Lootok

Menu

What's new?

Lootok names Managing Director, Brian Collins

Consulting at the board and the C-suite levels require more than experience and expertise. Presence matters. Strength of conviction matters. This caliber of consultant is a partner who confronts the thorniest topics head-on and who can speak the language of today’s leaders. Lootok has found such a talent. It is with great enthusiasm and expectation that Lootok announces Brian Collins as Managing Director. Mr. Collins joins Lootok with more than twenty years of risk management experience across industries and sectors. Based in Washington, DC, he will lead the global crisis management practice.

Mr. Collins is a decorated Marine officer with awards for valor in combat and service. He has worked at the highest levels of government with General/Flag Officers, Assistant Cabinet Secretaries, and Ambassadors. He paired his extensive governmental experience with a master’s degree from Georgetown University and graduated from the Senior Executive Fellows program at the Harvard Kennedy School.

Read Post

A Game of Supply Chain Risk

By Susan Lacefield

Mars Inc. has found that games are an effective way to teach supply chain risk management and resiliency.

When the pet food, candy, and drink company Mars Inc. wants to start a discussion with internal or external supply chain partners about supply chain risk management and resiliency, it basically holds a game night.

Chris de Wolfe, director of risk management, admits that initially he was skeptical that card and board games could help launch a supply chain risk management program. But he has since found that simulation activities are the best way to identify pain points and open people’s eyes to the risks around them.

De Wolfe and Sean S. Murphy, CEO of the business continuity consulting company Lootok Ltd., described two of the games that they use during a breakout session at the Institute for Supply Management (ISM) 2018 Annual Conference. These games have been used both at local Mars sites as well as with the companies’ key vendors.

Read Post

Breaking the Business Continuity Mould

Breaking the Business Continuity Mould

Embrace the process, not the destination

Business continuity and crisis management is moving from its traditional roots and by-the-book implementation, to a much more disruptive—and much more effective—process. Business continuity planning has become more complex, nonlinear and inclusive of multiple third parties, and the growing ecosystem of cloud and as-a-service providers has moved much of the risk outside of the immediate control of the risk manager. This is all complicated by the inherent difficulty in getting buy-in and participation in what is often a project nobody really wants to be a part of.

It becomes even more complex when planners must prepare for a wider group of possibilities, which includes not only natural disasters, labor disputes and equipment failures, but cyber-disasters which are often not as well defined and even more unpredictable, and are based on environments and actors which have no physical boundaries.

Read Post

The Psychology of Risk

Over the past several years, psychologists, behavioral scientists and academics have helped to advance our understanding of human psychology and, specifically, how humans respond to high-risk and crisis situations. This research has highlighted how a lack of pre-crisis training and preparation may exacerbate risk and cause unnecessary errors during times of stress and uncertainty.

The good news is that these experts can also help us better understand the best ways for businesses to help individuals prepare and train for such situations so they can contribute positively to the risk management and crisis mitigation process.

But while the need for crisis and business continuity planning is clearly recognized by a wide swath of businesses and many endorse and utilize such programs, the degree to which companies and their risk managers have embraced the findings of what some call “the psychology of risk” is sorely lacking.

For the entire article please visit rmmagazine.com

Lootok Resiliency Summit: The best risk managers don’t do it alone

The best risk managers don’t do it alone

How can I ensure our internal stakeholders are properly trained on risk management? How can I make sure the quality of plans is consistent within a global organization? How do I get people to care when they’re facing limited resources, budget, and time?

This is what every global risk, crisis, and security leader asks—and they’re disappointed when I tell them there aren’t easy answers. There’s no magic pill that transforms someone into a thoughtful continuity planner or an informed risk management advocate. The fact is, it takes time to educate and train stakeholders on important initiatives, and effort to establish the processes and protocol that facilitate consistency. It also may mean giving people dedicated time (especially if they’re strapped for time already) to devote towards proper training and development.

