We know for certain that you’re able, aptable and even adaptable. But are your policies and procedures? Let’s define a few things first.
Able: having necessary power, skill, resources, or qualifications; qualified
Aptable: capable of being adapted
Taking that one step farther and defining adapted (root adapt)…
Adapt: to adjust oneself to different conditions, environment, etc.
Seems simple enough. Now for the homework. Are your policies and procedures, the ones you currently have in place, are they Able? Are they Aptable? Are the Adaptable? If they’re not…they need to be and they need to be now. As you’re living and breathing so do your policies and procedures need to be. If you’re going to address your security and risk needs they need to be living and breathing. So that there’s no misunderstanding. I don’t want you to write your policies and procedures on the fly as the events happen. What I’d you to accomplish or make sure exists is that they have a strong foundation from which you can work from and respond from, but there needs to be that functionality built in to modify them as you need them in the moment. They can’t be too rigid that it restricts your response and your ability to protect your assets and continue business.