Published 14 October 2026 · Source-linked research prepared with AI assistance. Proposed services require an agreed scope and qualified delivery team.
A useful first question
Which facilities have the most consequential unresolved readiness gaps—and who owns the next action?
A municipal portfolio can include fire stations, administrative buildings, libraries, depots and water facilities. Each faces different hazards, and each supports a different service. An address list is a useful start; it does not reveal whether backup power was tested, whether alternate access survives the same flood, or whether the person named in a response plan still owns that job.
Who the study serves
Facilities directors, public-sector risk managers, emergency-management teams and operators responsible for multiple buildings.
Before quoting, confirm a budget owner, the decision the work must inform and the person who can approve data access. A funding announcement or a sector-wide problem is not a substitute for those three facts.
Define the included work
Begin with 10–25 facilities for an inventory and evidence screen, then select one to three priority sites for deeper review. This is not 25 full engineering assessments. Licensed design, code inspection, security assessments and equipment testing are separate specialist work packages.
The statement of work names the included locations, available records, interviews, specialist review and deliverables. Equipment, installation, travel and continuing monitoring are separately identified where needed. A proposed planning duration is not a promise of procurement timing.
Records needed to begin
- A bounded list of sites with addresses or coordinates and a responsible owner
- Essential functions, minimum service levels and tolerated interruptions
- Existing hazard plans, inspection summaries and exercise records
- Power, water, cooling, communications and access dependencies
- Approved access to relevant records; no patient or resident data
Use a non-confidential description for the initial inquiry. Detailed operating records should move through an agreed access and retention process after the scope is established.
What you receive
- A facility inventory with location uncertainty and ownership resolved
- A source-linked exposure profile, separate from readiness
- Readiness findings with evidence, review date and missing items
- Critical-gap register with action owners and proposed review dates
- A prioritized review workshop and an exportable baseline
Each finding identifies its source and limitation. Missing information becomes a visible follow-up item, rather than an inferred passing answer. Recommendations distinguish actions supported by the existing record from questions requiring field evidence.
Delivery and acceptance
The owner confirms every included facility and essential function. Every scored control has a criterion and traceable evidence or stays unknown. The final meeting resolves ownership of the next actions. We do not require a high score for the study to be accepted.
- Agree the decision, scope and acceptance criteria.
- Reconcile the supplied records and identify missing evidence.
- Review the findings with the relevant technical owner.
- Deliver the baseline, action register and next-step recommendation.
Target delivery: 2–4 weeks after complete records. Record access, site work and specialist availability can change the schedule.
What comes next
Maintain the facility record, revisit expired evidence, and reassess controls when equipment, procedures or operating requirements change.
Ask for a fixed-fee scope after the initial fit review. Proposed services are subject to delivery capacity, a named technical reviewer and written terms. The inquiry is a request to scope work; no payment or contract is created here.
Sources & further reading
- NIST — Community Resilience Planning Guide A Playbook ↗Guide and current planning resources. Recovery targets tied to community functions and supporting infrastructure.
- GSA Safeguarding Assets ↗Facility, equipment, communications and transport dependencies as mission risks.
- CISA Resilience Services ↗Existing voluntary security and resilience assessments and Infrastructure Survey Tool.
- CMS — Core Emergency Preparedness Rule Elements ↗Current guidance page. Four broad preparedness elements; specific provider obligations require current detailed guidance.
- Exposure Watch — Public product website ↗Reviewed 14 October 2026. Facility monitoring, source-cited observations, evidence history, and current health-care positioning. Public claims, not a backend audit.