Lootok

Menu

What's new?

Lootok is looking for a gifted Art Director

Lootok workspace
A glimpse into the Lootok workspace

About

Lootok is a boutique NYC-based business continuity advisory firm that differentiates ourselves through our innovative, engaging and cognitive approach to consulting. We are looking for a candidate to support our Creative Services department by providing exceptional design services that helps us deliver quality website, emails, workshops, games, presentations, and products.

Core responsibilities

  • Design web sites, interfaces, and emails with a sound understanding of grids, responsive design, and CSS
  • Design visually stunning print and digital materials including handouts, posters, banners, info graphics, newsletters, logos, and other graphic design needs
  • Create PowerPoint presentations demonstrating expertise using master themes, complex animation, styles, fonts, and graphics (images, smart art, shapes, tables, etc.)
  • Integrate compelling and innovative alternatives for displaying graphics and verbose PowerPoint/Word content
  • Utilize Adobe Creative Suite to edit/create images and video for incorporation into scenarios and materials
  • Design and create elearning modules using Adobe Captivate
  • Interact directly with the consulting team to adapt reports, handouts, and presentations for new client content/branding with exceptional attention to detail and consistency
  • Leverage and maintain vendor relationships to produce high-quality materials (board games, posters, t-shirts, etc.) for client workshops
  • Logically organize and diligently maintain a graphic design library of digital imagery and in-house inventory of physical materials

Read Post

Lootok is looking for an exceptional Senior Consultant

Lootok workspace
A glimpse into the Lootok workspace

Essential duties and responsibilities

To perform this job successfully, an individual must be able to perform the following satisfactorily; other duties may be assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

  • Establish engagement budgets, coordinate deliverables, and maintain appropriate project management to ensure engagements are delivered “on time, on budget, and as promised”.
  • Consistently develop and deliver accurate and thorough project status reports to client stakeholders and Lootok management.
  • Proactively identify project risks and issues and resolve them in a timely manner.
  • Cultivate and maintain strong, trust-based strategic relationships with key client decision makers.
  • Identify revenue growth opportunities and coordinate business development efforts including drafting and issuance of statements of work.
  • Facilitate workshops and presentations to client personnel.
  • Provide clients with strategic business continuity guidance (written and verbal) in the disciplines of business continuity, crisis management, and enterprise risk management.
  • Recommend enhancements to client operations and infrastructure to strengthen business resiliency and recovery capabilities.
  • Provide strong leadership, technical guidance, coaching, and support to junior consultants ensuring they are trained on all relevant tools and techniques.
  • Evaluate the performance of junior consultants and assist in the development of goals and objectives to enhance professional development.
  • Contribute to the development of Lootok methodologies and intellectual capital.
  • Exhibit mastery of Lootok consulting methodology, materials, tools, and continuity software.
  • Participate in client pitches and mange new relationships through the Lootok CRM.
  • Master the ability to sell all aspects of Lootok from consulting to creative to technology services.

Read Post

Press release: New leadership team paves the way for the future of Lootok

For more than 10 years Lootok has pushed the boundaries of traditional crisis management and business continuity (BC). “I launched Lootok with the singular vision of doing BC differently,” said Lootok CEO, Sean Murphy. “Global volatility and increased competition have escalated the need for companies to prepare for disruptions. While everybody knows that they should have a BC program, nobody wants to do the work. BC is only important when it’s too late, and when an incident does occur, any data and plans that have been collected typically remain untouched.”

Lootok continually confronts these challenges by offering fresh points of view on industry standards and new ways to transform programs to meet today’s highly networked environment. Sean Murphy explains: “I knew that BC was an essential part of business. The negative returns I so often saw were not the result of BC itself, but rather how it was implemented. At that point, I saw a major opportunity in going beyond the cookie-cutter approach and offering something of lasting value.”

