VSI GLOBAL // ENTERPRISE ARCHITECTURE

Crisis Actions Playbook

9 min read

CRISIS ACTIONS PLAYBOOK

[DETAIL IDENTIFIER - ENGAGEMENT REF]

The CRISIS ACTIONS PLAYBOOK is the drill library and decision flow that executes the Emergency Action Plan (EP-012): the immediate-action drills every operator runs from memory, the crisis decision sequence for the leader, the communications formats that carry them, and the post-incident actions that follow. EP-012 holds the engagement-specific data (facilities, rally points, numbers); this playbook holds the rehearsable behavior. Drills are rehearsed on the battle rhythm (EP-021 weekly cycle) and at every G5 gate (EP-020). This is a repeatable runbook. All engagement-specific values are bracketed placeholders. Do not assert fictional findings or invent data.

Document Control

FieldValue
Report Reference[REF-YYYY-###]
Date of Report[YYYY-MM-DD]
Classification / Handling[internal / CONFIDENTIAL]
Client[CLIENT NAME]
Requesting Party[REQUESTER NAME / ID]
Prepared By[ANALYST NAME / ID]
Reviewed By[REVIEWER NAME / ID]
Approving Officer[APPROVER NAME / ID]
Version[0.1.0]
Distribution[NAMED RECIPIENTS]

Handling & Legal Caveat

Handling: [internal / CONFIDENTIAL]. Disseminate to assigned detail personnel only.

Nature of this product: This is an operational runbook. All actions render to lawful protective effects: shield, evacuate, treat, report, and hand off to responding authorities. Defensive force, where any, is graduated, proportionate, and within the jurisdiction’s law and the firm’s licensing per the region package legal annex. Nothing here directs interdiction or pursuit.

Detail Snapshot

FieldValue
Engagement Reference[ENGAGEMENT REF]
Governing EAP[EP-012 REF]
Rehearsal Currency[Last drill date per drill, from EP-021 log]
Detail Medic[INITIALS]
Nearest Trauma Center (today)[FACILITY - from EP-002 / region package]

Table of Contents

  1. Purpose and Drill Doctrine
  2. Universal Crisis Sequence
  3. Drill Library
  4. Crisis Communications Formats
  5. Crisis Decision Flow (Leader Sequence)
  6. Casualty Management and Evacuation
  7. Notification Matrix
  8. Post-Incident Actions
  9. Rehearsal Standard

1. Purpose and Drill Doctrine

  • A drill is the pre-decided first [60-120] seconds of a crisis, executed without orders. Decisions before the drill ends are already made; decisions after it are the leader’s (Section 5).
  • Any operator may initiate any drill by calling it; a wrong-but-safe drill call is corrected after the principal is safe, never punished. Hesitation is the failure mode.
  • Every drill ends in one of three states: principal secured in place, principal evacuated, or casualty care in progress; every drill ends with accountability.
  • The drills reference EP-012 data by pointer (rally points, facilities, numbers); operators memorize behavior, and read data from the daily brief card per EP-016.

2. Universal Crisis Sequence

Every drill below is a specialization of this sequence.

  1. Call it: drill name + location on the net (Section 4 format). Net goes flash per EP-011.
  2. Cover: body cover and cover from view between threat and principal.
  3. Move or hold: per the drill’s default; the call-maker states which.
  4. Account: principal, party, operators, by name/callsign, once at a secure point.
  5. Report: SITREP to Team Leader; external calls per the notification matrix (Section 7).
  6. Transition: hand to responding services, EP-012 sustained procedures, or stand-down per the leader.

3. Drill Library

Each drill: trigger, immediate actions in order, default end state. Engagement specifics live in EP-012.

3.1 Attack on Principal (AOP)

  • Trigger: violence or weapon directed at the principal, any range.
  • Actions: (1) call “AOP + location”; (2) nearest operator body-covers the principal; (3) move the principal off the attack line to hard cover or the vehicle, whichever is faster; (4) driver brings the vehicle to the principal where geometry allows; (5) evacuate along the briefed egress; do not stop to engage beyond what lawful defense of the principal requires; (6) accountability at the safe haven / rally.
  • End state: principal evacuated to [safe haven per EP-012]; casualty drill stacked if wounded.

