Contingency plan

For the play of this title, see The Contingency Plan.

A contingency plan is a plan devised for an outcome other than in the usual (expected) plan.^[1]

It is often used for risk management when an exceptional risk that, though unlikely, would have catastrophic consequences. Contingency plans are often devised by governments or businesses. For example, suppose many employees of a company are traveling together on an aircraft which crashes, killing all aboard. The company could be severely strained or even ruined by such a loss. Accordingly, many companies have procedures to follow in the event of such a disaster. The plan may also include standing policies to mitigate a disaster's potential impact, such as requiring employees to travel separately or limiting the number of employees on any one aircraft.

During times of crisis, contingency plans are often developed to explore and prepare for any eventuality. During the Cold War, many governments made contingency plans to protect themselves and their citizens from nuclear attack. Examples of contingency plans designed to inform citizens of how to survive a nuclear attack are the booklets Survival Under Atomic Attack, Protect and Survive, and Fallout Protection, which were issued by the British and American governments. Today there are still contingency plans in place to deal with terrorist attacks or other catastrophes.

The National Institute of Standards and Technology has published a contingency planning guide for Information Technology Systems (2002).^[2]

In the United States

Cantor Fitzgerald, a financial services company, is a prominent example of a successful implementation of a business contingency plan. In the space of two hours, the firm lost 658 of its 960 New York employees in the September 11 Attacks, as well as much of its office space and trading facilities. Despite these significant losses, the firm was able to resume business within a week. It remains a successful company today.

In the United States, all HAZMAT operations require Contingency Plans.

The United States Environmental Protection Agency through RCRA and EPCRA has defined specific formats for Local Emergency Planning and the National Contingency Plan.^[3]

See also

• CERT
• Computer security
• Information assurance
• Information security
• NIST
• Risk
• Risk Management

References

External links

• Association of Contingency Planners