Typology and Response Levels

In instances where the JHUCarey Incident Command Team determines that a "local crisis" requires a University response, the appropriate higher-level ICS shall be contacted expeditiously. JHUCarey response actions are based on a “culture of risk management”. Incidents that develop within the School’s purview will be handled at the lowest, most appropriate level.

Crisis Effects	Level I - Routine Business -	Level II JHUCarey - ICS -	Level III - Johns Hopkins University -	Level IV - CEPAR -
Loss of Personnel	Injuries/illnesses commonly seen every day at work	Injuries involving an easily resolved facility issue. Impact on local/limited employee population	Serious injury and/or fatality Illness outbreak of suspicious nature Threatened or actual kidnapping, extortion, or sabotage Senior executive(s) death that significantly impacts the Schools	Multiple fatalities involving Campus Biochemical agent exposure Impact on broad employee population
Technology/ Telecom	Minor Business outage temporarily (less than 4 hours) impacts 1 or 2 business units or critical functions Minor telecom outage impacting single facility	Business outage impacts 1 to 2 business units for 24 hours, or major Business outage impacts several business units for less than 4 hours Minor telecom outage of less than 1 hour	Business outage impacting several business units and critical functions for more than 24 hours Telecom outage impacting major bldg Business outage impacting the East Baltimore Campus Outage of all telecom for E. Balt Campus	As Needed
Physical Assets	Incident causes minimal, if any, damage Facility aging/ deterioration (e.g., mold) Minor property damage	Facility issues Minor to major property damage Threat requires temporary evacuation	Critical location evacuated and partially destroyed or inoperable Extensive property damage affecting Campus Critical location(s) destroyed	As Needed
Business Impact	Little business interruption	Minor interruption	Significant university interruption	As Needed
Hazardous Materials	Little, if any, clean up required	Contamination with unlikely health or safety impact Simple clean-up	Contamination with likely immediate or future health or safety impact Extensive clean-up	Major / extensive contamination with health or safety issues
Financial	Incident has minimal potential to impact earnings, or involves normal capital expenditures	Incident has elevated potential to impact normal capital expenditures	Incident has potential to seriously impact earnings, or involves significant capital expenditures	As Needed
Legal	Potential local government impact	Potential for more than 1 lawsuit from same or similar cause Routine govt. inquiry	Class action lawsuit with high-visibility Potential indictment of employee Government investigation of Schools and/or staff/faculty	As Needed
Regulatory	One instance of unauthorized use of passwords, ID codes, ID badge One instance of a Business falling out of regulatory compliance	Limited instances of unauthorized use of password/ID codes, ID badge Limited instances of a Business falling out of regulatory compliance	Multiple instances of unauthorized use of passwords, ID codes, ID badges Widespread instances of unauthorized use of passwords, ID codes, ID badges Multiple - widespread instances of falling out of regulatory compliance	As Needed
Publicity/ Reputation	Potential for local media coverage	Local media coverage Potential for public criticism	Public criticism Negative media coverage; likely to trigger negative national media	As Needed
Other	Potential union effect - not materially impacting operations, brand, personnel or visitors	Likely union effect - potential to materially impact operations, brand, personnel or visitors	Work stoppages/picketing at locations impact ability to conduct business Material impact to operations, brand, personnel or visitors	As Needed