What are the requirements related to the hazard vulnerability analysis (HVA) for organizations and off-site facilities?

Any examples are for illustrative purposes only.  

Organizations are expected to have a hazard vulnerability analysis (HVA) which identify potential emergencies, for locations within the organization/facility and the community.  The potential emergencies could affect demand for services and/or the ability to provide services.  The HVA should take into account the likelihood of those events occurring and the consequences of those events.  The HVA is documented and reviewed annually.   
 
Ideally, the HVA should be adjusted each year based on real events and exercises conducted.  For instance, an organization with frequent severe winter weather (snowstorms or blizzards) on their HVA, due to activation of the Emergency Operations Plan (EOP) most winters, should improve their EM plans as they learn lessons and improve their response/recovery for severe winter weather.  Therefore, as their plans and response improves, the risk rating of severe winter weather should decrease, allowing other risks and vulnerabilities to become a focus. 
 
The need for site-unique hazard vulnerability analysis (HVA) depends upon whether the off-site facility has different internal or external circumstances that would affect its ability to manage emergencies. If a site is in close proximity to the main facility, and participates in the main facility's emergency operations plan, then the organization may combine the off-site HVA with the main facility's HVA; the off-site facility must be identified. If the off-site facility has its own unique vulnerabilities in the context of its ability to provide services, then those vulnerabilities are to be assessed and are required to perform an HVA for that site. 
 
Although it is not uncommon for a unique hazard vulnerability to be identified for a remote facility, often the emergency operation plan is simply a documented process for temporarily stopping services since the off-site facility does not provide emergency services or any other care that cannot be deferred. 
 
Reference EM.01.01.01 EP 2, EM.03.01.01 EP 1