Crisis management is the process of preparing for, responding to, and recovering from an event that threatens an organization's operations or reputation. Its key principles are preparation, a trained cross-functional team, clear communication, operational continuity, and learning from every incident. PwC's 2023 Global Crisis and Resilience Survey found that 9 in 10 organizations had experienced multiple major disruptions.
Last updated October 30, 2026.
This guide covers the operational discipline: planning, the response team, continuity and recovery. How each type of crisis differs in speed is covered in six common types of business crises, and the communications side, including statements, media relations and stakeholder outreach, is covered in 5W's guide to crisis PR.
On this page:
- What are the key principles of crisis management?
- What are the foundations of crisis management?
- How do you create a crisis management plan?
- How does preventive positioning reduce crisis damage?
- Who belongs on a crisis management team?
- How should crisis communication work?
- What are the most common crisis management mistakes?
- What challenges derail crisis communication?
- How do you maintain operations during a crisis?
- How do you measure response effectiveness?
- What should happen after a crisis?
- What should an organization do first?
- Frequently asked questions
What are the key principles of crisis management?
The five key principles of crisis management are preparation, a trained cross-functional team, clear communication, operational continuity, and learning from every incident. Each principle answers a different failure point, and the table below shows where each one is covered.
| Principle | What it requires | Failure it prevents |
|---|---|---|
| Preparation | A written plan, a risk assessment, and an annual review | Improvising decisions while the story is spreading |
| A trained team | Named roles, backups, and regular simulations | Confusion over who decides and who speaks |
| Clear communication | Designated spokespersons and verified facts | Conflicting statements and an information vacuum |
| Operational continuity | Backup channels, alternate work arrangements, protected records | Core functions stopping during the response |
| Learning and recovery | A debrief, visible follow-through, and plan updates | Repeating the same mistake in the next incident |
What are the foundations of crisis management?
The foundation of crisis management is a structured approach built on three pillars: preparation, response, and recovery. Crisis management is a systematic way of dealing with unexpected events that threaten to harm an organization, its stakeholders, or the public.
A crisis can take many forms, from natural disasters to cybersecurity breaches, product failures, or reputation issues. Each type needs specific response tactics, but all benefit from the same structure. Crisis management is not only about responding to emergencies. It is about building a framework that allows quick, effective action while operations stay stable.
Preparation matters because confidence and readiness are different things. In the same PwC survey, 70% of business leaders said they were confident they could recover from disruptions, yet many organizations lacked the foundational elements of resilience.
Quick definition: business continuity plan
A business continuity plan lists the functions an organization must keep running during a disruption, the people responsible for each, and the backup arrangements that apply. It covers operations, while a crisis communications plan covers what the organization says publicly.
How do you create an effective crisis management plan?
An effective crisis management plan starts with a risk assessment and then sets out procedures, responsibilities, and communication protocols for each scenario. A comprehensive crisis management plan is the cornerstone of organizational preparedness. For the full list of what a communications plan should include, see 5W's crisis communications plan guide.
The risk assessment evaluates threats specific to the organization's industry, location, and operations, including internal and external factors that could trigger a crisis. It weighs the likelihood and potential impact of each identified risk, so the plan spends the most detail on the scenarios that matter most.
The key components of a crisis management plan are:
- A clear command structure and decision-making protocols
- Detailed communication procedures for each stakeholder group
- Resource allocation guidelines
- Step-by-step response procedures for different scenarios
- Contact information for key personnel and external resources
- Regular testing and updating protocols
Organizations should review and update their crisis management plans at least annually, so the plan reflects new threats and changes in the business.
How does preventive positioning reduce crisis damage?
Preventive positioning reduces crisis damage by building a strong, verifiable reputation before an incident, so stakeholders extend the benefit of the doubt when something goes wrong. Organizations that maintain a consistent base of positive content about their brand give audiences a reason not to assume the worst. 5W's online reputation management services build and maintain that base ahead of any incident.
Preventive positioning rests on a few concrete practices:
- Publish regular, substantive content about the organization's work, so search results and AI-generated answers about the brand reflect more than a single incident.
- Maintain an active, professionally managed presence across the platforms stakeholders actually use, rather than relying on a single channel.
- Limit social media account access to a small number of trained people, since an unauthorized or careless post from a shared account is a common, avoidable trigger for a crisis.
- Set and publish a realistic response-time standard for customer inquiries, then meet it consistently, since a known and reliable response window reduces the chance that silence gets misread as evasion.
None of this replaces a crisis response plan. It changes the starting conditions the plan has to work with: an organization with an established, positive public record recovers faster than one whose crisis is the first substantial thing anyone finds about it.
Who belongs on a crisis management team?
A crisis management team belongs to a cross-functional group with representatives from every function a crisis could touch. The team's effectiveness decides how well any plan is executed, so each member needs a defined role and a designated backup.
The core crisis team should include representatives from:
- Executive leadership
- Communications and public relations
- Legal
- Operations management
- Human resources
- Information technology
- Security
Regular training sessions and simulations help team members understand their duties and practice the response before it counts. For a structured approach to building that training program, see the training and testing section of 5W's crisis communications plan guide.
How should crisis communication work?
Crisis communication works best when one coordinated strategy sends consistent, verified messages to every stakeholder group through the channels each group actually uses. Internal communication matters as much as external messaging, because employees need clear direction and regular updates to maintain productivity and morale.