3.2 Medical Emergency (Principal or Operator)

  • Trigger: injury or acute illness.
  • Actions: (1) call “MEDICAL + who + location”; (2) detail medic to the casualty, close cover maintained on the principal by remaining operators (the principal is still protected during a casualty); (3) treat per training scope: hemorrhage first (SYS-009/SYS-010 kits); (4) evacuation decision per Section 6 (self-transport vs. EMS); (5) hospital escort posture per EP-012.
  • End state: casualty in definitive care with protective coverage maintained.

3.3 Vehicle Contact / Blocked Route

  • Trigger: collision, mechanical kill, or deliberate blockage of the motorcade.
  • Actions: (1) call “CONTACT VEHICLE / BLOCKED + location”; (2) unblocked vehicles create standoff and cover the principal vehicle; (3) assess in seconds: drive through / reverse out / cross-load; (4) cross-load drill: principal moves between vehicles under body cover on the protected side; (5) move to alternate route or safe haven; (6) if immobilized and threatened, defend in place per lawful posture, call for LE response.
  • End state: principal mobile on an alternate, or secured awaiting response.

3.4 Residence / RON Intrusion

  • Trigger: breach or attempted breach of the secured perimeter (alarm, sensor per SYS-004, visual).
  • Actions: (1) call “INTRUSION + point”; (2) principal to safe room per EP-012 residence annex with one operator; (3) remaining posts collapse to the protective core, not toward the intruder; (4) lights/announce per residence policy: the objective is denial and withdrawal, not capture; (5) LE called per matrix; (6) no clearing beyond what protecting the core requires; hold for responders.
  • End state: principal in safe room; responders clearing; accountability held.

3.5 Fire / Environmental (Venue or Residence)

  • Trigger: fire, smoke, structural alarm, hazmat, or natural event.
  • Actions: (1) call “FIRE/ENVIRONMENTAL + location”; (2) immediate movement along the walked egress from EP-002 (not the crowd’s default exit where geometry allows); (3) low-smoke discipline; no elevators; (4) mount vehicles or muster at the briefed point upwind/upgrade; (5) vehicle fire: occupants out and upwind [50+ m], extinguisher (SYS-010) only on incipient fire and only if egress is secure.
  • End state: party clear, accounted, moving to alternate location.

3.6 Lost Communications

  • Trigger: net or member unreachable past [two] failed checks per EP-011.
  • Actions: (1) execute PACE fallback in order per EP-011; (2) unreachable mobile element proceeds to the briefed rally/lost-comms point per EP-012 and holds; (3) detail assumes elevated posture until the picture is restored; (4) overdue element past [T+X min] triggers the search/notification sequence.
  • End state: comms restored or the overdue procedure running.

3.7 Missing Principal

  • Trigger: principal unaccounted at any accountability point.
  • Actions: (1) call “PRINCIPAL UNACCOUNTED + last known”; (2) freeze and search from last known outward: hold, restroom option, vehicles, egress paths (the advance geometry from EP-002 is the search map); (3) venue lockdown request via liaison where cooperative; (4) at [T+X min] unfound, or any hostile indicator: treat as abduction, LE notified per matrix, all movement stops, scene preserved.
  • End state: principal recovered, or LE-led response running with the detail’s record handed over.

3.8 Arrest / Detention by Authorities

  • Trigger: any detail member or the principal detained by police or officials.
  • Actions: (1) comply; no obstruction, no argument at the scene; (2) call “DETENTION + who + authority + location”; (3) identify per license and the region package legal annex; volunteer nothing beyond identification without counsel; (4) Team Leader engages counsel and the client channel per matrix; (5) detail continuity: remaining operators re-form coverage on the principal.
  • End state: legal process running with counsel engaged; coverage intact.

