All services

  • Business continuity exercise

    Managing an incident requires on-the-spot collaboration, decision-making, and adaptation. These skillsets cannot be embodied in a business continuity plan. That’s why training and exercising are key to preparedness.

    Lootok’s business continuity exercises can take the form of a series of mini scenarios, a multi-phased tabletop scenario, or a full-day simulation. We guide business continuity team members to review their plans and think through the actions they would take in an incident, so they gain insight into their incident roles and readiness for response.


    Whether you have an hour or a full day to dedicate to a business continuity exercise, Lootok’s diverse offerings are designed to elicit maximum participation and build learning among your participants. We’ll work with you to identify the most relevant scenarios and throw in some twists to deliver an unexpected, engaging experience.


  • Business continuity plan

    When was the last time you consulted a 300-page binder to figure out what to do in an incident? A plan is meant to be a handrail, not a prescriptive manual for every possible event. That’s why Lootok develops plans that are actually actionable. Our plans are guidelines for decision-making, checklists for incident response, and strategy options for recovering the business.


    The planning process involves discussions across departments to understand leadership’s priorities and educate people about their incident roles and responsibilities. The resulting business continuity plan includes identification of the leader (and alternates) who will make decisions during recovery on behalf of the business unit, employee notification procedures, escalation procedures for teams, business partner and vendor contact information, the critical path for recovering processes, recovery strategies, recovery tasks, and workaround procedures for achieving key tasks without access to communications or systems.


  • Business continuity policy

    A business continuity policy outlines the basics of a business continuity program, including its aims, principles and overall approach. To develop a policy, Lootok guides leaders to make key decisions around program objectives, approach, and which processes to involve. This helps define at what level of the organization these activities occur, who is responsible for them, and how often they need to occur.


    A policy outlines:

    • Objectives and scope of the business continuity program
    • A strategy map outlining objectives, goals, strategies, and measures
    • Program roles and responsibilities
    • Requirements and guidelines for operating and maintaining the program

    Our process starts by defining the program and developing a draft policy with key stakeholders. After that, scenarios are used to validate and finalize the policy before it is shared with program participants.


  • Business continuity strategies

    Business continuity strategies address major gaps between what you need to recover, and what you have.  Understanding that many companies operate in very lean environments, Lootok helps you prioritize and implement those strategies that make the most sense for your business.


    We help minimize or eliminate the impact of an interruption to your business by addressing major gaps between the critical business functions and applications you need to recover, and their specified recovery time objectives.

    The process for strategy development typically first involves a review of findings from your business impact analysis or other assessments to identify major gaps. Next, we’ll identify management priorities and strategy requirements before conducting research and presenting options for strategy implementation. Finally, we can assist with implementation of the strategy or connect you with a recommended third-party vendor.


  • Business continuity training

    Lootok’s business continuity training ensures people learn about the program, understand how it will help them, and remember the program exists during an incident. Each of the activities in our training workshops is designed to meet a distinct training audience and objective.


    The focus of training will vary, depending on the audience. For example, training for senior leadership typically focuses on their role in incident/crisis management, while business continuity team members may learn how to execute on the program. Department heads and plan writers often receive more tactical training on how to develop, maintain, and use their plans; topics for other staff tend to focus on general safety and preparedness.


  • Communications strategy

    Just how often does your company think about business continuity or crisis management? Without a series of frequent incidents or constant engagement from a visible program sponsor, it’s common for program visibility to remain limited. By evaluating your current interactions, Lootok can suggest ways for providing a more holistic, action-oriented experience for your program participants.


    We can work with you to:

    • Develop an iconic brand for your program that can be leveraged for program promotion, awareness, and adoption.
    • Devise a communication strategy that unpacks messaging, audience, and approach to promote the program among participants throughout the year.
    • Understand and segment your diverse program participants, and define key target messages to support your program’s goals
    • Create an online presence that explicates the value of the program, drives clear calls-to-action, and promotes self-service.


  • Crisis management exercise

    Lootok’s crisis management exercise may have one or multiple aims—it can test the assumptions of a crisis management plan, serve as a training and educational opportunity for the team, or simulate the stressful conditions of a crisis to assess readiness.


    In a basic exercise, Lootok guides the crisis management team to review and discuss the actions they would take in a scenario. Our more complex exercises comprise a multi-phased tabletop scenario or a full-day intense simulation. While they vary in levels of complexity, each type provides opportunities to train in adaptive decision-making and get insight into the group’s effectiveness as a team.

    Lootok will work with your team to develop a scenario that is relevant and prompts opportunities for critical thinking. As the team encounters new obstacles and unexpected twists in each phase, critical learning breaks encourage participants to assess their situational understanding and apply their knowledge.

