IV.Preparedness, risk and crisis management

From risk understanding to the ability to act — before, during and after the incident

A preparedness plan is only as good as the risk analysis it rests on — and the risk analysis only as good as the threat picture behind it. We deliver the whole line: risk analysis anchored in the real threat picture, plans that survive being used, exercises that expose what the plans hide, and structured support when the incident actually occurs.

Frameworks we work with

  • DSB

    Norwegian Directorate for Civil Protection

    Guidance for holistic RVA and municipal preparedness duty

  • NSM

    Norwegian National Security Authority

    Basic Principles and national security advisories

  • ISO 22301

    Business continuity management (BCM)

    International standard for business continuity management

  • NS 5814

    Risk assessment

    Norwegian standard for risk assessment

  • Security Act

    National security law

    Requirements for entities touching national security interests

What we do

  • Holistic risk analysis (RVA)

    Risk and vulnerability analysis for enterprises and municipalities — anchored in the actual threat picture against their functions, not in generic scenarios. Every estimate with calibrated probability, every claim with a graded source.

  • Scenario analysis and stress testing

    We test the plan you already have: what must be true for it to work, where it breaks, and which assumptions nobody wrote down. A structured report with prioritised findings.

  • Preparedness planning

    Preparedness plans, continuity plans (BCM) and notification lines built to be used under pressure — short, unambiguous and exercisable. Always connected to the risk analysis, never off the shelf.

  • Exercises and training

    Tabletop and functional exercises built on real scenarios from the threat picture — with structured evaluation and a closure list afterwards.

  • Crisis management support

    Structured decision support for crisis leadership during an ongoing incident: a situational picture with source grading, courses of action with assessed consequences, and a log that documents the decision basis afterwards.

  • After-action learning and retrospectives

    Systematic review after incidents and exercises: what did we know, when did we know it, what should we have done differently — and which changes to the plans actually follow.

  • Preparedness for municipalities

    Threat assessment of the municipality's critical functions, indicator-based warning at elevated risk, and groundwork for the holistic RVA and preparedness plan under the municipal preparedness duty.

  • Critical infrastructure and total defence

    Preparedness-oriented decision support for infrastructure owners — and, with research and industry partners, development of real-time civil data fusion across power, telecoms and subsea.

What you get

  • 01Risk analysis with calibrated probability and graded sources
  • 02Plans and exercises connected to the analysis — one red thread
  • 03Structured decision support during incidents, with a documented log
  • 04After-action learning that actually changes the plans, not just gets filed

Want to know whether your plans survive a real incident?

Get in touch