Understanding Hybrid Warfare

Author: Multinational Capability Development Campaign (MCDC)

Hybrid what?

There is no clear definition yet. There are rather some descriptions, such as:

A hybrid crisis is a combination of two or more crises between which a link can exist (not necessarily) and which can reinforce each other.

Hybrid warfare is a military strategy that uses political war and mixes conventional war, irregular war and cyber war with other methods with a strong influence, such as fake news, diplomacy and intervention in foreign elections.

However, it is known that the aggressor tries to avoid retaliation. Hybrid warfare is typically tailored to stay below the clear detection radar and response thresholds.

The cases on which this study is based are:

–    Iran’s activities in Syria
–   
Use of Gas and loans by Russia as a means of pressure in Ukraine
–   
IS in Syria and Iraq
–   
Hybrid warfare in an urban context
–   
Cyber ​​used by Russia

Two things are clear on this subject: nobody understands it fully, but everyone thinks it’s a problem

That is why there is a need to take 2 steps

Step 1: A common language (understanding the subject and communicating about it smoothly)

Step 2: An analytical framework

Step 1: Understand

There is no clear definition yet, as we wrote earlier, but there are descriptions, eg:

“The synchronized use of multiple power tools tailored to specific vulnerabilities across the entire spectrum of social functions, in order to achieve synergies.”

They often fall back on the speed, volume and ubiquity of digital technology.

It is important to recognize that multiple power tools are used in multiple dimensions and at different levels simultaneously in a synchronous way. This allows the actor to use various MPECI (Military, Political, Economic, Civil, Information) resources that they have available to create synchronic attack packages that are tailored to perceived or suspected vulnerabilities. The instruments of power used will depend on the capabilities of the actor and on these vulnerabilities, as well as on the political objectives of the actor and his planned way to achieve his goals. As in all conflicts with wars, the characteristic of hybrid warfare will depend on the context.

Hybrid threat does not lend itself to classical threat analysis for, among others, the following reasons:

–    A wide set of MPECI tools
–   
Vulnerabilities across societies are being exploited in a way that we normally do not think of
–   
Syncing and the way that is done are unpredictable.
–   
Uses the exploitation of ambiguities, creativity and our understanding of warfare to keep his attacks invisible
–   
A hybrid attack can remain unnoticed until it is too late.

We will therefore have to learn to look differently at conflicts in the future.

escaleren

Step 2: the Analytical Framework:

The analytical framework is structured with three components:

–    Critical functions and vulnerabilities
–   
Synchronization of resources
–   
Effects and non-linearities (complexities)

We give a brief explanation of these three components

Critical functions and vulnerabilities

Critical functions here are activities about the PMESII (Political, Military, Economic, Social, Infrastructure, Information) spectrum that, when they are no longer carried out, can lead to an interruption of services on which society depends.

They can all be divided into a combination of actors, infrastructures and processes. They all have vulnerabilities.

Synchronization of resources

Synchronization (syncing) is the ability of the attacker to coordinate effective power tools (MPECI) in time, space and with certain goals to achieve a desired effect. With this he can achieve greater effects than with overt coercion. Benefits for the attacker are:

Use tailored resources and vulnerabilities

Compulsion but remain under the radar of the detection thresholds and response thresholds

Easier to escalate and de-escalate different MPECI simultaneously

Effects and non-linearities (complexities)

Effects are changes in the condition of the target. They can not be properly controlled by the attacker because one can no longer predict a linear sequence of effects. Causality becomes increasingly difficult to show and predict as more elements of the MPECI are used and vary.

 

Framework

One has to set up “BTIMs” to learn recognize and know things:

Baselines, Thresholds, Indicators, Monitoring in real time, from the philosophy: “You do not know what is abnormal if you do not know what is normal and if you do not measure what the evolution is”

For the baselines, a list and assessment of social critical functions must be made. Indicators must help determine whether an attack is in progress or is starting. Thresholds help determine what the normal / abnormal operation is.