    A crisis management exercise includes:

    • Tailored, relevant scenario or series of rapid fire scenarios
    • Multimedia materials to complement the exercise objectives
    • Development of script and facilitation of the exercise
    • After Action Review discussion and report


  • Crisis management plan

    Prescriptive checklists work well in normal situations, but not in a crisis. Instead, what you need is a basic guide for navigating the complexities of an unpredictable environment. Lootok’s crisis management plan provides a flexible framework for adapting to changing circumstances and making timely decisions that address the specifics of an event.


    Our approach guides leaders to build a plan around the crisis, enabling them to adapt to changing circumstances and make the best decisions at time of event.

    Lootok’s crisis management plan includes:

    • A documented framework for making decisions
    • Clearly defined escalation points and triggers for crisis team activation
    • Questions to gauge the severity of a crisis
    • Stakeholder messaging sheet for crisis communications


  • Crisis management policy

    Successful crisis management requires understanding how to handle a crisis, before it hits. In developing a crisis management policy, Lootok works with company leadership to create a process that can be practiced consistently through all organizational levels of crisis management.


    This framework is the basis for effective decision-making, efficient delegation of tasks and execution of actions. Once crisis management guidelines have been defined, teams can align their efforts using the same structure, process, and plans to determine incident severity, escalation requirements, strategy development, and action plans.

    A crisis management policy includes:

    • The objectives and scope of the crisis management program
    • Crisis management program roles and responsibilities
    • Requirements and guidelines for operating and maintaining the program


  • Crisis management training

    Successfully navigating the unknowns of a crisis requires expertise, which is a combination of knowledge and experience. To reinforce your team’s existing knowledge and expand their skill sets, Lootok structures its crisis management training in two parts: first, a review of your company’s crisis management process; and second, practice in applying it with an adaptive decision-making model called Command and Control.


    Using this structured framework, we guide your team to develop solutions that reflects the specifics of the crisis, while staying flexible for any changing conditions. This leads team members to understand the full context of a problem, before putting their plans into action. As a part of training, you’ll receive:

    • A Command and Control workbook for structured decision-making
    • An After Action Review report that summarizing team observations and findings from the workshop
    • Internal use of all training workshop-specific materials for any future training efforts



  • Executive planning

    When you’re spearheading a business continuity or crisis management program, it’s critical to align your company’s needs with your vision for the program. In our executive planning sessions, we help you build a roadmap for your short-term goals and longer-term objectives.


    Executing program efforts from this “big picture” perspective integrates your vision with your strategy to drive performance. Executive planning can also involve individual coaching for program sponsors on how to increase their own visibility. We work with leaders to brainstorm strategies for engaging senior leadership and other stakeholders to position your program strategically and get it the recognition it deserves.


  • Program assessment

    Wondering if your program aligns with best practices, or how it compares to the industry standard? Lootok can gauge your program’s level of compliance, efficacy, and overall maturity in business continuity or crisis management.


    To objectively evaluate your program, Lootok reviews the quality of any existing documentation such as plans or policy documents, while considering relevant regulatory requirements, industry best practices, and leadership objectives. We also meet with key stakeholders to review the needs of the business based on identifying risks, culture, and level of engagement with the initiative. By understanding the type of impact your program has on the company, we’ll help you identify areas of improvement and focus efforts for future growth.


  • Risk assessment

    To avoid getting blindsided, you’ve got to stay on top of the threats in your risk environment. Lootok’s business continuity risk assessment can identify, analyze, and prioritize the specific threats that could disrupt your business.


    We address your organization’s appetite for risk (the amount of resources your organization can spend on mitigating identified threats to the business), determine the top threats that warrant the majority of your attention, categorize risks by type, and set a monetary threshold for identified risks. This allows you to lessen the impact of high risks, and depending on your mitigation strategies, reclassify them as threats that are less likely to occur or have significant impact.

    A Risk Assessment includes:

    • Prioritization of risks by potential impact and probability
    • Classification of risks by their threat actor and owner
    • General strategies per risk matrix quadrant and risk type
    • Historical and evolving factors that may compound the risk environment


  • Supply chain

    This service gives you all the basics of building resiliency into your company’s supply chain. Members of our seasoned consulting team will come onsite to facilitate all-day, intensive workshops. These workshops give you the tools to roll out your program at all levels of the business.


    Here is what you get.

    • Intensive workshops focused on: 

      • Supply chain resilience 

      • Understanding your risk environment 

      • Monitoring threats to key supply chain business partners s
      • Developing strategies for high risk areas
      • Exercising and validating supply chain plans 

      • All presentations and scripts, templates, and activity materials 

    Learn more about our Supply chain service.