 

Read Post

Lootok: Three must-know lessons from my last business continuity site visit

Three must-know lessons from my last business continuity site visit

I often serve as an extension of our client’s risk management team. Recently, I visited a client site to implement a continuity program focused on manufacturing recovery. Approaching new sites can be a challenge, particularly for recently established programs. I’m always reminded that first impressions—of people and of programs—are lasting, and it’s not easy to spark engagement and support from local teams. In my experience, here’s what works in winning them over…

 

 

 

Read Post

Press Release: ClearView named a leader in Gartner’s 2017 Magic Quadrant

Clearview

 

ClearView is proud to announce that it has once more been positioned in the Leaders Quadrant in Gartner’s July 2017 Magic Quadrant for Business Continuity Management Program Solutions, Worldwide.

CEO Charles Boffin comments, ‘We are delighted that we have once more been recognised as a leader in the market as we continue to focus on our core principles of delivering a sophisticated and functionally-rich platform in a way that makes it easy to use and intuitive for all users, irrespective of role in an organisation. We believe our continued placement in the Leaders quadrant demonstrates our ongoing commitment to remain a key player globally in this field.’

Gartner subscribers may download the full report here.

Read the full press release on clearview-continuity.com

Read Post

Lootok CEO to share a revolutionary approach to crisis and risk management at two industry events

See Sean Murphy speak at OSAC Crisis Management Forum and APTA’s Risk Management Seminar this August


Sean Murphy, CEO of the crisis management and business continuity consulting and technology company Lootok, will share his expertise and insights at two high-profile events this year. On August 7, he will present at the American Public Transportation Association’s (APTA) Risk Management Seminar in San Diego. Immediately following the APTA Seminar, Murphy will be a featured speaker at the U.S. Department of State’s Overseas Security Advisory Council (OSAC)’s Crisis Management Forum in Minneapolis on August 8 and 9.

The APTA Risk Management Seminar is the only risk management seminar dedicated to risk management professionals involved in transit risk management. This year’s agenda features new and creative thinking for risk managers—presenting cutting-edge concepts and challenges. With transportation and public entity risk managers at all levels of experience, the seminar includes several sessions on issues that transit risk managers face on a daily basis. Sean Murphy’s session will explore a modern approach to crisis and business continuity management that allows companies to maneuver in today’s complex world of threats.

Read Post

Press release: Lootok and Nettitude partner to provide cybersecurity and crisis management services

Nettitude logo

The threats impacting businesses today are complex, insidious, and almost always have an up or downstream impact on technology. Cyber attacks are also borderless and can impact core operations as easily as business partner and supply chain operations. Therefore, when companies look to increase their resiliency they must weigh equally their operational and technological vulnerabilities.

One challenge that many organizations face is that there is no single entity governing cybersecurity and crisis management. With different reporting structures, separate budgets, and uncoordinated planning, they struggle to stay in sync. This partnership takes aim at breaking down those silos and helping organizations to get an honest and holistic view of their risk landscape.

Read Post

ClearView wins Global Best BCM Software Award for a record fifth time!

At the Business Continuity Awards ceremony held at the prestigious London Marriott Hotel, Grosvenor Square on 8th June, ClearView wins the Award for Best Business Continuity Management Software for a record fifth year in succession, against competition from around the world.

The judges praised the software for its role in helping organizations of all sizes in all parts of the world to achieve their BCM objectives; delivered and supported by a team with significant industry knowledge and with excellent customer service.

CIR: Business Continuity Awards 2017

Read Post

Press release: New leadership team paves the way for the future of Lootok

For more than 10 years Lootok has pushed the boundaries of traditional crisis management and business continuity (BC). “I launched Lootok with the singular vision of doing BC differently,” said Lootok CEO, Sean Murphy. “Global volatility and increased competition have escalated the need for companies to prepare for disruptions. While everybody knows that they should have a BC program, nobody wants to do the work. BC is only important when it’s too late, and when an incident does occur, any data and plans that have been collected typically remain untouched.”

