Strategic Growth Plan 2020 2023 Pandemic Virtual Tabletop

Strategic Growth Plan 2020 -2023 Pandemic Virtual Tabletop Exercise – TEMPLATE

Instructions Background To help other companies design a similar tabletop exercise, we have created this template that can be tailored to your specific business operations and assessed risks. Although there is no “one size fits all” approach to conducting such exercises, we hope that it inspires and assists you in developing your own exercises to find vulnerabilities within your organization before a sudden disruptive event occurs. Example Threat “A virtual tabletop exercise was conducted between 4 February and 10 February 2020 to assess our ability to operate in the event of a limited spread of the novel coronavirus characterized by the inability of personnel to come to the office, but without the disruption of essential services such as power, water and other utilities to include internet access. The definitions used and the scenario are at slides 3 and 4. The questions that each department were asked to address are at slides 5 -9. © Synectics for Management Decisions, Inc. 2020

Executive Out Brief The purpose of this exercise is to identify vulnerabilities if there is a declared emergency that prevents personnel from coming to the office for a period of 21 days. Participants of this exercise should read the scenario on the next slide, and then address the department specific scenario on their department’s slide. Indicate whethere would be minimal, moderate or severe impact. Minimal impact is slight impact to efficiency that can be overcome through minor changes in processes or practices. Moderate impact occurs if the department can meet assigned tasks though in a less efficient manner. Severe impact occurs when it is not possible to complete assigned tasks without significant delay or at all. If a severe impact is identified, please identify actions that could be taken to mitigate the assessed risk. This is designed to capture an initial snapshot for further analysis and to shape follow-on discussions and exercises. It is designed to take approximately 30 minutes to complete. Please return it to [your POC name] not later than COB [Date]

Scenario Today, five cases of the novel coronavirus were reported at a local hospital. All five patients lived and worked in the Rosslyn area of Arlington and are unrelated. All were determined to have taken the Metro at the same time to a local mall. As a result, government authorities have issued a quarantine for all of Arlington, Crystal City and the Del Ray community of Alexandria. No one may enter or exit this area except for official personnel, and all those in the area at the time of the quarantine are asked to shelter in place. The order came down after hours, and there are no personnel at the Synectics Headquarters. The order notes that they expect the quarantine of the area will last 21 days. Power and other essential services continue to function normally. © Synectics for Management Decisions, Inc. 2020

Finance/Accounting & Contracts Tasks to Complete Scenario Impact Closeout of timesheets Minimal Moderate Severe Payroll Minimal Moderate Severe Funding in support of 401 k Pricing support to a proposal Invoicing of customers Execution of a contract mod with the government customer *Fill with tailored tasks from your team regular operations. (1 -3) (4 -7) (8 -10) Minimal Moderate Severe (1 -3) (4 -7) (8 -10) *Leave only the impact scale that applies © Synectics for Management Decisions, Inc. 2020

Business Development/Sales/ Marketing Tasks to Complete Scenario Impact Negotiation of a TA Minimal Moderate Severe Drafting a proposal Minimal Moderate Severe Pricing Minimal Moderate Severe Participation at a customer event outside of the quarantine zone Minimal Moderate Severe Department meetings Minimal Moderate Severe Coordination with contracts and leadership for TA approvals Minimal Moderate Severe *Fill with tailored tasks from your team regular operations. (1 -3) (1 -3) (4 -7) (4 -7) (8 -10) (8 -10) *Leave only the impact scale that applies © Synectics for Management Decisions, Inc. 2020

Human Resources Tasks to Complete Scenario Impact On-boarding of an employee Minimal Moderate Severe Termination of an employee Minimal Moderate Severe Recruiting operations/Interviews Minimal Moderate Severe Responding to/supporting health insurance coverage concerns Minimal Moderate Severe Responding to EEOC inquiries Minimal Moderate Severe Conducting required training Minimal Moderate Severe *Fill with tailored tasks from your team regular operations. (1 -3) (1 -3) (4 -7) (4 -7) (8 -10) (8 -10) *Leave only the impact scale that applies © Synectics for Management Decisions, Inc. 2020

Project Management Office Tasks to Complete Scenario Impact Approving direct timecards Minimal Moderate Severe Supporting PMs with customer issues Minimal Moderate Severe Recruiting replacement personnel Minimal Moderate Severe Oversight of Program Performance Minimal Moderate Severe NIST Compliance Minimal Moderate Severe Designated Program Support Minimal Moderate Severe *Fill with tailored tasks from your team regular operations. (1 -3) (1 -3) (4 -7) (4 -7) (8 -10) (8 -10) *Leave only the impact scale that applies © Synectics for Management Decisions, Inc. 2020

Information Technology Tasks to Complete Scenario Impact Maintain company email Minimal Moderate Severe Maintain corporate domain Minimal Moderate Severe Store in & retrieve from the cloud Minimal Moderate Severe Maintain required IT security upgrades/testing/NIST Minimal Moderate Severe Support hosted program IT requirements Minimal Moderate Severe Terminate access to system by former employees Minimal Moderate Severe *Fill with tailored tasks from your team regular operations. (1 -3) (1 -3) (4 -7) (4 -7) (8 -10) (8 -10) *Leave only the impact scale that applies © Synectics for Management Decisions, Inc. 2020

Overall Report Department Scenario Impact Finance/Accounting & Contracts Minimal Moderate Severe Business Development/ Sales/ Marketing Minimal Moderate Severe Human Resources Minimal Moderate Severe Project Management Office Minimal Moderate Severe Information Technology Minimal Moderate Severe Average Scenario Impact Minimal Moderate Severe *Fill with tailored departments from your company regular operations. (1 -3) (1 -3) (4 -7) (4 -7) (8 -10) (8 -10) *Leave only the impact scale that applies © Synectics for Management Decisions, Inc. 2020

Findings This exercise revealed that… • Finding 1 • Finding 2 • Finding 3 • Finding 4 • Finding 5 • Finding 6 • Finding 7 © Synectics for Management Decisions, Inc. 2020

Recommendations Risk or Threat Issue Recommended Mitigation Action Risk 1 Recommendation or mitigation action *Fill with tailored findings from your team’. *Fill with recommended mitigation actions © Synectics for Management Decisions, Inc. 2020