Without knowing what is normal, nothing can begin.

Unfortunately no real examples of existing “BTIMs” are given in the document.

What are the recommendations of this document?

–    Make regular national self-assessment of critical functions and the vulnerabilities of all sectors and of society.
–   
Improve the classic threat analysis so that it contains the following tools and possibilities: Political, Economic, Civil, International and research how these resources can be synchronized in an attack on vulnerabilities
–   
Create a national methodology for coordinating self-assessment and threat analysis specifically for: understanding, detecting, responding to hybrid threats
–   
Internationalize, work together coherently across borders.

Conclusion: Here I am going to be a contrarian.

The study finds that the framework is a visual tool for responding during a hybrid attack.

That seems wrong to me. In addition to the BTIMs that have to be set up, and which must be able to function separately from the framework, the visual tool i.m.h.o. will rather remain a tool for analysis afterwards.

The tool does, however, provide an explanation of what information must be preserved during the crisis.

Future-Proofing The State

Editors: Jonathan Boston, John Wanna, Vic Lipski and Justin Pritchard

The book was written in the aftermath of a number of short-term major disasters in Oceania. Disasters were flooding, bush fires and a huge range of earthquakes in a short time. It is a vision of what they need politically and in terms of public service. The book is divided into four parts, all four related to resilience, risk management, crisis management and disaster recovery. I attempt to summarize the main thoughts below.

Part 1: Governing for the Future

From the mission of running a government there are some priorities that can be asked. Among many others are:

  • Arrange the finances in a responsible manner
  • Where to save but also where investing is the key question.
  • Building an increasingly competitive economy, adapted to its time.
  • The provision of better public services within ever more pressing conditions, which increasingly require the relevant services of the civil service to do with limited resources, affordable for taxpayers.
  • Caring for future generations, a call that is becoming increasingly necessary.

In addition, the government increasingly needs good advice, as well as capable people who find it a challenge to and must know that their decisions have an impact on the economy and society, and the associated opportunities and threats, now and in the future.

The complexity and the scale of the risks (= threats and opportunities) to which society is exposed become ever greater. (Eg due to climate changes, terror, cybercrime, dependence on all kinds of infrastructures that are still vulnerable, such as electricity, water supply, …)

The frequency of major disasters on a global scale is also increasing. At present, the global arrangement of common resources, such as oceans and atmosphere, is still in its infancy / is weakly regulated and increases the likelihood of the required political will at world level coming too late, unless supported by the citizens or enforced bottom-up. That will weigh heavily on the recovery that will be carried out by future generations.

Therefore, the current government should not fall into the trap of short-term vision under the pressure of elections, but they (the political parties) should work together, and not choose against future generations in favor of short-term vision within a reign cycle.

Governments need a resilient society to be resilient themselves. A continuous future-oriented view therefore becomes increasingly necessary as well as taking care of the scarce social social capital.

It is therefore important that the leaders of the government, the ministers and their cabinets, know all sides of the decisions to be taken by them, have all relevant information at their disposal and know the foreseeable implications.

Although the government is not currently a technocratic exercise, it is the task of the government, through difficult issues, to make the right and most sensible decisions, depending on what comes to society. In this way, society can progress sustainably. Trust between citizens – politics and civil service is essential in this.

Increasingly looking ahead is therefore essential, also to create and maintain trust that has been mentioned earlier.

The civil service and politics must therefore, hand in hand, focus on determining which services are most effective and most cost efficient. Because the public expects the government to have a well-oiled machine that helps them when they need it. And they’re right.

We do not want targets that are easy to achieve. The execution of the services may be difficult to achieve and feel uncomfortable. In doing so, we do not shy away from difficult issues.

