"Business Continuity Planning: Is it an Art or a Science?" That discussion rages on, with as much intensity as the chicken-or-the-egg controversy. But there is no doubt when it comes to Incident Management - there must be an underlying science for the response to be predictable and effective. One key element of that science is the "Causality Chain", knowledge which can lead to a predictive response (the selection of appropriate strategies, tactics, actions, or plan to invoke) in any disruptive incident.
An understanding of the Causality Chain should start with an understanding of the organization model. An organization, in its simplest form, can be represented as a collection of interdependent assets - People, Facilities, Processes, Technology and Supply-Chains - all engaged in delivering products and/or services. This is true in any industry; products and services are an outcome in manufacturing, retail, finance, energy, communications, information, services and everything else - including non-profits and government.
Within this organizational model it is possible to catalog the organization's critical assets and their interdependencies. Modeling of the organization can lead to visualization of upstream & downstream dependencies, operational gaps, the single-points-of-failure as well as the most important outgrowth: the Causality Chain.
If a Facility is Impacted:
The immediate impact is on the People who work in the facility. But there may be other implications.
If Personnel are impacted:
The loss of key personnel may have a direct and immediate impact.
If Technology is impacted:
Most organizations rely on Information Technology as a critical operating component.
If Supplies/Suppliers are impacted:
Every organization relies on Supply Chains - even if they don't acknowledge it.
If Business Processes are impacted:
The continuity of Processes is critical to continuous delivery of products and services.
If Delivery of Product & Services is impacted:
Organizations exist to produce and deliver Products and Services.
If Customers are impacted:
A Customer may be impacted by their own disruption or change - bankruptcy, acquisition, downsizing, market upheavals and many others. This may change their ability or desire to continue absorbing the same level of products and services.
Understanding the cascade effect of an impacted asset is critical to an effective response. Identifying the possible downstream impacts on the organization can help Incident Managers better allocate the limited resources available for Business Continuity and restoration/recovery efforts at the time of a disruption.
But the interdependency of specific assets needs to be catalogued in advance. Unless dependency mapping is part of the Business Continuity planning process, the Causality Chain will be something Incident Managers are forced to react to, rather than control.