With this goal, Lootok based its services on a deep understanding of industry expertise and interdisciplinary sciences.  Why integrate interdisciplinary sciences? It is a simple answer, according to Sean: “We get better results. Through integrating cognitive sciences, gamification, and branding concepts we capture higher-quality data, buy-in at all levels of the organization, and sizable costs savings through self-service and automation.”

2017 marked a reflective period in Lootok’s history, where the company restructured areas of the organization to yield even greater innovation and sharpened its services to Lootok clients. Lootok is excited to announce that there are four changes in its talent pool that set the stage for this evolution. 

New Lootok Leadership Team

Read Post

Risky business: the risk matrix

Risky business: the risk matrix

In my previous two posts, I explored better ways of capturing your key assets, threats, and vulnerabilities. Now, we will take these ingredients and plot them on a risk matrix.

First, download Lootok’s risk matrix.

The risk martrix
The risk matrix

The risk matrix provides a way to think about the probability and consequences of risks. Typically, risk is measured using two variables: impact and probability, which make up the axes of matrix.

Both of these variables should be specifically defined before using the risk matrix to plot your risks. The first variable, impact, is a measure of how harmed or disrupted your business would be if the risk occurred. Impacts can occur across different areas, such as finance, regulation, or reputation. Within each impact area, a risk can cause a low or high impact.

Read Post

Risky business: Attackers and Defenders™

Risky business: Attackers and Defenders

Welcome back. In my previous post, I presented the first of three activities that Lootok uses to complete risk assessments.

Our second activity, Attackers and Defenders™, identifies threats and vulnerabilities. Remember: threats, vulnerabilities, and assets are the ingredients for a risk. Without these three ingredients, there is no risk. In this post, I will show you how to use this activity to identify your specific threats and vulnerabilities.

At Lootok we love Attackers and Defenders™ because it engages everyone in the room. It is competitive. It involves role-playing. It forces you to think creatively about your business, and most importantly it is fun, which is not a word often used in the same sentence as risk assessments and business continuity!

The Attackers and Defenders™ activity creates an environment for structured dialogue around your organization’s threats and vulnerabilities. The key objective of this activity is to define the threats and vulnerabilities facing your key assets. The activity helps you determine realistic threats to your assets, and the vulnerabilities that allow those threats to cause a disruption. You will also be asked to reach an agreed upon prioritization of your risks, complete with evidence that can be used for reporting, planning, and investment.

Read Post

Risky business: Value Map™

Risky business: Value map

In my previous posts about risk, I discussed why we need to consider it, why we have difficulty assessing it, and how to be more objective.

Next, I will explore a number of the activities that Lootok developed to help measure risk at your organization. The first activity is Lootok’s Value Map™. The Value Map™ helps you identify and visualize your organization’s assets. If you recall from the first post, an asset is one of the ingredients of risk.

The Value Map™ is exactly what it sounds like: a giant map on the wall depicting the environment for which you wish to do a risk assessment. The map can be a campus, a country, the globe, an IT map, a factory, or blueprints—whatever environment you wish to measure risk.

Lootok Value Map
Lootok Value Map™

Read Post

Risky business: Who cares about risk?

Risky business: Who cares about risk?

Welcome back to my series on risk and risk assessments. In my first post I discussed why it is hard to objectively assess risk, and I suggested ways to look at risk more objectively. If you missed it, check out post 1.

This post explores why we need to think about risk in the first place.

Risk is inherent to doing business, and there are only two strategies that organizations can employ when facing risk:

  1. You can accept your risk
  2. You can reduce or eliminate your risk

Read Post

Risky business: What is risk?

Risky business: What is risk?

Risk lurks in all facets of daily life. Luckily, many risks are small: like crossing against the light when there are no cars or trying the new, Ethiopian restaurant down the block. Other risks are high: like quitting your job and doubling down on a new start up. Through our experience working with global organizations, we’ve seen it all. 

