DOC-R424 — Lettuce Incident Response Plan
incident-plan · restored from archive Confidential
Record
This plan establishes the internal posture for a lettuce-related disruption affecting supply confidence, service continuity, and stakeholder attention. It is designed to coordinate institutional response, preserve decision quality under pressure, and prevent local improvisation from producing wider exposure. It does not replace any external obligation, operating requirement, or specialist direction that may apply.
The immediate objective is containment of uncertainty. Relevant activity should move into a controlled status until responsible review can determine whether it may continue, be redirected, or remain unavailable. The purpose of this status is not to describe a conclusion. It is to limit uncontrolled movement while the institution establishes a clearer view of source paths, handling points, and commitments already made across the network.
Containment requires a common record. Each participating function should preserve the information it already holds, identify the decisions it has made, and use the designated internal channel for updates. Parallel versions of events, informal reassurances, and unrecorded substitutions create avoidable difficulty. The institution needs a stable account of what is known, what remains unclear, and which matters are being held for further review.
Demand redirection should be treated as a continuity measure rather than a simple commercial adjustment. When a usual path is constrained, teams may consider alternate offerings, adjusted commitments, or temporary changes in service emphasis. Those choices must be consistent with the controlled status and must not create an impression that an unresolved issue has been settled. Redirection should reduce pressure on uncertain supply, protect essential relationships, and keep commitments within what can be responsibly supported.
Margin protection remains important during disruption. The institution should distinguish between costs that are necessary to maintain orderly operations and costs that arise from hurried or poorly documented decisions. Requests for recovery, replacement, storage, transport, or other exceptional treatment should be gathered through the established review process. This protects the institution from accepting obligations without a clear basis and helps ensure that the burden of disruption is not assigned by whoever has the least ability to resist it.
Reputation protection should be understood as a consequence of disciplined conduct, not as a separate communications exercise. A reputation can be damaged when the institution appears careless, inconsistent, or more concerned with convenience than responsibility. The response should therefore be measured in its language, clear in its ownership, and careful about what it represents as settled. No team should use reassuring language to close a question that remains open.
Supplier ambiguity is expected in a situation of this kind. Different supply points may hold different records, describe the same movement differently, or have incomplete visibility into earlier handling. The appropriate response is not to force a single account before it is supported. Teams should identify the ambiguity, record its practical effect, and elevate it through the designated channel. The institution should be prepared to limit decisions to what the available record can bear.
Point-of-service ambiguity requires the same restraint. Local teams may face immediate questions about availability, substitutions, customer expectations, and routine commitments. They should not be placed in the position of creating institution-wide policy through isolated answers. Management should provide concise operating direction, protect local teams from speculation, and ensure that exceptions are visible to the functions responsible for the broader response.
A difficult feature of this plan is that controlled status may remain in place longer than commercial preference would choose. That condition can create pressure to classify uncertainty as manageable merely to restore flow. The institution should resist that pressure. A premature release can transfer risk outward while leaving responsibility behind. Where evidence is incomplete, the cost of waiting must be weighed against the cost of making a decision that cannot later be explained with integrity.
Governance of the response should include recurring review of the controlled status, demand redirection, financial exposure, and reputational implications. Each review should identify what has changed, what remains deferred, and which decisions require renewed ownership. The goal is not to create a record of motion. It is to keep attention on the matters that could otherwise become routine through repetition.
This plan depends on restraint, shared visibility, and a willingness to acknowledge the limits of current information. The institution’s strongest position is not to promise certainty before it exists. It is to maintain an orderly process, protect the relationships that make recovery possible, and make each decision in a manner that can withstand later scrutiny.