i JET INTERNATIONAL Travel Risk Management and Duty

i. JET INTERNATIONAL Travel Risk Management and Duty of Care Mark Donohue, VP Risk Management Programs June 18, 2014 OPERATE GLOBALLY WITH CONFIDENCE (C) i. JET International, Inc. All rights reserved. 1 i. JET. com

Agenda § § § § § Current Events What is Duty of Care? Why should you care? Who owns Duty of Care within the Government? Where does the Government stand? How does an Department/Agency get started? Summary Resources Q & A (C) i. JET International, Inc. All rights reserved. 2 i. JET. com

Introduction to Risk Management Timeline 2009 2010 2011 2012 2013 South Sudan Yemen Kyrgyzstan Thailand Syrian Civil War Iraq Egypt Eurozone Crisis Yemen Middle East North Korean Turkey Brazil Ukraine Venezuela 2014 (C) i. JET International, Inc. All rights reserved. 3 i. JET. com

What are the Risks? Political/ Labor Instability Natural Disasters Pandemic Disease Crime POSSIBLE IMPACTS TO: Personnel Medical Issues Operations/Productivity Data/Equipment Terrorism Financial/Legal Reputation (C) i. JET International, Inc. All rights reserved. 4 i. JET. com

Where is Information Vulnerable? Travelers § Locations • Airlines, Hotels, Conferences, Etc § Technology • • USB drives Mobile phones Teleworking Social Networks (C) i. JET International, Inc. All rights reserved. 5 i. JET. com

Reality Check What are the odds? • Dying in an airplane accident = 1 in 4. 7 million (top 78 airlines)2 • Dying in a terrorist attack = 1 in 9. 3 million 3 • Dying by choking on food = 1 in 3, 8421 • Dying from exposure to smoke or fire = 1 in 1, 4191 • Dying in a motor vehicle accident = 1 in 1081 National Safety Council (2011)-Injury facts OAG Aviation & Plane. Crash. Info. com accident database (1993 -2012) 3 National Safety Council – historical odds 1 2 (C) i. JET International, Inc. All rights reserved. 6 i. JET. com

Why Should You Care? What does the JFTR/JTR Say? (C) i. JET International, Inc. All rights reserved. 7 i. JET. com

The $42 Million Tick Bite § March 27, 2013: A jury in Bridgeport, Connecticut, awarded a student and her parents $41. 7 million in damages after she contracted encephalitis from a tick bite on a school hiking trip near Mount Panshan in China. § The judge found the school negligent by “failing to warn students and parents that they could be subject to insect-transmitted disease in China, failing to ensure students took insect bite precautions before and during the trip, failing to include medical personnel on the trip, and failing to make advance arrangements to return any injured or ill students to the United States”. How would a Department or Agency deal with this? Source: Connecticut Post online (www. ctpost. com/local/article/Jury-awards-42 M-in. Chinese-tick-bite-case-4389978. php) (C) i. JET International, Inc. All rights reserved. 8 i. JET. com

Who Owns Duty of Care? Cross-Functional Support Organization/ Employee Leadership Travel HR/Legal/IT • Global data consolidation and reporting • Standards of care • Compliance monitoring • Risk disclosure • Pre-trip training • Pushed alerts • Auditable systems • Lower liability • Policy and procedures • Corporate insurance programs Organization/ Leadership Security Medical COOP • Risk assessment and predictive intelligence • Pre-trip health planning • Plan development/ implementation • Incident notification • Medical assistance and evacuation for international travelers • Crisis and evacuation plans • Coordinated response • Immunizations • 3 rd Party Liability Coverage • Mobile device security (C) i. JET International, Inc. All rights reserved. 9 i. JET. com • Monitor assets at risk

Traveler Safety Continuum WHERE DOES YOUR AGENCY STAND? (C) i. JET International, Inc. All rights reserved. 10 i. JET. com

Starting a Conversation § § § § § How does a department/agency educate travelers about the medical and security risks of travel into a country prior to departure on international travel? How does a department/agency provide access to medical and security professionals prior to international travel? What are the pre-travel policies/processes prior to International travel? Are these processes country specific? How is compliance to these processes enforced? Do departments/agencies keep travelers informed of events occurring in the country they have traveled into? Is a department/agency prepared to respond to medical events affecting travelers while they are abroad? Has your department/agency had travelers affected by medical events while traveling abroad? Do departments/agencies have a Travel Risk Management team to respond to medical & security events? How would a department/agency provide a response capability for Major events? (Earthquakes, Civil Unrest, etc. ) (C) i. JET International, Inc. All rights reserved. 11 i. JET. com