In spite of the ubiquity of risks, we rarely analyze them objectively. We are all imperfect, and we rely on past experiences and our emotions to understand the world around us and guide our decision-making. On the one hand, it makes sense that we are wired this way— if we didn’t rely on experience and emotion, we’d have to consciously evaluate every single situation anew, and we’d become paralyzed. On the other hand, there is a downside to the efficiency of this wiring: it makes us awful at objectively estimating risk. For example, bad experiences cloud our ability to accurately measure the impact of risks, as well as their relevance. Other factors, such as media attention, immediacy, control, and choice (Psychologist Paul Slovic) work to further compound that lack of objectivity.

Read Post

Avoid the “wait-for-impact”​ culture - on your mark, get ready, get ready, get ready…

In our business, we can all identify with the feeling that something bad is looming—the next big power outage, unprecedented snowstorm, or vicious cyber attack is right around the corner. Sometimes it can feel like all we’re doing is getting ready for a negative event.

Many industry activities—things like assessments, plans, exercising, and auditing—help to create this “wait-for-impact culture.” As we evaluate endless industry standards, regulations, and consulting methodologies, there is a hyper-focus on documentation, policies, procedures, steering committees, and audits.

This methodical approach works with well-defined risks, or those threats that are so familiar to us that we’ve integrated them into the way we do business. But what about complex risk? The most procedural checklists and plans don’t account for managing those threats that we’ve yet to figure out. Risks that are still emerging and largely unknown are the ones that could actually leave us vulnerable.

Ten years ago, we developed Lootok’s BCM Model®* because we realized that it wouldn’t ever be enough for leaders to simply respond. For companies to stay competitive, leaders must be more proactive than ever to also consider threats that are on the horizon.

get ready,stay alert, take action, Lootok
Get ready, stay alert, take action!

Read Post

Inspiring commitment over compliance: the elusive dream of all risk managers

Why can’t risk management, crisis management, and business continuity be a rewarding experience that people actively desire to be involved with?

Lootok Experience Model

This question led us down a path of evaluating the phenomena of experience. What makes an experience good or bad or great? Why do we love some brands and hate others? Why do we join some groups and not others? Why do we love that cash-only, poor-service, overpriced empanada spot in a run-down building on the Lower East Side, but we would be outraged with the same service and accommodations at another restaurant? Unlocking the answers to these questions begins with understanding your target audience.

  1. Who are they?
  2. What do they care about?
  3. What do they struggle with?
  4. Why should they care about your program?

While the Demand Model® evaluates the engagement level of an audience, the Experience Model™ gives us the tools to increase that demand.

Read Post

Risk Management’s Sweet Spot

Chris de Wolfe, global director of risk management at Mars Inc., shares his challenges of getting the global risk management program at Mars up and running.

“The CRM group had a lot to offer but was severely underutilized, which led to high insurance premiums, a high risk profile, and a significantly reduced resiliency and recovery capability,” Chris said.

Reflecting on how Mars as a business became a major success, de Wolfe decided that he needed to market and promote his own department in the same way. Partnering with Lootok, a risk management consultancy firm, he developed a strategy to engage with the employees in a fun yet educational way. He devised a 5- to 10-year plan, broken into 12- to 18-month strategies and individual project plans by mapping out all of the products and services that risk management offers. He conducted a perception survey and drew up a program based on the ABCs of risk management.

“The ABCs allowed people to understand that risk management not only provides insurance, but it also ensures that the business continues,” said de Wolfe.

Sean Murphy, CEO and founder of Lootok, said of de Wolfe:

“I’ve known Chris for 10 years and what differentiates him is that he treats his program as a business. He had a good program before but he wasn’t satisfied with it so he completely revamped it and is now reaping the benefits.”

Read full article

Read Post

Can a crisis make you a celebrity?

Picture of man speaking to the press
Ready or not.  Say, “Cheese!”

