• Section 1 - Purpose
• Scope
• Section 2 - Policy
• Section 3 - Procedures
• Part A - Crisis management model
• Crisis management sequence and transition
• Part B - Incident classification and management
• Incident assessment and classification
• Part C - Crisis management tiers
• Tier 1: Operational response – Operational response teams
• Tier 2: Tactical response – Crisis management team
• Tier 3: Strategic response – Senior executive team
• Senior executive team (SET) roles and management
• Communications management
• Partnerships
• Review and reporting
• Section 4 - Guidelines and other supporting documents
• Section 5 - Glossary
• Section 6 - Document context

Section 1 - Purpose

(1) This procedure outlines the University's crisis management model and arrangements for responding to incidents in accordance with the Resilience Policy.

(2) The procedure describes:

1. the details and principles of the crisis management model
2. the method for incident classification and activation, and when and how to establish crisis management arrangements
3. the roles and responsibilities of the senior executive team, crisis management teams and operational response teams, and how these teams operate and interact, and
4. when and how to transition incident management arrangements to business continuity plans, recovery and stand down the crisis management team.

Scope

(3) This procedure applies to all:

1. incidents that have been assessed as a Level 1-3 incident (see Part B)
2. University-related activities, and
3. senior executive leaders and other University staff who are required to respond to incidents.

Section 2 - Policy

(4)  Refer to the Resilience Policy.

Section 3 - Procedures

(5) This procedure is subordinate to the Resilience Policy, as shown in the following hierarchy:

1. Resilience Policy
2. Crisis Management Procedure
3. Crisis Management Plan
4. Staff and Student Critical Incident Plans
5. Incident Playbooks

(6) The Crisis Management Plan provides the practical information for the execution of effective crisis management, and in particular, the information required to effectively run the crisis management team and operational response teams.

Part A - Crisis management model

(7) The University follows a three-tiered crisis management model:

(8) This simple and adaptable model can be tailored to a range of simple and complex scenarios, and is defined by the following key principles:

1. Adaptive support: prioritise effective support to operational response while remaining flexible.
2. Tiered Response: a tailored, graduated crisis response system.
3. Effective communication: timely reporting, decision-making and communications management.
4. All-hazard management: a simple, versatile robust system for all incident types.
5. Resource mobilisation: swift allocation of resources in support of an effective response.

Crisis management sequence and transition

(9) Four general phases will occur following an emergency event requiring a crisis response. They may occur in sequence with overlap, as above, or simultaneously, especially in the case of multiple events.

1. Operational response - to manage emergencies where an immediate internal or external emergency services response is required. Consists of the activation of drills and procedures immediately following an event to protect people, property and information from harm and raise the alarm. Physical Emergency Response is detailed by the Emergency Management Procedure.
2. Crisis management - to provide a strategic and systematic approach to the management of crises. Involves the formulation and execution of strategies designed to manage the crisis.
3. Business continuity management – to continue or re-establish critical business processes in a timely manner, in the event of a disruption. Involves the implementation of plans in order for the University to maintain critical functions during the crisis. See Business Continuity Management Procedure.
4. Recovery – refers to the restoration of business-as-usual through the rebuilding of systems and processes and ongoing management of people to return the organisation to pre-crisis levels of performance and resilience.

(10) Following stabilisation of the situation and management of the crisis phase, the CMT will seek to:

1. transition to business continuity plans which will be managed under business as usual (BAU) arrangements, and
2. facilitate effective recovery, either through management of recovery by the CMT itself, or handover to an appointed recovery management team.

Part B - Incident classification and management

(11) All incidents, following the initial emergency response in accordance with applicable plans, reported through the University's incident reporting processes are assessed by an incident assessment team and classified according to severity. This classification determines which tier of the crisis management model is required:

Incident assessment and classification

(12) The University’s incident reporting procedures ensure key incidents are reported through to Executive Director, Safety, Security and Wellbeing, the Director, Security and Resilience (CSO) and/or the Director, Risk and Compliance. These can occur through multiple means. Upon notification, the informed officer will activate the incident assessment team.

(13) The incident assessment team (IAT) is a small, qualified team that assesses and classifies the incident. It consists of:

1. a senior executive leader (e.g. Vice-Chancellor or a portfolio lead) 
2. Director, Risk and Compliance, or their representative
3. Executive Director, Safety, Security and Wellbeing, and/or the Director, Security and Resilience (CSO)
4. the relevant area director or head for the business area in which the incident occurred, or partnership representative where relevant (e.g. Director, Facilities Management for physical incidents).  

(14) This team assesses the incident using the incident severity tool contained in the Crisis Management Plan.

(15) Once the incident is classified, the IAT briefs the relevant senior executive leader and/or SET and the appropriate tier response is activated (see table at clause 11).

(16) Notwithstanding the IAT assessment and classification, any senior executive leader may activate a CMT at any time.

(17) Incidents will be classified according to the following table, supported by an incident assessment:

Part C - Crisis management tiers

Tier 1: Operational response – Operational response teams

(18) Operational response teams (ORTs) include the emergency control organisation under the Emergency Management Procedure, as well as teams identified in business continuity plans or ad hoc teams as determined by the senior executive leader or CMT.

(19) In a Level 1 response, ORTs report through their line reporting. In Level 2 and 3 responses, they are subordinated directly to the CMT.