Benchmarking A Program Travel Risk Management Maturity Model (TRM 3) § The TRM 3 TM model provides a way to assess your travel risk management program based on key process areas Your Score: 3. 00 is in the 81 Percentile Level 3 is referred to as "Proactive". . . TRM 3 is a trademark of i. JET International, Inc. (C) i. JET International, Inc. All rights reserved. 12 i. JET. com

Measuring Program Maturity Optimized (5) Managed (4) Proactive (3) Defined (2) Reactive (1) Program integrated throughout organization. Metrics collected and reviewed. Cross-organization support. Consistent execution of travel risk management processes. Basic travel risk management policies defined and documented. Primary focus on incident response. Ad hoc. Few policies. Chaotic in the event of an emergency. (C) i. JET International, Inc. All rights reserved. 13 i. JET. com

TRM 3 TM – 10 Key Process Areas (KPAs) Policy/Procedures Overarching KPAs Training TRM 3 is a trademark of i. JET International, Inc. (C) i. JET International, Inc. All rights reserved. 14 i. JET. com

Understanding Travel Policy WHAT DOES JFTR/FTR SAY? § What happens when travelers deviate from the regulations? • Airlines, hotels, rental cars, limousines, travel management companies (TMC), and online booking tools § Who do approvers go to for travel risk related questions? • Adding vacation to official trips • Proper medical coverage § Miscellaneous • Are there tools to flag deviations? • Are approvers trained to deal with deviations? • Are approvals delegated? (C) i. JET International, Inc. All rights reserved. 15 i. JET. com

Training ALL EMPLOYEES § Education • • Policy/Compliance Best Practices Processes Requirements § Management Team – Travel Risk Management Team (Duty of Care) • Collaborative Travel Risk Management Group to identify/develop responsibilities respective of functionality • Cross functional support (TMO, HR/Legal, Security, Medical) • COOP Planning § Personal Protection • • Traveler Tracking/Commercial Travel Office/Online Booking Records Travel Department (focal point) Pre-Trip safety, medical, and security What department is primarily responsible for traveler’s safety (C) i. JET International, Inc. All rights reserved. 16 i. JET. com

TRM 3 TM – 10 Key Process Areas (KPAs) Policy/Procedures Overarching KPAs Training Management KPAs TRM 3 is a trademark of i. JET International, Inc. (C) i. JET International, Inc. All rights reserved. Risk Assessment Risk Disclosure 17 Risk Mitigation Risk Monitoring i. JET. com Response

Key Process Areas - Management § Risk Assessment: Ensure that each trip or assignment is evaluated for risk as part of the decision process § Risk Disclosure: Ensure that each stakeholder understands the nature of threat, its impact, and what should be done to mitigate the risk § Risk Mitigation: Strategies and solutions that will result in a level of risk that is acceptable to all parties § Risk Monitoring: Around the clock (24/7) process to monitor the current threat environment for changes § Response: Provide traveler with a process for reporting problems and getting assistance (C) i. JET International, Inc. All rights reserved. 18 i. JET. com

TRM 3 TM – 10 Key Process Areas (KPAs) Policy/Procedures Overarching KPAs Training Management KPAs Risk Assessment Risk Disclosure Risk Mitigation Risk Monitoring Notification Infrastructure KPAs Data Management Communication TRM 3 is a trademark of i. JET International, Inc. (C) i. JET International, Inc. All rights reserved. 19 i. JET. com Response

Top 10 Reasons Things Fail § § § § § #10: Department/Agency does not know what to do in an emergency #9: Bad data #8: Primary and backup person are not available #7: Mobile devices don’t always work #6: Third-party response resource does not know what is going on #5: No or limited access to emergency response services #4: Plans and protocols are not maintained #3: Plans and procedures are too complex #2: Personnel are not properly trained #1: Cost sensitivity delays response (C) i. JET International, Inc. All rights reserved. 20 i. JET. com

Summary An effective program should: § § § Identify and evaluate the risk Identify your resources Set an acceptable level of risk Develop a plan for mitigating the risk Educate and communicate the plan Monitor and benchmark the results (C) i. JET International, Inc. All rights reserved. 21 i. JET. com

Resources § Travel Risk Management Maturity Model (TRM 3 TM) § GBTA Foundation’s Managed Travel Index & Benchmarking Tool (includes travel risk management self-assessment) § Webinars § GTAC Panelists § Attendance at Conferences • Global Congress, GBTA, ASIS, etc. (C) i. JET International, Inc. All rights reserved. 22 i. JET. com

Questions? (C) i. JET International, Inc. All rights reserved. 23 i. JET. com

Thank you! (C) i. JET International, Inc. All rights reserved. 24 i. JET. com