But the first lesson to be drawn is that the authorities must have a foresight strategy or a foresight team. This way, they can ensure that the future is taken into account to a certain extent. This is in stark contrast to the political planning, which typically has the duration of a political cycle. Important aspects that increasingly need to be taken into account are the change in the climate and the far-reaching concentrations of population and goods. Both lead to an increase in disaster vulnerability, such as pandemic, financial crises, cybercrime, solar storms and social unrest. In addition, global disasters can occur instead of the smaller “major disasters”. One of the generic methods to challenge this is diversity. In everything. Priorities must also be determined in advance. In doing so, attention must be given to the storage of necessary stocks. In private, more attention will have to be paid to sharing data. The sectors must learn to abandon their preoccupation of keeping things confidential.

In order to be able to do resilience in this way, one must realize that this is something that is slowly being realized over a longer period. In order to build a resilient society, we have to make work of the individual and of the communities. It takes a certain sense of civic responsibility to work together, to achieve better results at a lower cost. A country that realizes this is not only better positioned in predictable circumstances, but also in unpredictable chaotic circumstances. When creating solutions, the institutions of the government must also contribute. There is also a danger that governments that are most successful with a previous concept of governance will find it more difficult than governments that create and implement a different model of governance. In order to frame an adaptive system of governance, four ways of thinking are required: compliance, performance, emergence and resilience.

It is important that the government does not do everything alone. It must exchange knowledge and skills with the private sectors. Co-creation and co-production are important means of binding in society, between the government and the citizen and the private sector. But also self-organization and self-confidence are important for the citizen. New techniques play a role in this. It may create more possibilities and it will be more cost-effective to make use of it than the start of a new political program and legislation to change behavior.

But to know what the government can do, it is important to know more about how society is connected. I refer to an earlier article in which I talk about linear, complicated and complex problems: “Does history repeat itself? Or not?”. I repeat here the explanation:

What are linear events? These are generally regarded as events that can be addressed by applying routine tasks. For example, chopping a tree with an ax. There may have to be thought about where the tree can best fall down, because it does not always fall correctly, but in general this is a task that requires no special higher studies. Which does not mean that no responsibility can be hidden behind such a task.
Another thing is complicated things. These are things that, with sufficient effort, such as acquiring sufficient knowledge, are just manageable and predictable, but not for a layman. For example, building an airplane. You have to know enough about aerodynamics, materials, fuels, strengths of materials, standards, fluid dynamics and nowadays even electronics and computer sciences to design an airplane. But we succeed, provided we work together.
Third, there are the complex phenomena. These are things that we absolutely can not predict. Not so much because we can not know our own actions, but mainly because we can not know all the parameters, among other things because they are never the same twice. Some examples are nature, climate changes, society, …

In addition, the term “wicked problems” exists. These are problems that have no immediate or clear solution. They are often related to “unknown unknowns”.

In order to be able to cope with these situations, the government must get all interested parties in line with their perspectives and goals. But that requires a sharpening of patience, and consensus building. This means that complex matters can not be avoided again.

A case with which the government can deal with resilience is building scenarios. That is a linear approach to uncertainties. Non-linear approaches are also required, such as back-casting, policy gaming, and horizon scanning.

In doing so, it must always take into account that no form of looking ahead is 100% congruent with the volatility and uncertainty that exists in an increasingly complex world. But it remains necessary to become proficient because they are strategic risks.

This gives reason to reason that governments have to be careful with the implementation of lean systems. Lean systems that only focus on efficiency are very likely to have insufficient resources to avert unexpected disasters and also to make plans for a complex world full of ‘wicked problems’.

The next question is whether the government has the problem of political myopia. This question came about due to the large global financial crisis (around 2008) and gave the impression that this was due to a lack of forward looking and only linked to the public sector. However, both are a misconception.

