Entry
Reader's guide
Entries A-Z
Subject index
Auditing
Auditing may be defined as the systematic evaluation of a system, function, task, or organization according to established and measurable standards and criteria. Accepted industry practices for business continuity have long included auditing of the areas of safety, security, and emergency preparedness for compliance with requirements both internal and external. Crisis management, as a subset of safety, security, and emergency preparedness, can reap many benefits from a rigorous and regular auditing program to establish the state of preparedness and the effectiveness of procedures, policies, programs, and processes and to provide corrective action where noncompliances or deficiencies are noted so that remedial measures may be put into place prior to failure in implementation.
Purpose of Audits
Auditing is part of preparedness. Clearly, prevention is the highest form of crisis management, and auditing to ensure that preventive measures are in place, as well as responsive measures, is a primary concern in assuring that any organization, jurisdiction, or agency is as well prepared for crisis as possible.
Audits can be performed to meet external requirements for assessment, or they can be an internal process designed to measure an agency's ability to meet its own requirements for preparedness and recovery. Sometimes both external and internal audits are mutually required, with the external audit assessing the efficacy of the internal audit as a measure of quality assurance.
Management Audits
There are several different approaches that may be adopted for the purpose of auditing plans, programs, and procedures for crisis management. Compliance audits measure the implementation of written manuals, procedures, and work instructions, and this is most certainly an effective method of measuring preparedness and response in crisis management. However, management audits make additional analyses of the agency's documents, processes, and activities to focus on results. This is a process that evaluates not just the existence of procedures, programs, and processes but also the effectiveness and suitability of these controls (in this case, to address adverse events that will result in crises that can reasonably be foreseen to occur for the agency, organization, or jurisdiction). It may include reviews and evaluation of methodology and approach. Management audits are compliance audits that additionally employ cause-and-effect analysis. Their evaluation methodology provides the opportunity to identify hazards or failures that occur in chains of events, not simply in one step of the process. For this reason, it is a more effective approach to auditing for critical processes, including crisis management.
The outcome to be considered is the ability to manage adverse events and to recover in an effective and efficient manner. The auditor(s) should ensure that careful review of processes and protocols is performed to ensure that the interrelationships can be adequately explored through the audit process.
Systems Approach
It is well established that effective management of crises is an interdependent process; many agencies, departments, and organizations work together to maximize response and recovery, and in essence, the discrete organizations become a system during crisis management. Auditing of preparedness for crises must take into account and evaluate the interactions between these critical partners. Interdepartmental and interagency communications protocols are critical elements of preparedness and should be well documented and exercised as well as included in the audit process.
...
- Agencies, United Nations
- Bureau for Crisis Prevention and Recovery, UN (UNDP/BCPR)
- Environment Programme, UN (UNEP)
- Food and Agriculture Organization of the United Nations (FAO)
- International Children's Fund, UN (UNICEF)
- International Strategy for Disaster Reduction, UN (UNISDR)
- Interregional Crime and Justice Research Institute, UN (UNICRI)
- Office for the Coordination of Humanitarian Affairs (OCHA), UN
- World Health Organization (WHO), UN
- Agencies, U.S.
- Centers for Disease Control and Prevention (CDC)
- Department of Homeland Security (DHS)
- Emergency Management Agencies, City and County
- Federal Bureau of Investigation (FBI)
- Federal Emergency Management Agency (FEMA)
- National Oceanic and Atmospheric Administration (NOAA)
- State Emergency Management Agencies
- U.S. Geological Survey (USGS)
- Categories of Crises: Engineering and Technological
- Air Traffic Control
- Air Travel
- Biological Engineering Risk
- Bridges
- Buildings
- Chemical Risk
- Cyber Crime
- Cyber Security
- Cyber Warfare
- Dams, Levees, and Seawalls
- Electronics Waste
- Environmental Contamination
- Hazardous Materials
- Hazardous Waste Disposal
- Improvised Explosive Devices
- Manufacturing Risks
- Marine Shipping
- Marine Travel
- Mining
- Nanotechnology
- Nuclear Risks
- Ozone Layer Depletion
- Petrochemical Risk
- Sewage Spill
- Smog
- Spaceflight
- Transportation Systems, Vulnerability
- Y2K Bug
- Categories of Crises: Financial and Business
- Categories of Crises: Natural Disasters
- Categories of Crises: Politics, International Relations, and Civil Violence
- Arms Control
- Biological Weapons
- Border Disputes
- Cabinet Office, UK
- Chemical Weapons
- Civil War
- Ethnic Cleansing
- Failed States
- Foreign Policy Crises
- Hijackings
- Hostage Taking and Negotiation
- Human Trafficking
- Interstate War
- Land Mines
- Missiles
- Nuclear and Radiological Weapons
- Nuclear Proliferation
- Peacekeeping
- Protest
- Religious Violence
- Revolution
- Riots
- Suicide Bombings
- Terrorism
