Although typically addressed through conventional emergency response plans, this
element also requires that a process exist for actually identifying the potential
emergencies, in addition to planning and mitigating them. Emergency incidents include
those that may not be regulated, but may still cause significant impact as defined by the
organization.