Hazard Vulnerability & Business Impact Analysis Tool

---

A Hazard Vulnerability Analysis (HVA) is a systematic assessment conducted to identify and evaluate potential hazards and their associated vulnerabilities within a particular area, organization, or system. It is commonly used in disaster management, emergency planning, and risk assessment processes.

The purpose of conducting an HVA is to understand the potential risks and vulnerabilities that may be present, in order to develop effective strategies and plans for mitigation, preparedness, response, and recovery. It involves analyzing various hazards, such as natural disasters (e.g., earthquakes, floods, hurricanes), technological hazards (e.g., chemical spills, power outages), or human-caused hazards (e.g., terrorism, cyberattacks).

A Business Impact Analysis (BIA) is a systematic process that assesses and evaluates the potential effects of a disruption or incident on various aspects of a business. It helps organizations understand the critical functions, processes, and resources that are essential for their operations and identifies the potential consequences and impacts of disruptions to those functions.

The primary purpose of conducting a BIA is to determine the potential financial, operational, legal, reputational, and other impacts that may arise from disruptions. By understanding the potential consequences, organizations can prioritize their resources, develop effective business continuity plans, and allocate resources for risk mitigation and recovery.

Technical: Technical hazards refer to hazards that arise from the failure or malfunction of technological systems, equipment, or processes. These hazards are typically associated with industrial activities, infrastructure, and technological systems, and can have various impacts on human health, safety, and the environment.

Natural: Natural hazards are events or phenomena that occur naturally in the environment and have the potential to cause harm, destruction, or loss of life. These hazards are typically driven by natural processes and can be unpredictable in their occurrence.

Human-Caused: Human-caused hazards, also known as anthropogenic hazards, are hazards that arise as a result of human activities or actions. Unlike natural hazards, which occur naturally in the environment, human-caused hazards are driven by human behavior, technological systems, or societal factors.

Hazardous Materials: Hazardous materials hazards refer to the risks and dangers associated with substances or materials that have the potential to cause harm to human health, the environment, or property. These materials, often referred to as hazardous substances or chemicals, possess properties that make them potentially toxic, flammable, explosive, corrosive, or reactive under certain conditions.

Emerging Infectious Disease: Emerging infectious disease hazards refer to the risks posed by newly identified or re-emerging infectious diseases that have the potential to cause significant health impacts in human populations. These diseases are often characterized by their novelty, rapid spread, and ability to cause severe illness.

Organizational Functions: Organizational functions refer to the essential activities and services that an organization must perform to maintain its critical operations during and after a disruptive event. These functions ensure the continued delivery of key products, services, and support functions that are necessary for the organization to fulfill its mission and meet the needs of its stakeholders. 

Essential Functions: Essential functions (EFs) refer to the critical activities and services that must be performed by an organization to ensure its continued operation during and after a disruptive event. These functions are vital for the organization to fulfill its mission, provide essential services, and meet the needs of its stakeholders. Essential Functions are Urgent, Important, Cannot be delayed, Something no one else does. EFs are supported by Essential Support Activities (ESAs).

Dependencies: Dependencies refer to the reliance of one function, process, system, or organization on another to perform its activities or deliver its services. In other words, it is the recognition that certain functions or resources are necessary for the successful execution of other functions. Dependencies can be internal, within the same organization, or external, involving relationships with external entities such as suppliers, partners, or stakeholders. For example, a dependency may exist between a hospital and the Fuel Oil company that provides fuel for electricity generators. 

Interdependencies: Interdependencies refer to the reciprocal relationships and interactions between multiple functions, processes, systems, or organizations. They involve the understanding that disruptions or failures in one area can have cascading effects on other interconnected functions or entities. Interdependencies can be complex, involving multiple layers and relationships within an organization or across different organizations. For example, an interdependency may exist between the community and a Safety Net hospital. 

This score corresponds to the statistical likelihood of occurrence of a certain event within an exposure period in time and space.

This score corresponds to the qualitative likelihood of occurrence given the planner's experience, judgment, and other organizational risk factors outside of the probability of occurrence within an exposure period in time and space.

This outcome represents the healthcare organization's risk (as a percentage) based on quantitative and qualitative inputs. The higher the percentage, the higher the risk to hazards and business continuity.

The calculation takes into account a comprehensive set of social vulnerability indicators, as well as the facility's staffing vulnerability percentage, which reflects the number of unfilled positions. This holistic approach enables us to assess and address additional risk vulnerabilities in our planning efforts, particularly with regard to the impact on vulnerable populations during emergencies or operational disruptions.