- Transportation Security
- War Crimes
- Weapons Trafficking
- Categories of Crises: Population and Demographics
- Disaster Information Databases
- Nongovernmental Organizations
- Risk Management Standards
- Theory, Issues, and Techniques: Civil
- Agency Notification and Mobilization
- Civil Protection
- Civilian Protection, Post-Conflict
- Contingency Planning
- Continuity of Government
- Crisis Information Management Systems
- Debris Management
- Decision Making
- Decision Support Tools
- Disaster Assessment
- Disaster Declaration
- Disaster Risk Reduction
- Documentation
- Emergency Alert Systems
- Emergency Management System
- Emergency Manager
- Emergency Support Functions
- Financial Risk Management in Higher Education
- Hazard Mitigation
- Incident Action Plans
- National Incident Management System (NIMS)
- National Preparedness Goal
- National Response Framework
- Operational Plans
- Operational Readiness
- Perimeter Control
- Policy Setting
- Political and Organizational Leadership
- Preparedness
- Prevention
- Protection
- Search and Rescue
- Situational Analysis
- Stafford Act
- Sustainability
- Threat Detection
- Theory, Issues, and Techniques: Corporate
- Alternate Site, Corporate
- Auditing
- Backup Facility
- Backup Media
- Backup Strategy
- Business Continuity Management
- Business Continuity Planning
- Business Continuity Planning Life Cycle
- Business Impact Analysis
- Business Resumption Planning
- Classification of Systems
- Cluster
- Cold Site
- Continual Improvement
- Critical Applications
- Critical Business Functions
- Criticality Assessment
- Data Mirroring
- Data Recovery
- Dedicated Site
- Disaster Declaration Officer
- Disaster Recovery
- Disaster Recovery Life Cycle
- Disaster Recovery Plan Test Cycle
- Downtime
- Electronic Vaulting
- Failover
- Fink's Crisis Life Cycle
- Impact Analysis
- Incident Management
- Incident Response
- Insurance
- Journaling
- Losses, Quantitative Versus Qualitative
- Maximum Acceptable Outage
- Minimum Business Continuity Objective
- Mirroring
- Mitroff's Five Stages of Crisis Management
- Mobile Recovery Site
- Reciprocal Agreement
- Reciprocal Site
- Recovery Time Objective
- Reinsurance
- Reputational Risk
- Response Team
- Strengths, Weaknesses, Opportunities, and Threat (SWOT) Analysis
- Supply Chain
- Vital Records
- Warm Site
- Theory, Issues, and Techniques: General
- All-Hazards
- Cascading Crisis
- Catastrophe, Definition of
- Climate Change Adaptation
- Collaboration
- Command and Control
- Contingent Coordination
- Coordination
- Coping Capacity and Response Capability
- Credibility
- Crisis Communications
- Crisis Management, Emerging Trends in
- Crisis Simulations
- Crisis, Definition of
- Critical Infrastructure
- Damage Assessment
- Damage Containment
- Debriefing
- Decision Making Under Stress
- Disaster Drills
- Disaster, Definition of
- Disruption of Organizations
- Early Warning Systems
- Electronic Media
- Emergency Management, Principles of
- Emergency Medical Care
- Emergency Operations Center
- Emergency Public Information
- Emergency Responders
- Emergency, Definition of
- Evacuation
- Exercises
- Fusion Center
- Hazard Vulnerability Analysis
- Hazard, Definition of
- Historical Analogies, Use of
- Impact, Definition of
- Improvising
- Incidents Versus Crises
- Interdependence
- Interoperability
- Legal Liability
- Logistics
- Mass Care
- Mass Fatality Management
- Mass Media
- Mental Models
- Methods, Qualitative
- Methods, Quantitative
- Multiple Disaster Problem
- News Media
- Nongovernmental Organizations
- Nonlinearity
- Panic, Nature and Conditions of
- Pre-Crisis Training and Planning
- Pre-Impact Planning Process
- Public Awareness and Education
- Public Image
- Public Relations
- Recovery
- Residual Risk
- Resiliency
- Resource Management
- Response
- Risk Analysis
- Risk Assessment
- Risk Treatment
- Routine Emergencies Versus True Crises
- Safety Policies
- Scapegoating
- Scenario Planning
- Shelter-in-Place
- Simulations
- Social Media
- Spokesperson, Designating and Utilizing
- Stakeholders
- Strategic Plans
- Training
- Trauma
- Trigger Events
- Uncertainty
- Volunteer Coordination
- Vulnerability
- Warning
- Whistle Blowers
- Worker Error
- Theory, Issues, and Techniques: Public Health
- Cholera
- Drug Resistance
- Ebola Virus
- Emergency Medicine
- Epidemics
- Health and Medical Response Scenarios
- HIV/AIDS Epidemic
- Hospital Emergency Room
- Infectious Disease
- Infestations, Parasite
- Influenza
- Living Modified Organisms
- Malaria
- Measles
- Mental Illness
- Noncommunicable Diseases
- Pandemics
- Post-Traumatic Stress Disorder
- Public Health Surveillance
- Public Safety Canada
- Quarantine
- Severe Acute Respiratory Syndrome (SARS)
- Smallpox
- Social Distancing
- Surge Capacity, Hospitals
- Triage
- Tuberculosis
- Vaccinations
- Theory, Issues, and Techniques: Social Sciences
- Blame, Politics of
- Bounded Rationality
- Bureaucracy
- Chaos Theory
- Cognitive Novelty, Engaging in
- Cosmology Episode
- Coupling
- Decision Making, Theories of
- Decision Stream
- Groupthink
- High Reliability Organization Theory
- Information Asymmetry
- Information Vacuums
- Normal Accident Theory
- Normalization of Deviance
- Organizational Failure
- Paradigm Blindness
- Practical Drift
- Risk Society
- Structural Secrecy
- Loading...
Get a 30 day FREE TRIAL
-
Watch videos from a variety of sources bringing classroom topics to life
-
Read modern, diverse business cases
-
Explore hundreds of books and reference titles
Sage Recommends
We found other relevant content for you on other Sage platforms.
Have you created a personal profile? Login or create a profile so that you can save clips, playlists and searches