Lootok continually confronts these challenges by offering fresh points of view on industry standards and new ways to transform programs to meet today’s highly networked environment. Sean Murphy explains: “I knew that BC was an essential part of business. The negative returns I so often saw were not the result of BC itself, but rather how it was implemented. At that point, I saw a major opportunity in going beyond the cookie-cutter approach and offering something of lasting value.”

With this goal, Lootok based its services on a deep understanding of industry expertise and interdisciplinary sciences.  Why integrate interdisciplinary sciences? It is a simple answer, according to Sean: “We get better results. Through integrating cognitive sciences, gamification, and branding concepts we capture higher-quality data, buy-in at all levels of the organization, and sizable costs savings through self-service and automation.”

2017 marked a reflective period in Lootok’s history, where the company restructured areas of the organization to yield even greater innovation and sharpened its services to Lootok clients. Lootok is excited to announce that there are four changes in its talent pool that set the stage for this evolution. 

New Lootok Leadership Team

Read Post

Crisis management: fly the plane or fix the problem, don’t do both

Learning to either manage the crisis or run the company, but not do both, is a hard lesson for most executives, as they want to do it all. Executives achieve their position through hard work, overcoming extreme obstacles, success, confidence, and leadership. It becomes difficult to let go of the organizational reigns to focus on the crisis. Likewise, it is just as difficult to let others manage a crisis while they focus on the organization. This post is a reflection of a number of executive crisis management trainings I facilitated where the executive (e.g., CEO, business unit president, segment leader) wanted to ‘fly the plane’ and ‘fix the problem.’

fix the plane

 

Read Post

How to bring crisis management back to the basics

This is a continuation of my Business Continuity Basics article.

Consider the Basics for Crisis Management Program - as with most initiatives and programs, we tend to over think when we design them. The basics reminds me of one of my favorite quotes from Antoine de Saint-Exupéry, “Perfection is achieved, not when there is nothing more to add, but when there is nothing left to take away.

Let’s keep it simple: crisis management

When it comes to crisis management the majority of crisis teams need seven means to make timely and effective decisions based on applying judgment to available information. We need a command and control framework, critical information requirements (identification of gaps in our knowledge), intelligence, situation awareness, common operating picture, common ground, and intent.

Back to basics Lootok Crisis Management

 

Read Post

Risky business: the risk matrix

Risky business: the risk matrix

In my previous two posts, I explored better ways of capturing your key assets, threats, and vulnerabilities. Now, we will take these ingredients and plot them on a risk matrix.

First, download Lootok’s risk matrix.

The risk martrix
The risk matrix

The risk matrix provides a way to think about the probability and consequences of risks. Typically, risk is measured using two variables: impact and probability, which make up the axes of matrix.

Both of these variables should be specifically defined before using the risk matrix to plot your risks. The first variable, impact, is a measure of how harmed or disrupted your business would be if the risk occurred. Impacts can occur across different areas, such as finance, regulation, or reputation. Within each impact area, a risk can cause a low or high impact.

Read Post

Risky business: Attackers and Defenders™

Risky business: Attackers and Defenders

Welcome back. In my previous post, I presented the first of three activities that Lootok uses to complete risk assessments.

Our second activity, Attackers and Defenders™, identifies threats and vulnerabilities. Remember: threats, vulnerabilities, and assets are the ingredients for a risk. Without these three ingredients, there is no risk. In this post, I will show you how to use this activity to identify your specific threats and vulnerabilities.

At Lootok we love Attackers and Defenders™ because it engages everyone in the room. It is competitive. It involves role-playing. It forces you to think creatively about your business, and most importantly it is fun, which is not a word often used in the same sentence as risk assessments and business continuity!