Chapter 7 describes a new issue: every failure of a regulation is a new challenge: what went wrong? Why did it happen and how can we ensure that this does not happen again? How can we learn from our mistakes? (These questions do not only apply in the public sector, of course.) In this respect, it must be borne in mind that regulatory regimes often fail when promises made, which create great expectations, are not realized, and the parliament then decides to develop a new regulation. Sources of non-compliance are often the failure of the business of the too complex regulations, but also a lack of commitment of the business to the underlying thoughts of the legislation, or the business finds the regulations unjustified, or the implementation is too expensive.

Is it possible, however, to maintain the trust of the citizen and private sector in the government? After all, trust, integrity and social norms are very important for the future-proofing of the state. To be able to say something about this, one uses the international Corruption Perception Index (CPI) scores. The importance of this is that a society with higher confidence in the government will achieve better social, democratic and economic progress. A point that must be interpreted here is that this index revolves around perception, not the factuality. Openness and transparency are extremely important, as well as self-criticism.

Part 2: Managing Risks and Building Resilience

A first question that arises when the government starts such a task is: what can we learn from the private sector? An important approach is that modern companies are characterized by new risks. These are associated with a growing state of science and technology. They are global in nature, and cross national and organizational boundaries. These are unintended side-effects of innovations, to which the public, private and government are exposed. They are “man-made”. On the other hand, there are the “natural hazards”. There expectations of anticipation and control are unusual. One conclusion is that the government must ’empower’ multiple stakeholders in the regulatory process, at national, regional and local level. If this happens, the future-proofing of the state will be a co-operative realization, with an emphasis on ‘governance’ rather than ‘government’.

From chapter 10 on the actual sources of the text become more important: the disasters that hit the areas in Oceania in 2009-2012.

In addition, there is the important conclusion from which it is assumed that the communities must be better equipped to survive and recover from disasters. Self-reliance is a key concept here. One of the important mistakes that a government can make is that it does too much for the citizen, because they will start to expect more and thus take fewer initiatives. This gave rise to a large number of victims in the past. Another key interest is that the services that have to do their work in a disaster are aligned, and that they know each other what they have and can expect from each other. It is also important that the citizen knows that a literal immediate help is not always possible, and that (in Oceania) the citizen on his or her own behalf has to be able to endure it for three days on its own. Queensland even posted on its website: “Weather events are getting more severe and when a major weather event hits you. You need to harden up by preparation, awareness and helping others. “

A next chapter, chapter 11, deals with the reduction of future vulnerabilities in socio-economic systems. The author deals with this in a qualitative way with the understanding of hysteresis loops from the exact sciences. These types of phenomena often occur in complex adaptive systems. It is important to know that a change in circumstances can be irreversible.

In chapter 12 the author deals with the importance of horizon scanning as a technique that is important for exploring challenges and opportunities at policy level. It deals with questions such as: how do we identify relevant issues and trends? How do we graphically represent them? How do we make effective and flexible strategies from this information that prepare the decision makers for our coming changes? Analysis techniques such as “STEEP” are important in this respect: the search for changes in society, technology, economy, the environment and politics.

Chapter 13 is more practical: it concerns the influence that the delivery of a type of transport system can have on the future. In addition, four hypothetical scenarios were examined: “super city”, “coastal tree”, “carbon crunch” and “global bust”. Unconventional transport was also looked at like flying cars. This involves a lot of questions such as “How do we translate this into action?” And “How can this work for the citizen?”.

In chapter 14 an important statement about resilience is that “no system is resilient when the economy is failing to improve the livelihoods of the majority of the people”.

Part 3: Managing Crises

When you think about crisis management, you are dealing with the “un-words” that dominate: unplanned, unwanted, uncertain, and unpleasant prospects and choices that you have to make. A crisis also works as a high-pressure cooker: they strengthen the interests and emotions to unprecedented high intensities. Questions that are asked quickly are “How could this happen?”, “Why did not we see this coming?”, “Who is guilty?” And “How are we going to carry on now?”. But a crisis is not always a bad news show for the leaders. They can give unique opportunities to come up with old policies and old commitments, start new commitments and policies and reorganize the business.