Essential elements of crisis communication include:
- Designated spokespersons for different stakeholder groups
- Pre-approved message templates for various scenarios
- Regular stakeholder updates through multiple channels
- Monitoring and response protocols for social media
- Internal communication procedures
- Feedback mechanisms for stakeholder concerns
Public companies also face a legal deadline. The SEC's 2023 cybersecurity rules require a Form 8-K filing within four business days of determining that a cybersecurity incident is material, according to the SEC's adoption announcement. A plan should settle in advance who makes the materiality determination and who drafts the public statement.
What are the most common crisis management mistakes?
The most common crisis management mistakes are a delayed response, a lack of transparency, and inconsistent messaging across spokespersons. A delayed response leaves an information vacuum that speculation fills, hiding or downplaying a serious issue tends to backfire because trust once questioned is slow to rebuild, and conflicting messages from different spokespersons compound both problems.
A fourth mistake is an ethical one: responding in a way that is convenient in the moment instead of one that matches what the organization stands for. A rushed, over-lawyered response that does not reflect the organization's values reads as evasive, so the starting question is what the organization is willing and able to do, not what it is supposed to say. The crisis PR guide covers these mistakes and the first-response sequence in more detail.
What challenges derail crisis communication?
Four predictable obstacles derail crisis communication even when a plan is well designed: poor visibility, too much or too little information, severed channels, and the unpredictability of the next crisis. Recognizing them in advance lets teams build safeguards into planning rather than discovering the gaps under pressure.
Lack of visibility
Lack of visibility means a team cannot see who is engaging with its message. Reaching a target audience depends on more than message templates or updated contact lists. It depends on putting monitoring technology in place before a crisis occurs, so real-time tracking shows who is responding and the strategy can adjust.
Information overload and information scarcity
Crises often produce a flood of information from many directions at once, making it hard to separate what is relevant from noise. The opposite problem, too little verified information, is just as damaging, because teams must communicate without a clear picture. Both point to the same need: reliable systems for gathering, filtering, and verifying information quickly.
Severed communication paths and channels
A crisis can disrupt the channels an organization relies on to reach stakeholders, from internal systems going down to key spokespeople being unreachable. Backup channels identified ahead of time keep stakeholders reachable when primary paths fail.
The unpredictability of the next crisis
No two crises unfold the same way, so rigid, pre-scripted plans can break down when reality does not match the template. A flexible approach, often supported by outside PR expertise that has handled similar situations, lets a team recalibrate quickly instead of following a plan that no longer fits.
How do you maintain operations during a crisis?
Maintaining operations during a crisis means identifying critical functions in advance and arranging how each continues if normal conditions fail. Operational continuity planning keeps essential work running during and after a crisis event, so the organization can keep serving customers while the response proceeds.
Key considerations for maintaining operations include:
- Identifying critical business functions
- Establishing alternative work arrangements
- Securing supply chain resilience
- Protecting vital records and data
- Managing financial resources during crisis periods
- Maintaining customer service levels
How do you measure response effectiveness?
Response effectiveness is measured by tracking a consistent set of reputation metrics on a regular cadence, so a real incident can be compared against a baseline. Ongoing measurement, not only a post-crisis review, keeps an organization aware of its reputational health between crises.
Metrics worth tracking include:
- Net Promoter Score (NPS) trends over time
- Social sentiment across brand mentions
- Media coverage tone, not just volume
- Employee satisfaction scores, since internal sentiment often shifts before external sentiment does
- Customer feedback themes, tracked for recurring complaints rather than one-off incidents
A baseline is what makes these numbers useful. A sentiment score or NPS reading taken for the first time during an active crisis has no point of comparison, while a team already tracking these metrics monthly can see how much ground a crisis cost and how much a response recovered.
What should happen after a crisis?
After a crisis, the organization should assess the response, document what it learned, and update its plan and procedures. This recovery phase is where organizational learning happens, and for real-world examples of what effective recovery looks like, see five successful reputation recovery turnarounds.
The post-crisis review should analyze:
- Response timing and effectiveness
- Communication success rates
- Resource allocation efficiency
- Team performance and coordination
- Stakeholder feedback
- Financial impact and recovery measures
Lessons learned should be documented and built into the next version of the plan. Any policy change, leadership shift, or safeguard promised during the crisis should be visibly delivered and reported back on.
What should an organization do first?
An organization without a crisis plan should start with six steps, in this order:
- Run a risk assessment and rank the scenarios by likelihood and impact.
- Write the crisis management plan, including the command structure and approval path.
- Name a cross-functional crisis team with a backup for every role.
- Set spokesperson rules and prepare holding statement templates.
- Identify critical business functions and backup channels.
- Run a crisis simulation, then record what failed and fix it.
Crisis management is an ongoing cycle of preparation, response, and review, so the plan should be rewritten after every simulation and every real incident.
Frequently asked questions
What is the single most important crisis management principle?
Preparation before a crisis happens is the most important principle, because every other principle depends on a plan, a trained team, and agreed channels already being in place when an incident starts.
How often should a crisis management plan be updated?
A crisis management plan should be reviewed and updated at least annually, and again after every simulation or real incident, so it stays current with new threats and changes in the business.
What are the most common crisis management mistakes?
A delayed response, a lack of transparency, inconsistent messaging across spokespersons, and a response that does not match what the organization stands for. The common-mistakes section above explains why each one prolongs a reputation problem.
What is the difference between crisis management and crisis PR?
Crisis management is the broader operational discipline (continuity, team structure, risk assessment), while 5W's crisis PR guide covers the communications-specific execution: the messaging, media relations, and stakeholder outreach that happens once a plan activates.
Who should lead a crisis management team?
A senior executive should lead the team and hold final decision authority, with communications, legal, operations, and HR each owning a defined part of the response. The plan should name a backup for the leader as well.