The Attackers and Defenders™ activity creates an environment for structured dialogue around your organization’s threats and vulnerabilities. The key objective of this activity is to define the threats and vulnerabilities facing your key assets. The activity helps you determine realistic threats to your assets, and the vulnerabilities that allow those threats to cause a disruption. You will also be asked to reach an agreed upon prioritization of your risks, complete with evidence that can be used for reporting, planning, and investment.

Read Post

Risky business: Value Map™

Risky business: Value map

In my previous posts about risk, I discussed why we need to consider it, why we have difficulty assessing it, and how to be more objective.

Next, I will explore a number of the activities that Lootok developed to help measure risk at your organization. The first activity is Lootok’s Value Map™. The Value Map™ helps you identify and visualize your organization’s assets. If you recall from the first post, an asset is one of the ingredients of risk.

The Value Map™ is exactly what it sounds like: a giant map on the wall depicting the environment for which you wish to do a risk assessment. The map can be a campus, a country, the globe, an IT map, a factory, or blueprints—whatever environment you wish to measure risk.

Lootok Value Map
Lootok Value Map™

Read Post

Facilitating an exercise? Find out how to reel people in!

Last month, I showed up at a client’s manufacturing site to facilitate an annual tabletop exercise. The company had recently kicked off its crisis management and business continuity initiative, so I wasn’t surprised to walk in and hear several people ask what this meeting was about, and how long it was going to last.

It is commonplace within organizations to have initiative atrophy or program of the month syndrome. People are doing more with less. Everyone is highly skilled at prioritizing work and recognizing false positive initiatives. Crisis management and business continuity can quickly get categorized as a ‘not now’ or ‘postpone as long as possible’ project in this environment. Therefore, it is important for risk and security professionals to allow our stakeholders bring themselves into the program. We need them to want the program and value the work we need them to do.

In my experience, there are usually three different types of people sitting in the room.

First, you have your evangelists, or your program advocates—they’re often the ones leading the initiative or they’ve already experienced some kind of catastrophic event. On the other end of the spectrum are those who have already decided risk management is irrelevant, so they’re checked out and sighing loudly.

But almost everyone in between is a good corporate citizen who has showed up with a printed copy of their plan because they were told to. Other than the occasional email, they’re not used to thinking about risk. You can’t blame them for wanting to just get the meeting over with and get on with their lives.

This mindset, unfortunately, is not uncommon. Whether people are unaware of the program or struggle to understand its value, it’s important to recruit them as active participants. So what are we as risk management professionals to do?

Lootok facilitate an exercise
Facilitate a successful exercise! Reel people in!

Read Post

Crisis management expert, Eric Dezenhall, kicks off the BCI Author Series

The BCI is proud to introduce our first author interview with Eric Dezenhall on April 11th, 8:30-10:30 am, at the Harvard Club in New York City.

From Tiger Woods to Michael Jackson, Eric Dezenhall has been on the front line of high-profile crisis communications and public relations. Come hear his perspective on Trump vs Clinton, BP vs Goldman, fake news and much more. Eric is a world-renowned crisis management and public relationship expert with frequent appearances on NPR, CNN, FOX, CNBC, and MSNBC. He has written for the New York Times, the Wall Street Journal, Business Week, the Los Angeles Times, and USA Today; is a regular contributor to the Daily Beast, Huffington Post and CNBC.com. Learn more about Eric.

Seating limited to 50 seats. Register now!

Eric Dezenhall

Read Post

Risky business: Who cares about risk?

Risky business: Who cares about risk?

Welcome back to my series on risk and risk assessments. In my first post I discussed why it is hard to objectively assess risk, and I suggested ways to look at risk more objectively. If you missed it, check out post 1.

This post explores why we need to think about risk in the first place.

Risk is inherent to doing business, and there are only two strategies that organizations can employ when facing risk:

  1. You can accept your risk
  2. You can reduce or eliminate your risk

Read Post

Risky business: What is risk?

Risky business: What is risk?