Two logical types of actions occur for each crisis. First, there is the action that is prescribed in the plans that one makes. The second is the game of “who is wrong”, where the lawyers have months or years to decide where the crisis managers have seconds to make a decision under high pressure. So politically, a huge threat can come from a crisis. But it can also bring huge opportunities. Politically, a leader in the crisis can be the hero, the victim or the criminal. The challenges for him are: first making sense of the crisis (making the diagnosis: what exactly is going on?). Second, making the right decisions. Thirdly, there is the optimal use of scarce available resources. Fourth, there is the giving of meaning: convincing the citizens and the media of their own insights of what is going on. Finally, there is the adjustment to the new situation: the citizens have to go on with their lives, continue after the crisis and look further at a new horizon, to reflect on the present, and to draw lessons. Renewal would therefore be a better word than recovery.

It should be noted that the crises are becoming more challenging: they occur more and more in cascade and cross borders and become larger. There are also more and more of them. But the means to avert, prevent or combat them are less and less available, owing to the fact that the authorities consciously want to work more lean. It is therefore necessary that crisis management is seen as an integral part and crucial dimension of leadership within and outside the government.

Another consideration, in chapter 16, is that all organizations have to deal with seemingly permanent changes.

First, there is the (attempted) debt reduction in the developed world, which exceeds a large number of generations. (“The blame has come naturally, it will disappear naturally also, of course!” is not true.)
A second consideration is that free information becomes an ever-increasing ‘force’. The government no longer has any exclusive rights or power over it.
Thirdly, there is the ongoing shift of wealth, power and influence from our traditional markets to the Asian-Pacific region and other emerging economies.

While parliamentary liability follows the course of the money, the course of the world should also be monitored more closely.

While crises in the government in the past 20 years, especially meant not to be negative in the media, it means more and more managing the operational and financial risks in the coming decades for the huge expenses that we will face. A problem here is that the authorities still have to develop these skills.

Part 4: Disaster Recovery

This part immediately builds on the experience of disasters on a large scale. Restoration means governance that is much more than “fixing the dams” (which, for example, was necessary in New Orleans). A key behavior is to avoid putting the head in the sand, which inevitably leads to a new greater exposure to future disasters. Bridges must be built between civil, business and political leadership. However, this in itself is a “wicked problem” in which non-obvious and non-trivial choices must be made.

Perhaps the most important lesson learned is that governments and social vulnerabilities must be confronted in society. Recovery is also something complex, where there is no such thing as a simple solution to problems, no quick wins, no return to normal. Recovery, in short, begins when the community restores or develops social, political and economic processes, as well as the necessary institutions and relationships that help it all work in the new context after the disaster. The term “recovery governance” is created here. This is most simply represented by the following table:

uncertainty_Matrix

This shows that risk management is only part of the total problem. Not all problems of a disaster scenario can be measured.

In the event of disasters, the problems can not simply be resolved as issues in a school exam, in which all necessary information is provided. Possibilities for solutions are always given with a large degree of uncertainty. It is therefore often not a solution to outsource the problem to a professional consultant. He often knows things less than the government. To solve these issues we must:

–    firstly, focus on not only preparedness (readiness) and response, but we also need to work on reduction and recovery.
–   
Secondly, we must ignore the physical and economic dimensions of recovery, and deepen our understanding of the social, cultural and political dimensions.
–   
Thirdly, in addition to the obvious importance of the technical aspects and details, attention must be paid to ethical and moral dimensions.
–   
In addition, fourthly, there is the choice that must be made in the dilemma between speed of solution versus deeply thoughtful deliberation on the issue.
–   
Fifthly, there is the question of whether a crisis should be tackled top-down or rather bottom-up.
–   
Sixth, there is the story of the ‘insiders’ versus the ‘outsiders’.
–   
Seventh, the fast-effect of the crisis creates a tension between openness and closeness, whereby a bureaucracy can opt for or oppose the proper spending of time and energy to learn from the current crisis.
–   
Eighth there is the contradiction between rights and obligations of the stakeholders.
–   
Ninth, there is the question to what extent “business as usual” continues to apply during and after the crisis.
–   
Tenth there is the obligation to work out and operationalize a cost-effective recovery that must meet self-esteem and practices that stimulate “learning-by-doing” and resilience.