While artists, athletes, and performers struggle to make their mark in the public eye with a memorable act or viral moment, a different type of celebrity has been emerging on the scene - the spokesperson for a crisis.

Here’s a quick exercise to highlight the point:

Jeffrey Boyd, Lew Frankfort, and Stephen Hemsley. Do these names sound familiar?
If not, don’t feel bad. They are the CEO’s of Priceline.com, Coach, and UnitedHealth Group, respectively.

Now, how about the names Tim Cook and James Comey?
We can immediately recall them as the CEO of Apple and the FBI Director, respectively, feuding over a locked iPhone involving a federal investigation of the San Bernardino shooting.

The media diligently covered Cook and Comey’s debate for more than three months. During that time, both men emerged as stars in a cast of characters ranging from lawyers, judges, politicians, and even presidential candidates. The media and public tuned in to hear their perspectives on data privacy, security, technology, civil rights, and terrorism.

Read Post

Lootok is looking for a gifted Senior Technical Project Manager

Lootok workspace
A glimpse into the Lootok workspace

About

Lootok is a branding, consulting, and technology firm. We help companies develop and grow their risk management programs, so that they can respond to incidents with grace and without business disruption. From hurricanes to workplace violence to product recalls, Lootok is there to help.

We are seeking a senior technology project manager to join our small, but mighty, design and development team in SOHO (New York City). In this role, you will manage the full lifecycle of our SharePoint projects, from specification gathering to launch and maintenance.  We are not creating run-of-the-mill SharePoint sites, rather unique, usable, and impactful online experiences. 

You will report directly to the Chief Technology and Creative Officer. Composure and professionalism will be essential, since you will work with Fortune 100 clients and manage teams of internal and external resources.  We are looking for a detail-oriented, smart, and communicative teammate who understands the value of a phenomenal user experience and who knows the processes, planning, and resources needed to deliver such an experience. 

Lootok is a fun, growing company that believes in promoting a positive working environment and healthy employee lifestyles. We hire talented, down-to-earth people who thrive on doing great work. Divas and Divos need not apply.

Required skills

  • Bachelor’s degree in Computer Science, Information Technology, or a related field
  • 10+ years of technology experience including requirements management, analysis and design
  • 7+ years of project management experience (full project life cycle management) related to business software or system integration projects (packaged and custom developed)
  • Project delivery success on collaborative efforts working with outside vendors and other business partners
  • Demonstrated ability to look at wireframes or designs and breakdown tasks, create timelines, and manage a team of internal and external resources to efficiently develop software solutions on budget
  • Effective communication, presentation, and interpersonal skills, including the ability to articulate risks and issues and accurately analyze problems, explain solutions and present technical material to end users in a non-technical manner
  • Exceptional attention to detail
  • Microsoft SharePoint and Office tools proficiency with the ability to manipulate data for reporting
  • Experience managing remote resources
  • Various database, web design, and backend development programming skills such as: JavaScript, CSS, SQL, .NET preferred
  • Project Management Professional (PMP) certification a plus

Read Post

Fresh perspectives: biggest challenge in risk management – metrics

What’s the biggest challenge in risk management? If you ask risk analysis expert Yossi Sheffi, it’s the lack of an industry metric. For example, when you choose a supplier, how can you quantify how risky your choice is? When it comes to metrics, Sheffi says, risk still remains an area where gut feelings and opinions play a major role. And the biggest challenge for risk managers? Defuse the responsibility for managing risk throughout the whole company.

Read Post

Fresh perspectives: resiliency strategies

Risk analysis expert Yossi Sheffi discusses two fundamental resiliency strategies that organizations can use to recover from an incident: redundancy and flexibility. Using the examples of Intel and Southwest Airlines, Sheffi talks about the role of redundancies, flexibility and interchangeability, and communication and culture to provide risk managers with realistic and practical approaches to consider.