Risk lurks in all facets of daily life. Luckily, many risks are small: like crossing against the light when there are no cars or trying the new, Ethiopian restaurant down the block. Other risks are high: like quitting your job and doubling down on a new start up. Through our experience working with global organizations, we’ve seen it all. 

In spite of the ubiquity of risks, we rarely analyze them objectively. We are all imperfect, and we rely on past experiences and our emotions to understand the world around us and guide our decision-making. On the one hand, it makes sense that we are wired this way— if we didn’t rely on experience and emotion, we’d have to consciously evaluate every single situation anew, and we’d become paralyzed. On the other hand, there is a downside to the efficiency of this wiring: it makes us awful at objectively estimating risk. For example, bad experiences cloud our ability to accurately measure the impact of risks, as well as their relevance. Other factors, such as media attention, immediacy, control, and choice (Psychologist Paul Slovic) work to further compound that lack of objectivity.

Read Post

Why we picked ClearView as our BCM software of choice

During the past 10 years Lootok has been in business, we’ve stayed vendor agnostic while implementing many different crisis management and business continuity tools for clients. Humbled by our own trials and tribulations with software, we had yet to meet a vendor we felt excited about.

That changed last fall when we decided to partner with Clearview, our technological counterpart we’ve come to know and trust. We’re proud to say we believe ClearView to be the best software solution in the market. Read why.

Lootok is Clearview’s Americas service provider.
Email us at cvamericas@lootok.com or ring us at +1.646.961.3684 to get your demo.

Lootok and Clearview

Read Post

Crisis Management, Business Continuity, and Entrepreneurship

This presentation was presented at the D.C. Analyst Roundtable. I was asked to speak on crisis management, business continuity, and how to run a program like a business. You can download the presentation from SlideShare.

yellow house

Read Post

Creative ways to train and drive adoption by leveraging BCM software - Lootok & ClearView

I presented at the BCI World Conference in London. My topic was on using learning, training, and awareness concepts and techniques to implement and maintain a business continuity and crisis management software. The objective is to better leverage software to drive adoption and quality.

BCI World Conference participants should be able to obtain a copy of the presentation from the BCI.

Using concepts and techniques from behavioral science and game theory, I suggested better ways to deliver software implementation and maintenance. Lootok has partnered with ClearView - an awarding winning globally recognized business continuity and crisis management software. We are ClearView’s North America service provider. We selected ClearView as the our software of choice after a lengthy due diligence process. Our partnership brings new capabilities as well has higher quality of service to the marketplace.

ClearView Continuity software can solve a lot of problems. For example:

  • It is a tool to manage workflow and communication
  • It is a destination for your data, information, and reporting
  • It is used to solve problems (e.g., gap analysis) and make decisions (e.g., investment)
  • It is used to get ready for an event (planning, plans, and practice) as well as at time of event to communicate and respond
Lootok & Clearview
Lootok & Clearview

 

Read Post

Thomson Reuters: 2nd Annual Corporate Counsel Leadership Forum in NYC

Join me at the Thomson Reuters: 2nd Annual Corporate Counsel Leadership Forum. I will be moderating a panel on ‘The General Counsel’s Role in Business Continuity Management’. To register, contact 1-800-308-1700. Hope to see you there!

Thomson Reuters Conference NYC 2016

One of the sad realities of the “new normal” is the escalating specter of terrorism-related crises in the workplace. Though not exclusively tethered to data privacy concerns or security incidents, a business executive’s ability to manage unforeseen trauma is an essential (and largely unspoken) part of the modern day job description. This interactive workshop offers timely, practical, scenario-based coaching on how to handle the unforeseen at a moment of supreme hardship. Participants will walk away with a clear understanding of core tenets of business continuity management, as well as key techniques for coping with or better understanding terrorism’s ineffable vicissitudes.