4. Crisis Communications Formats

  • Drill call: “[DRILL NAME], [LOCATION], [initiator callsign]“. Nothing else is required to start execution.
  • Flash SITREP (within [5] minutes, leader to Team Leader): situation, principal status, casualties, location and direction, support needed.
  • Duress: the EP-011 duress word in any transmission means coercion; do not acknowledge on net; execute per EP-011 duress procedure.
  • External emergency calls state: location, nature, casualties, caller identity as [security staff]; no client identification beyond what response requires.

5. Crisis Decision Flow (Leader Sequence)

Runs from the moment the drill’s immediate actions are moving.

  1. Confirm the drill’s end state is being reached; redirect only if the geometry is failing.
  2. Threat still active? Hold protective posture; do not release cover for care or accountability tasks that others can do.
  3. Casualties? Section 6 decision: self-evacuate vs. EMS, which facility (EP-012 data).
  4. Report and notify per Section 7; start the log clock (who, what, when entries from this point).
  5. Continue / relocate / abort the day’s activity per OPORD no-go criteria; the default after any AOP, intrusion, or abduction indicator is abort to safe haven and hold.
  6. Stand-down only after: accountability complete, threat assessed clear or handed to LE, casualties in care, principal decision made, client notified.

6. Casualty Management and Evacuation

  • Priorities: massive hemorrhage first; kits per SYS-009 (individual) and SYS-010 (vehicle); treatment within trained scope only.
  • Evacuation decision: self-transport when the casualty is stable-movable and the facility is within [X] minutes; EMS when unstable, entrapped, or scene-safe to wait; the facility set and trauma-center choice come from EP-012/EP-002/region package, pre-decided per movement day.
  • Hospital protocol: one operator escorts and stays with the casualty; protective coverage of the principal is never reduced below [floor] to staff the escort; family/client notification per matrix, by the Team Leader, not from the scene.
  • Operator down: the principal’s protection does not pause; the drill covers both or the day aborts.

7. Notification Matrix

Event ClassImmediate (mins)Same DayAuthority
Any drill executed (no injury/loss)Team LeaderClient ops contact; log + EP-017 entryShift Lead notifies
Casualty (any)Team Leader; EMS/LE as neededClient principal channel; insurer per BIZ-012; family per client protocolTeam Leader
Criminal act (attack, intrusion, abduction indicator)LE per region package; Team LeaderClient; counsel; referral package per EP-024 Section 10 where surveillance history existsTeam Leader
Detention/legalCounsel; Team LeaderClient; licensing authority if reportableTeam Leader
Firm-reportable incident (use of force, weapon display)Team Leader; counselInsurer; licensing authority per jurisdictionTeam Leader

8. Post-Incident Actions

  1. Preserve: scene photos where lawful and safe, kit and vehicle states, net logs, device data per SYS-003 handling; nothing deleted, nothing reconstructed later.
  2. Statements: operator accounts written independently, same day, facts only, before group discussion; use-of-force accounts follow counsel’s direction.
  3. Report: incident AAR per EP-017 within [72] hours; serious incidents get the full sequence (chronology, decision review, corrective actions).
  4. Care: post-incident operator screening per firm policy; a shaken operator is relieved without stigma; staffing backfill via ART-vendor-roster.
  5. Feed-forward: corrective actions route to the implicated cells (EP-012 data, this playbook’s drills, EP-020/EP-021 process) and version them.

9. Rehearsal Standard

  • Cadence: one drill per week minimum on the battle rhythm (EP-021); the full library cycles within [8] weeks; every new AO or venue set triggers AOP, medical, and vehicle drills before first movement (EP-020 G5).
  • Realism floor: rehearsals are walked at the actual venue/vehicle where operationally acceptable, tabletop otherwise; a drill never rehearsed at the site is flagged in the G5 brief.
  • Standard: initiation to principal-under-cover within [X] seconds; accountability complete within [Y] minutes; misses are logged and re-drilled, not waived.
  • The rehearsal log (date, drill, participants, time-to-standard, corrections) lives with the daily logs per EP-021.

END OF REPORT

Model wiring

Generated from cell frontmatter at publish time.

Graph View

Backlinks