Read Post

Fresh perspectives: risk matrix

Risk analysis expert Yossi Sheffi explores the capabilities and limits of the traditional risk matrix, and adds another axis called “detectability.” Detectability has to do with time dimensions, or how much time we have to prepare and react to a threat. There are some events, such as a cyberattack or theft of intellectual property, that have no warning; you realize their occurrence only after they hit you. While the standard use of the risk matrix is influenced largely by the past, adding detectability means greater opportunity to tackle impending threats.

Read Post

Lootok is looking for a meticulous Operations & Finance Manager

About

Lootok is a boutique NYC-based business continuity advisory firm that differentiates ourselves through our innovative, engaging and cognitive approach to consulting. We are looking for a full-time candidate to assist the COO/CFO with overall company operations.  The ideal candidate will have the desire to be involved in all aspects of running a company including human resources, business partner management, accounting… 

Core responsibilities

  • Manage relationships and related agreements with human resources, bookkeeping, tax, technology, insurance, and legal business partners
  • Facilitate client contract review and approval process through correspondence with legal counsel
  • Ensure accuracy and reasonableness of financial information through reviews of monthly statements and updates to annual budgets
  • Interact with the consulting and creative teams to assess appropriate deliverables to include in client projects and create statement of works
  • Liaise with external bookkeeping company to ensure timely submission of employee time and expense, vendor payments, and customer invoices
  • Onboard new employees by providing technology (laptop and iPhone), software access, training on policies / procedures, and ongoing support
  • Assist in developing more formalized human resources processes including recruitment, employee evaluations, and procedure implementation
  • Ensure employees comply with project requirements by becoming proficient in the use of our project management software and reviewing weekly reports
  • Perform a variety of research ranging from business policies to time and expense software, evaluate the best options, and present solutions to leadership

Read Post

Debunking myth #3: The risk matrix measures risk

The risk matrix is a standard tool commonly used in risk assessments. It’s straightforward to use, and easy to explain. The only trouble is, the risk matrix doesn’t actually forecast or measure risk.

When used as a quantitative tool, the risk matrix is misunderstood. Our challenge as practitioners is to recognize the limitations of the risk matrix, so we can use it in a way that increases understanding of the threats around us. In this eBook, we explore how.

Download The risk matrix measures risk, the third myth in Lootok’s series on the five myths of business continuity management (BCM)!

The risk matrix measures risk
Myth #3: The risk matrix measures risk

See Myth #1: The plan is the promised land.
See Myth #2: You need a business impact analysis (BIA).
See Myth #4: It gets cheaper and easier.
See Myth #5: Best-in-class BCM software exists.

Read Post

Dr. Yossi Sheffi on crisis management

Dr. Yossi Sheffi, author of “Resilient Enterprise: Overcoming Vulnerability for Competitive Advantage,” discusses two of his favorite crisis management case studies with Sean Murphy.

Read Post

Business continuity and the Sony data breach

A massive data breach at Sony Pictures Entertainment, which experts believe was targeted by North Korea as retaliation for a film depicting the assassination of its leader Kim Jong Un, has led to an international incident that has gained the attention of business continuity professionals. Even large companies like Sony can sometimes put business continuity planning on the back burner.  BC professionals say that attacks like this can sometimes change their minds.

Read Post

Seven insights from superstorm Sandy: a financial sector retrospective

$18 billion dollars. That’s the number estimated in damages caused by Hurricane Sandy just in the state of New York alone. With the unexpected turns that transpired amidst the super storm, all businesses were reminded of the importance of business resiliency.

Given the vast amount of information presented to-date, it is still very important that the financial sector revisit the surprises from Sandy to ensure that critical financial services are better protected. A team of experienced BCM advisors gathered the recommendations in the accompanying table from industry thought leaders in leading global financial services companies to learn from their perspectives.

Read Post

The missing factor in your risk assessment: detectability

Dr. Yossi Sheffi explains the “detectability axis,” which considers threats you can only detect only after the fact. This concept challenges our conventional methods of measuring risk using probability and impact.

