been women in engineering for decades but the defining period for the professional and social status of female engineers can be traced back to the First World War when tens of thousands of women were recruited in munitions factories, in the field of transport and the aeronautical and automobile industries. That movement arguably blazed a trail for women in engineering but it still took decades more to fully break down the barriers.

Today, with UNESCO recognition, #INWED21 is about raising the profile of an engineering career as a great choice for women (and young girls), with an exciting future and amazing opportunities. This year’s theme is ‘Engineering Heroes‘ – profiling the best, brightest and bravest women in engineering; Pioneers who recognise a problem, then dare to be part of the solution; who undertake everyday ‘heroics’ as much as emergency ones (like fighting a global epidemic!).

So, at Nuffield Group we’d like, once again, to recognise the critical contribution our ‘women in engineering’ make to us, to our customers and to their colleagues. Celebrate your achievements today and every day…

There are many ways to say ‘thank-you’ and the benefits for both the recipient and the giver of such a small gesture are huge.

This week in AFL the Collingwood players said ‘thank-you’ to their departing coach of the last decade, Nathan Buckley, with an upset win over top of the table Melbourne. Yesterday, a driver on the freeway waved a ‘thank-you’ to another driver who left a gap for them to merge in to. Today, my son and daughter did the cooking and cleaned up (THANK YOU!)…

It’s a simple but powerful gesture of appreciation that conveys both gratitude and respect at the same time. Whilst it has long been recognised that there are strong benefits between two people involved in an exchange of gratitude (saying ‘thank-you’ is good for our health and happiness), new research has shown that there’s a ripple effect too.

It’s now acknowledged that there’s a third-party impact on family, friends, neighbours, co-workers and even complete strangers who witness an act of gratitude. It’s a simple act that can bring entire groups together, inspiring people to connect better with each other by building trust and closer bonds.

When it comes to resilience, gratitude has been shown to increase a person or a group’s capacity to recover quickly from difficulties or challenges. The impact of gratitude, from a resilience perspective, is incremental. It’s not as instantaneous as the other benefits (above) but works over time by helping “repair the psychological damage inflicted” by disasters and hardships; it is developed by fostering positive growth, that aids recovery.

It may be as simple as this: gratitude makes us reflect on ourselves and our lives, averting attention from the negative to the positive. Whatever the psychology behind it though, being grateful, acknowledging gratitude, witnessing the ‘thank-you’, all help develop us for the better – one ‘thank-you’ at a time.

Nuffield Group’s Integrated Emergency Management & Recovery team incorporates human factors (like gratitude) and an understanding of team interaction as part of its emergency management training program to help build resilience. Read more here.


Mental Health Matters

It’s June 2021 and Victorians are emerging from yet another COVID-induced lockdown and all the associated side effects business closures and working from home create. So, now is as good a time as any for businesses to develop a mental health risk plan for the wellbeing of all their staff, customers and suppliers.

In terms of business risk, mental health is unique and challenging. Stigma and shame are all too often associated with mental health – which makes disclosure hard…

When the pandemic first hit Australia (way back in March 2020) Nuffield Group developed a guide to help businesses step through the process of developing a Mental Health Risk Plan specific to their organisation. The guide used a risk management framework approach to show businesses how to develop a mental health risk plan. You can get a copy here.

Mental health hazards and their associated risks are usually considered as ‘Headline Risks’ and it is incumbent on an organisation to ensure these risks are managed with appropriate and effective governance processes.

It is important to document the ‘What, How and Why’ for each hazard but first you need to:

  • identify the mental health hazards (internal and external)
  • describe the identified hazards & add them to your risk register
  • evaluate the mental health hazards
  • determine the actions required in response to the hazards

In this framework using your risk register allows you to not only understand the risks and the controls you’ve identified but to track any actions and progress made in implementing controls.

An example of an appropriate risk register is available in the guide provided here.