Where: The Metropolitan Club
When: November 16, 2016, 1:45pm to 2:45 pm
Topic: Darkness Descends: The General Counsel’s Role in Business Continuity Management

 

Read Post

Lootok presents at the DC Analysts’ Roundtable

Join me at the DC Analysts’ Roundtable on November 14th!  I will be presenting on Business Continuity & Crisis Management.

The DC Analysts’ Roundtable is a collaborative body of practitioners in the fields of intelligence and risk analysis from the private sector and federal, state, and local agencies. The Analysts’ Roundtable promotes the professionalization of the intelligence and risk analysis communities through the sharing of best practices, information, and analytical training. Sign up by contacting DC.Analysts.Roundtable@gmail.com. Look forward to seeing you there!

Location: Lockheed Martin Global Vision Center Auditorium, 2121 Crystal Drive, Crystal City (Arlington), VA
Date: November 14, 2016, 12:30pm - 5:30pm
See full event details here.

DC Analysts Roundtable 2016

 

Read Post

Lootok presents at the Enterprise Risk Management Summit

Join me at the Enterprise Risk Management Summit in Las Vegas on November 2, 2016!

I will be speaking with Andrew Miller from ADP about linking reputation management, business continuity and crisis planning to strengthen risk resilience.

Where: Rio All-Suite Hotel & Casino in Las Vegas
When: November 2, 2016, 9:00am
What: Linking reputation management, business continuity and crisis planning to strengthen risk resilience

ERM conference 2016
We look forward to seeing you in Las Vegas!

Read Post

Lootok & ClearView: The next great duo to change history.

History has rewarded partnerships that have revolutionized the way people live, work, and even think for the better.

The next great duo to change history.


In the spirit of these pairings, Lootok is proud to announce that we will be selling ClearView software, as well as ClearView support, implementation, and consultancy services in North America.

Software alone is not a silver bullet; neither is consulting. Used properly, these two can revolutionize a program. That mutuality is the foundation for our partnership with ClearView. Lootok excels at program set up, training, awareness, and adoption. ClearView provides a best-in-class software that can grow with your program, while not overwhelming your users.

Read Post

Lootok courts a BC software: We were smitten, and it scared us (Part III)

The Brit seemed like our perfect partner, and we feared it too good to be true—technical sophistication, strong reporting/metrics, and flexibility? Our self-defense mechanism kicked in, and we couldn’t help but try to dig up some dirt. So, we asked others, “Hey, what’s the Brit really like?”

But despite our best efforts, all we could scrape up were rave reviews from their existing clients. By all accounts, the Brit seemed reliable, stable, and drama-free.

Though it may seem shallow to admit, we also wanted to date someone with a pleasing, modern aesthetic—and the Brit was recognized globally for its good-looking user interface. Having seen so many clunky platforms, we bonded in our mutual love for user-centered design. We spent many a weekend waxing poetic about the need for “simple, unobtrusive, intuitive planning.”

No doubt our attraction had been instant.

Read Post

Lootok courts a BC software: It’s a Match! (Part II)

We’d been hurt before

Its a match

Years ago, we were seduced by software that promised to solve all of our problems. Maybe it was our fault for being too naïve. The software only ended up being way too complicated, and left us feeling so overwhelmed and abandoned that there was no choice but to eventually break up. The whole experience burned us so bad that we swore never to enter into the software market again.

Maybe we’d just been in the BCM scene too long, but we didn’t want anything flashy or something just “good enough.” Perhaps our standards were high, but we vowed to ourselves not to make the same mistake again.

Read Post

Lootok courts a BC software: We were struggling (Part I)

For a long while, Lootok was happy being alone—we were a start up in New York City that was shaking up the industry. We were doing things that many thought were eccentric, even radical, but we beat the odds, changed perceptions, and emerged as an innovative force in the industry.

Throughout our 10-year existence, we remained single. A number of times, we were approached by other vendors, but we were wary of making any partnerships. Deep down, we feared doing so might compromise all the hard work and strides we had accomplished

NYC city skyline

 

Read Post