(20) ORTs have the following responsibilities:

1. Emergency management (emergency control organisations)
   1. Immediate response to incidents on the ground.
   2. Execute predefined emergency protocols to address the situation promptly to preserve safety and property.
2. Student and staff critical incident management
   1. Prioritise the safety and well-being of students and staff.
   2. Implement crisis response plans tailored to the specific incident in accordance with the Student Critical Incident Plan.
   3. Support international students, where applicable, in accordance with Standard 6 of the National Code of Practice for Providers of Education and Training to Overseas Students.
3. Other teams
   1. Execute business continuity plans where applicable.
   2. Collaborate with relevant teams to coordinate a cohesive response.
   3. Utilise specialised skills and resources to address specific aspects of the incident.
4. Preserving life and minimising harm
   1. Focus on immediate actions to protect lives, property and information and minimise harm.
   2. Provide timely and accurate information to affected individuals.

Tier 2: Tactical response – Crisis management team

(21) The crisis management team (CMT) consists of the appointed leader and a task-organised team from across the University, in accordance with the Crisis Management Plan. It is facilitated by the Director, Security and Resilience (CSO).

(22) The CMT will:

1. Provide operational support and guidance
   1. Support and guide ORTs.
   2. Ensure alignment with overall incident response objectives.
2. Maintain communications
   1. Facilitate clear communication between front-line responders and the CMT.
   2. Relay critical information and updates to all relevant parties.
3. Make operational decisions
   1. Authorise operational decisions within delegated authority.
   2. Act promptly to address issues and keep the response effective.
4. Meet administration practices
   1. Adhere to proper meeting administration practices.
   2. Prepare documentation and maintain records for accountability and analysis.
5. Refer matters beyond authority
   1. Identify issues exceeding delegated authority.
   2. Refer such matters to the SET for higher-level consideration and decisions.

Tier 3: Strategic response – Senior executive team

(23) The senior executive team (SET) consists of members stated at the ‘Senior executive team (SET) roles and management’ heading below.

(24) The SET will:

1. Provide strategic leadership
   1. Oversee the strategic direction of crisis response efforts, setting clear goals and priorities for the CMT.
   2. Communicate with University Council.
2. Manage strategic and reputational impacts
   1. Address strategic and reputational implications of the crisis, including oversight and approval of public communication.
   2. Formulate strategies to mitigate long-term impacts on the University.  
3. Ensure risk management
   1. Ensure that risk is managed in alignment with University Council direction.
   2. Escalate critical risk issues to the University Council when necessary.
4. Approve working arrangements
   1. Have the authority to approve and provide clarity on working arrangements.
   2. Adapt policies and procedures as needed during the crisis.
5. Meet as required
   1. Convene meetings based on advice from the CMT Leader.
   2. Meet as directed by the Vice-Chancellor to address strategic decisions and updates.  

Senior executive team (SET) roles and management

(25) The SET consists of the:

1. Leader: Vice-Chancellor (or properly authorised delegate)
2. Portfolio leaders: Chief Operating Officer, Provost and Deputy Vice-Chancellor (Academic), Deputy Vice-Chancellor and Vice-President (Research)

(26) When the SET meets it is joined by the below as required:

1. CMT leader: the nominated leader of the CMT.
2. Facilitator: primary – Director, Security and Resilience (CSO), secondary – Chief of Staff, emergency – Director, Risk and Compliance, Executive Director, Safety, Security and Wellbeing
3. Executive support: an appropriate Executive Officer or Executive Assistant
4. University Secretary
5. Media and communications: Chief of Staff, Head, Communications and Government Relations
6. Support roles as required, including other key CMT staff.

(27) A secured Microsoft Teams group is in place for the conduct of SET briefings. Should Microsoft Teams be unavailable, a suitable alternative will be set up by the CMT.

(28) Briefings will include:

1. situation brief
2. proposed crisis management plan
3. key risks
4. senior executive team plan amendment and endorsement.

(29) Further details related to the briefings, including templates and considerations, are included in the Crisis Management Plan.

Communications management

(30) External communications are managed as follows:

1. For activities from Level 2 – Level 3, an integrated approach to communication will be led by the CMT. This includes students, staff, stakeholders and media.

(31) External public communication will only occur with the approval of the Vice-Chancellor's office, through the Chief of Staff, even in situations where the CMT is activated. This is with the exception of Level 0 incidents when communication channels including campus alerts will be issued directly by the operational response teams involved.

1. In the event that the Chief of Staff is on leave or unavailable, the University Secretary or Head, Communications and Government Relations is the successor.
2. In the event that the Head, Communications and Government Relations is on leave or unavailable, the Executive Director, Engagement and Enterprise is the successor.
3. In the event that an external regulator or agency needs to be informed of an incident, the relevant University contact will communicate with that agency following approval of messaging by the portfolio leader.

Partnerships

(32) The crisis management model described above will also be employed by the University in instances involving partners. It is understood that in these instances the University’s and the partner’s crisis management processes will be required to run in parallel.

(33) This will be coordinated by the placement of suitable liaison staff (e.g. partnership managers) onto the CMT and equivalent groups within partner organisations. In some instances, it may be appropriate, if agreed between the University and the partner, to run a combined CMT.

Review and reporting

(34) An after-incident review will be conducted following all Level 2 and Level 3 incidents. Details for the conduct are in the Crisis Management Plan.

(35) This procedure will be reviewed annually and following any significant recommendations as a result of an after-incident review.

(36) The University’s crisis management model will be tested by an external party no less than once annually to Level 3 to ensure effectiveness.

(37) Level 2 and Level 3 incidents will be reported to Audit and Risk Committee in the quarterly Division of Safety, Security and Wellbeing report, along with results from tests.

Section 4 - Guidelines and other supporting documents

(38) This procedure is supported by:

1. Crisis Management Plan
2. Incident playbooks
3. Student Critical Incident Plan

Section 5 - Glossary

(39) Nil.

Section 6 - Document context