Of course one or more debriefings are needed after the disaster. What worked? What did not work? What could be better? A review by external experts can also be recommended. An important strategic lesson is that work must be done on more resilient communities, as well as on the individual, in order to better prepare both for the future. This is a shared responsibility between all stakeholders. The rule must be “Whatever it takes!”. That rule was not applied in the past, but was felt sharply after the 2009-2011 disasters in Oceania.

To do all this, the government is working on the “4 Rs”: “Reduction” of known risks, “Readiness” through capacity building, “Respond” to human need and “Recovery” after the disaster.

Response is important, because in the event of a crisis, unlike ‘business as usual’ everything can go fast. Decisions can be made quickly, for example to prevent social insecurity and pessimism. In addition, future negative evolutions of disasters can be further prevented. It is very important that during the recovery phase, after the disaster, the pace of recovery is not jeopardized. At the same time, early intervention and keeping the current problem manageable are some important lessons from the major disasters of 2009-2011.

Chapter 21 talks about the innovations that are possible within the public sector, after major disasters. It shows four case studies of innovation in the public sector:

1 ° A secure centrally managed online system for sharing information about patients. This makes a lot of crucial time savings.
2 ° A joint venture between a number of organizations to support affected business with advice and guidance and benefits.
3 ° Adjustments in the functioning of the legal services, to ensure the continuity of their services, through a new approach with newer technologies that were available.
4 ° Support for affected families and households after the disasters, through cooperation between government departments and NGOs.

The central theme there was always: build up the services around the human needs, and not otherwise. Co-production between citizens and business and government for a better and cost-conscious approach to services was a strong factor that played a part in the aftermath. But co-location was also important: working from the place where one was, and helping with the work that was done at that place by civil servants was an important factor in services at the front line. It was noteworthy that a lot of innovation occurred out of necessity. The intention must also be afterwards to turn this into innovation “by design”.

The book concludes with a chapter (22) on the role of an auditor general. Despite the rigor of that job, it appeared necessary, given the situation after 2009-2011, to be less demanding, for example in terms of evidence to be provided of correct expenditure and performance. This is because people are busy “getting their world going again” rather than nicely justifying everything.

Good Practice Guidelines – 2018 Edition – The Global guide to good practice in business continuity

Published by The Business Continuity Institute

This edition of the GPG differs according to its own saying in numerous ways from the 2013 edition. Some of those that stayed with me are:

–    More collaboration of the BCM employees with other employees in other management disciplines.
–   
Supply chain was integrated more into the story.
–   
More links are being made to ISO standards.
–   
Risk assessment has gained importance.

There are other things that have changed, which are noticeable:

–    Throughout the work, the link is regularly made to information security, but without referring to the ISO 27K series.
–   
The BIA is still a 4-tuple, but the mandatory character has been changed to “use what you need”
–   
A distinction has been made between crisis management and incident management.
–   
There is a better explanation for strategic, tactical and operational plans in times of crisis. However, without mentioning that the choice is also important as a function of what one needs. This piece remained theoretically sharply separated.
–   
There is a beautiful table here and there with more explanation of what is meant, such as the table with specific core competences and management skills that are required by the BCM responsible, divided according to the 6 professional practices.

In the book, extensive attention was given to PP6: ‘Validation’. Practicing and validating the operation of the BC program of the organization is very important as the keystone of the cycle to its restart.

In summary, we can state that the book is important for the beginners in BCM, but also for the advanced as a reference book.