Read Post

Emergencies happen. Are you ready?

September marks the 10th annual National Preparedness Month – a nationwide, month-long effort sponsored by the Federal Emergency Management Agency (FEMA) to encourage everyone to prepare and plan for emergencies. Across the country, there are a host of free educational events focusing on topics such as CPR training, preparedness outreach, and family safety.

family safety
family safety

 

Read Post

Carnival Cruise Lines: What they should have done

At first glance, it appears that Carnival Cruise lines was well prepared when one of their ship had an engine fire and subsequently lost power last week. The media, however, tells a different story.  Here are three points that Carnival may have overlooked in their crisis response.

carnival
Carnival cruise

 

Read Post

Preparing for Nemo: What to do when a severe winter storm hits

With the winter superstorm Nemo rapidly approaching the Northeast with expected impact in major hubs like Boston and New York City, make sure your people know what to do in the event of a severe winter storm. Here are some last minute tips on what to do when it strikes.

nemo
A different kind of Nemo

 

Read Post

How Oreo style the spotlight during the Super Bowl, and other lessons for scenario planning

The highest rated Super Bowl in history may go down in the books for the 34-minute power outage that upstaged the million dollar ads. With all the chatter about the blackout, advertisers were concerned about the effect on television ratings, while some brands capitalized on the opportunity to own the conversation through social media. Many are claiming the real winner of Sunday’s game to be Oreo, whose clever blackout tweet got retweeted 10,000 times in less than an hour.

oreo

When it comes to planning, the power outage also demonstrated that organizations must consider not just critical processes and recovery time objectives, but should also anticipate the impact of potential scenarios. Business continuity is about bouncing back, as well as taking advantage of the situations that may present themselves during incidents—particularly in this case, high profile events. Have you considered this when doing business continuity scenarios or exercises?

Read Post

How to create behavioral change for your business continuity program

Major change initiatives like business continuity take time, but many programs are often declared failures and abandoned before they are given a chance to succeed. For this reason, it’s crucial to show immediate signs of success, particularly for programs that are newly initiated or being re-launched. New behaviors also take time to become habitual, so in order for a business continuity management program to be self-sustaining, it must be gradually built and adopted as part of the company culture.

In order to accomplish this, people also need what Fogg calls “triggers.” Triggers can be thought of as a cue, prompt, call to action, or request that leads to a chain of desired behaviors. In other words, as Fogg states, “Triggers tell people to ‘do it now!’”

Read Post

What a crisis requires, beyond a barebones plan

The fact that Tokyo found the nuclear reactors in a worse state than previously announced underscores the need for honest, factual information for public consumption, and the importance of media in delivering this communication. The age where authorities view the public as a panicky wildcard that needs to be soothed, rather than as an equal partner in mitigating and recovering from a disaster, must come to an end – especially in a world where, thanks to the internet and information networks, information is disseminated to a wider audience at a faster rate than history has ever experienced before.

Was the community immediately surrounding Tepco’s reactor integrated in mitigation efforts prior to the incident? Subsequent actions and the announcement of possibly 30 billion dollars in claims indicate the opposite.

Read Post

Can risk management ever be a revenue generating activity?

It seems like selling risk management projects internally can be like pulling teeth. So what would it take for people to be willing to pay for risk management initiatives? We posed the question to a group of risk management professionals on LinkedIn in preparation for our upcoming Building a BCM Brand webinar. Here’s some of what they had to say.

Read Post

Have yourself a crisis-free christmas

Ah, Christmas…. a time of yuletide cheer, decorating the tree, opening presents, office holiday parties, and of course, eggnog. All the things that make the holiday season so special… and so dangerous? If you’re feeling overcome with Christmas cheer, leave it to the business continuity professionals to put a damper on those holiday spirits with this list of top holiday risks.

Read Post