Remember, a healthy workplace that supports the mental health of its employees should include the following:

  • Prioritising mental health by providing mental health education for all employees to raise awareness, increase understanding and encourage open discussion
  • Encouraging a trusting, fair and respectful culture so employees at all levels can interact with honesty and respect with colleagues, suppliers, customers, and the public
  • Ensuring open and honest leadership which gives employees a sense of shared purpose in the goals of the organisation
  • Developing good job design by matching job roles to people’s skills and abilities, ensuring they are physically safe and offer working arrangements that suit employees
  • Managing workload by setting tasks that can be accomplished successfully in a reasonable time, using readily available resources
  • Offering employees an environment where 2-way feedback is encouraged, acknowledged and rewarded
  • Ensuring employees feel included and have control of the way they work and input to the important decisions of the organisation
  • Recognising the importance of successfully integrating work with life and provide employees the opportunity to manage the demands of work, family, and personal
  • Enabling managers and business leaders to be responsive to employees’ mental health conditions, regardless of cause, and letting them make adjustments to work and counselling support as required

Using a risk management framework to develop a mental health plan for your business is a great resource which can (and ideally should) be supplemented by the support resources available from the many Mental health charities we have in Australia. These are particularly useful for implementing mental health plan controls and understanding some of the unique challenges mental health creates. Check out:

Mental Health is back in the news this week with another State lockdown in Victoria and the withdrawal of tennis star Naomi Osaka from the French grand slam at Roland Garros – both highlighting the toll on individual wellbeing of stressful events and situations. It’s time to talk – Mental Health needs to be mainstream.

At Nuffield Group we recognise the importance of positive mental health in creating strong and resilient working environments, leading to increased productivity and staff retention. That’s why we promote building mental health strategies to reduce risk at every workplace.

And it all starts with awareness. Employment is a significant part of a person’s life and employers can affect their employee’s mental health positively and, whether it be intentional or not, negatively. So, to build resilience organisations need to raise awareness; to engage with employees to both prevent and address mental health issues. There are a number of things organisations can do:

  • Jobs can be designed to promote positive mental health and wellness and remove risks like stress or trauma
  • Workplace health programs can be run to raise awareness and open communications to remove the stigma around mental health
  • Support mechanisms can be put in place to identify issues early and assist employees in appropriate ways

Regular, honest and open communications are central to any organisation and especially at times like these when Covid-19 is causing so much uncertainty and anxiety.

Everyone reacts differently to these challenges and organisations must be mindful of the new risks changing procedures can bring. For, example, socially distancing at work or working from home has become the norm during the pandemic but how are these practises impacting your employees? Are they more isolated as a result? Do you need to review and change your support procedures to deal with the ‘new normal’?

Of course, mental health awareness and training programs are an extremely effective way to engage employees and raise their awareness. And, in turn, this improves communications and support structures, empowering individuals to look out for themselves as well as their fellow workers.

Nuffield Group has worked with Lifeline Australia to produce and distribute a “Workplace Mental Health Resource for Managers” to our customers via our membership platform, GNTX. Given the importance of this resource and the ongoing challenges we all face, we’re also making it available free here.

Stakeholder collaboration in Emergency Management

At Nuffield Group we don’t believe our dealings with our customers are transactional. We believe in establishing strong, mutually beneficial relationships that are ongoing. It’s a philosophy we seek to extend throughout our network and supply chain because we recognise the benefits of shared value and shared knowledge. Bottom line: Stakeholder collaboration is essential. Take […]

Business Continuity

Business Continuity Plans need connection if they are to succeed in managing a disruptive event. The benefits of good business continuity planning have been self-evident over the past 12 months. Organisations that have good Business Continuity Planning systems in place have been successful in both managing and adapting to the changing operating environment resulting from the COVID pandemic.

They’ve done this by having a thorough knowledge of the critical elements of their business both internally and externally. The importance of recognising and working with suppliers and customers in the formulation and exercising of Business Continuity Plans cannot be overstated. The organisations that have flourished during these challenging times have been agile and had alternate solutions in place, practised and ready to go.

Businesses that have treated Business Continuity as more than a process have been the businesses that have been successful. Organisations that have gone beyond simply applying a template approach and instead produced a business continuity plan developed with input from all areas of their business, are the ones that have thrived.

The importance of organisational interdependencies is key. It is the vital piece of the business continuity jigsaw, the adhesive that gives life and meaning to a Business Continuity Plan.