What I personally regret that lacks is a bibliography for each chapter. For further reading I have the feeling that the interested parties are somewhat abandoned. But then there is the URL of ‘The Business Continuity Institute’ where you can find more information. (www.thebci.org).

Business Continuity Management – Building an effective Incident Management Plan.

Author: Michael Blyth

In this book the author works steadily towards his goal in the first three chapters: demonstrating the importance of Incident Management Plans (IMP), in addition to a BCP.

In addition, in chapter 4 he describes the inevitable: “what if?” Is the key question for some 40 cases, each of which is explained in text form, with chapters 5 and 6 providing the promising basis for the elaboration plans and questionnaires.

Chapter 5 gives the guidelines of the plans, in which there is a principle of a triptych: a first table is filled in to get an idea of ​​which (part of) the organization is involved. An outline of entity, place, time … Then the steps to take are taken: these have been drawn up as a so called “Guideline”, not to follow slavishly, but by interpretation. The third part of the guidelines forms the framework with suitable organizations / key persons that can be contacted.

Chapter 6 provides questionnaires, one per IMP, that can be used to estimate the situation, in addition to the questions of “SAD CHALETS”, the mnemonic used by the English Police to get a view of the situation. In addition, this chapter also contains a template for a risk assessment, which can be used during the crisis, to estimate the evolution of the crisis.

The book also contains a URL with password, where you can find the English text of chapters 5 and 6 in a word document for further development tailored to your own organization.

The book is thus actually a book for doers, with, to a limited extent, an introductory theoretical exposition.

However, in terms of IMP for cybersecurity it has not been worked out enough (which I think could have been a separate piece). Other threats have been worked out. Some threats are becoming more and more relevant for affiliates in the USA and elsewhere with current climate changes. Other are more universal in nature.

The Changing Face of Strategic Crisis Mngt

Author: OECD – OECD

Governments play a crucial role in improving the resilience of populations, communities, and critical infrastructure networks; managing crises is an essential part of this. Recent crises such as industrial accidents, major floods, global pandemics, earthquakes and tsunamis have challenged political leadership and risk managers in many countries.

In four chapters, this OECD book tells us which crises exist, what their characteristics are, how the government can change its approach to changes in crises, how strategic crises can be tackled with early warning systems, what is expected of leaders in strategic crises. , and that strategic crisis capacities must be practiced.

Some key messages are:

–    Governments must develop crisis management capabilities.
–   
Emergency plans are a necessary tool with regard to past events and work fine for “routine crises”. New approach is needed for “black swan” events.
–   
National government frameworks for crisis management are needed to ensure the necessary structures and institutional frameworks to cope with both classic and new crises.
–   
Multi-disciplinary expertise is needed to gain a timely understanding of the crisis.
–   
Leadership is necessary for restoring trust. Professionalism is acquired through specialized training.
–   
Multi-stakeholders and multi-formal public, private and non-governmental organizations must be able to lead their response in order to strengthen (their) crisis response.
–   
(International) cooperation can support many functions of crisis management and must be strengthened.
–   
The development and purchase of early warning systems is becoming increasingly important.
–   
Experts’ opinions must be drawn up in plain language (without too many jargon and acronyms, etc.) and must offer an answer to opposite glances to the crises and their solutions.
–   
Concept-forming processes must be adapted to the crises, prevent overloading of information, observe time pressure and the stress levels of the people, and leave room for reflection and assessment by the strategic leader (s).
–   
The crisis management teams should be given the opportunity to put their conceptual and warning skills into practice through exercises.
–   
Strategic crisis management exercises are essential for the development and stress testing of the capacities of the leaders.
–   
Exercises should focus on the leaders and be convincing to involve the leaders in the exercises.
–   
Good exercises should seem simple, while masking their complexity. Surprise elements must be installed.
–   
Crisis management exercises must be carried out together with governments and the private sector in order to increase mutual trust.
–   
Performing international exercises is necessary to improve the handling of complex, large-scale crises across national borders.