Skip to content
Blueprint Catalog

    ↑↓ move · Enter open · Esc close

    03 — Value stream · VS-360

    Threat-to-Resolution

    Carry a physical threat or incident at a site, from an alarm, report or warning through response, protection of people, communication and investigation to improved controls. Where Incident-to-Resolution (VS-10) restores an IT service, this handles intrusion, theft, violence and threats against people and sites; cyber incidents are handled under BC-760.30.

    • Physical Security Incident Response
    • Physical Incident-to-Closure
    • Site Threat Response
    // FIG. 03 · Stage flow
    1Detect & Verify2Respond & Protect3Communicate4Investigate5Recover & Report6Improve Controls
    1. 01

      Detect & Verify

      VS-360.10

      Detect the event through alarms, cameras or reports and verify it, or assess a reported threat, before committing a response.

    2. 02

      Respond & Protect

      VS-360.20

      Send guards, call emergency services where needed, lock down or evacuate, and protect people first.

    3. 03

      Communicate

      VS-360.30

      Tell employees what to do, answer the media and the community where the incident is public, and brief leadership.

    4. 04

      Investigate

      VS-360.40

      Preserve evidence, establish the facts, cooperate with police, and decide on discipline, recovery or legal action.

    5. 05

      Recover & Report

      VS-360.50

      Restore the site to normal operation, record the incident, and report it to insurers and regulators where required.

    6. 06

      Improve Controls

      VS-360.60

      Reassess the site's threats and standards and change access, surveillance or guarding where the incident showed a gap.