There is little meaning, and a low probability of success in the deployment of a Business Continuity Plan, if it has not been built by the very business units that will be impacted by the disruption. If there isn’t this symbiosis with the relationships and the connections across the entire organisation, then the implementation of any plan will be fraught and doomed to fail from the outset.

Business Continuity Planning is a whole of organisation requirement. It may well be the case a single person or a business unit is accountable for the development, exercising, updating and implementation of a plan, however, other business units with particular responsibilities enabling continuity of services must support the accountable business unit. Therefore, there will always be other areas within an organisation that should be consulted and informed on aspects of the business continuity planning process. The input of a greater diversity of corporate knowledge leads to best practice solutions.

A siloed approach in developing business continuity plans denies an organisation the ability to use all of its intellectual and corporate knowledge to deliver optimal solutions. It also reinforces and perpetuates an unhealthy culture. The idea of business divisions operating independently and avoiding knowledge sharing is not a foreign notion. These limitations can be overcome through leadership, governance and systems.

The leadership of an organisation has the accountability to ensure the organisational goals are clearly spelt out and communicated to avoid any ambiguity and avoid teams making their own interpretations and defining what the organisational goals are. This is but one key action leadership can enact to promote a ‘joined-up’ approach.

The governance around business continuity planning is another lever that is important because of the high stakes and consequences associated with getting business continuity right. Governance mechanisms are critical to ensure the right outcomes are achieved. Some suggestions of good governance practice include, involving boards and board sub-committees in the development and exercising of these plans; regular discussions, exercising and reporting on performance associated with business continuity planning; reward and recognition programs for good performance and the engagement of an external body to provide independent assurance of the process and product.

Finally, the systems an organisation has in place to guide the conduct of the preparation, readiness, response and review of a business continuity plan are another important aspect. An organisation must have clear policies, standards, processes and procedures in place to ensure its systems are robust and clear to all.

Business continuity planning is a wise investment in managing organisational risk and Nuffield Group encourages all organisations to take the time to reflect on how their business is placed to manage a disruption.

How to Future Proof Your Business

So, you want to future proof your business to maximise a successful recovery in the event of an emergency or crisis. Where do you start?

Nuffield Group provides Emergency and Crisis Management services to its customers and one area we focus heavily on is the importance of planning for disruption from a wide range of natural and man-made causes.

Emergency Management is essentially made up of four pillars;

• Prevention

• Preparedness

• Response

• Recovery

The first three pillars are generally understood. There are many examples of activities around planning prevention, preparing response, and responding to an emergency event. Most organisations undertake these three pillars in order to meet health, safety and environmental compliance as part of good governance programmes. However, the fourth pillar, recovery, is often seen as an outlier – something to tackle only when it is time to recover.

Governments and agencies have been developing their thinking about what makes for a good recovery and many have produced recovery frameworks based on key take-outs from actual emergency events.

What enabling factors assist a business in preparing recovery plans?

At the centre of every emergency event are people; Generally, these are your employees, contractors, shareholders, stakeholders, customers and community members who have varying levels of dependence on your organisation. All of these groups face consequences as the result of an emergency event impacting your organisation and some of these impacts can be very deep, affecting their lives, health and livelihoods.

Recovery is about alleviating the negative impacts of an emergency event on a business by enabling the people and removing any and all uncertainty. Through enabling, the organisation and those people impacted can collectively commence to rebuild, restore and resume a level of normality to their operations and their lives.

The question of how to activate enablers is a complex one and depends on many factors such as business values, priorities, strengths and weaknesses, leadership and history. But experienced emergency managers subscribe to six key principles of recovery:

Principles of recovery:

1. Understand the context

Successful recovery is based on an understanding of the business’ operating environment and requires adaptability.

2. Recognise complexity

Successful recovery is responsive to the complex and dynamic nature of the emergency and the business.

3. Use business led approaches

Successful recovery is business-centric, responsive and flexible, engaging with all stakeholders to move forward.

4. Coordinate all activities

Successful recovery requires a planned, coordinated and adaptive approach, between businesses and stakeholders, based on continuing assessment of impacts and needs.

5. Communicate effectively

Successful recovery is built on effective communication with and between all affected stakeholder groups.

6. Recognise and build capacity

Successful recovery recognises, supports, and builds on individual and organisational capacity and resilience. The capacity needs of a business are assessed and integrated with other risk management practices adopted by an organisation. Recovery management is a key element of any business’s risk management framework.

What does this mean for your business?

These six principles apply equally in your business as they will provide your organisation with the resilience it requires to manage the shocks and stresses an organisation will often face in an emergency event.

Establishing likely emergency scenarios on your business’s risk matrix can assist to inform your recovery plans ahead of time and help build your business continuity plan.

Above all else remember, recovery is not an afterthought.

Nuffield Group provides consultancy and advisory services and also has an online platform, GNTX, for the exchange of non-competitive information and tools allowing businesses to share, download and modify frameworks and documents for their own use. Find out more about GNTX here.

Emergency Planning & the human factor

Nuffield Group has established a team of highly credentialed experts as part of its Integrated Emergency Management & Recovery team (IEMR). The emergency and crisis management capability adopts a holistic approach which includes risk management, emergency management planning, training, exercising and coaching of individuals and teams. This approach strengthens an organisation’s emergency management response plans, and importantly their response to an emergency.
When you think about it, it always comes down to decision making…
Every day, on average we make more than 35,000 decisions according to studies, some big, most small, some important and others not. But what about our decision-making in the time-critical, high-risk environment of emergency management and response? When you actually distill it right down, emergency response is, a decision-making exercise that is typically shrouded with uncertainty, complexity, and friction.
Every business and industry should have emergency management and response plans, that are designed to assist decision-making in the response to an emergency. In “routine”, smaller emergencies, or well-ordered situations these generally work well, however, success is dependent on the ability of those involved to make good decisions by following the plan. But what if the situation isn’t quite the same as the plan? What if it is an event that is not in the plan or the human element impacts on decision making? Or what if the event is of such an unprecedented scale, or beyond ordinary resourcing?
Research (Weick, K., and Sutcliffe, K. 2001. Managing the Unexpected) identified three ways that risk-mitigation planning can reduce an organisation’s mindfulness:
• Plans sensitise us to expect some things but that can mean ignoring other things we don’t expect
• Plans tell people in an organisation how they are supposed to react, so they may not notice how their organisation’s capabilities have eroded
• And lastly, routines can’t handle “novel” events, but we continue to build our plans around “routine” emergencies and a checklist approach to response, particularly in those first critical hours of an emergency
If you think about every significant disaster/emergency event over the years, how did the initial emergency response plans work in those first couple of hours before help arrives? It is these first few hours of any incident that are critical, and it is the actions in the early stages of response that set the direction and tempo for all that follows.
In these chaotic environments, our decision-making takes on different forms when we are faced with ambiguous, complex, and unpredictable situations coupled with interrelated variables that are beyond our control. One inescapable fact is the human element is core to success.
• Human decision making and communication are foundational
• Situation awareness is critical
• Human error is certain
Typically, our emergency planning starts by analysing the risks faced by individuals or communities, the vulnerability of infrastructure followed by developing protective features to mitigate those risks. But what if we focused on preparing for or responding to a risk/hazard rather than just on the hazard itself? With this approach, when we are developing our emergency management and response plans, we think first of how individuals are likely to perceive risks, why they might not adopt preparedness or response measures. This enables us to work with rather than against peoples’ natural decision biases and human factors influences.
This still may not result in the perfect plan or the perfect response, but in conjunction with a learning culture, training and exercising to develop decision-making skills, sense-making and adaptive skills we can develop expertise in organisations and key operators who have to manage and respond to these types of events.
These extreme emergency situations are very rare, so it is easy to focus on the “routine” type emergencies, however, on the flip side it is these “novelty” events that can actually ruin a business. Nuffield Group is ready to assist your business to better prepare your organisation and your staff to challenging, uncertain, and complex situations.
“In complex situations, people will need judgement skills to follow procedures effectively and go beyond them when necessary.” Gary Klein, “Streetlights and Shadows”.

This article is one in a series brought to you by Nuffield Group, focussing on planning for emergencies, training, coaching and exercising your staff to build a capability that adds safety and resilience to your organisation. Nuffield Group is able to assist you in taking these important steps preparing to respond and manage emergencies.

Call 1300 308 257 or +61 404 852 062
Or email us direct at