What is crisis management?
Crisis management is the discipline of preparing for, running through, and recovering from an event that threatens an organisation's people, operations, or standing. It is wider than communication. It covers the judgment about whether an event is a crisis at all, who takes charge once it is, what gets stopped or changed, and what has to happen afterwards so the same thing does not recur. Practitioners divide the work into three phases, and most of what determines the outcome is settled in the first one, before anything has gone wrong. This page covers the discipline itself.
What crisis management covers
Crisis management is the whole response, not the announcement at the end of it. It includes the operational call to stop a line or pull a product, the legal call about what can be said while an investigation is open, the employment call about a named individual, and the communication call about who hears what and in which order. Communication is one workstream inside the discipline. Collapsing the two is the most common structural mistake, because it puts a statement in front of a fix, and people notice that order.
The Institute for Public Relations on crisis management and communications is the sensible starting point for the research behind the field. It is written by academics rather than by firms selling retainers, and it sets out the phase structure that most working plans are built on.
The three phases of crisis management
The standard division is pre-crisis, crisis response, and post-crisis. Each phase has a different owner, a different clock, and a different definition of success.
| Phase | What the work is | What success looks like |
|---|---|---|
| Pre-crisis | Identifying what could go wrong, fixing what can be fixed, writing the plan, naming the team, rehearsing it | The event does not happen, or it happens and the team already knows its first six moves |
| Crisis response | Detecting, grading severity, activating, containing, notifying the people affected, speaking publicly | Accurate information reaches the right people faster than speculation does |
| Post-crisis | Remediation, follow-through on commitments, honest review, correcting the published record | The stated fix is actually in place, and the organisation can show it |
An older four-stage vocabulary from Steven Fink's 1986 book on crisis management is still in circulation: prodromal, acute, chronic, resolution. It describes the same arc from the event's point of view rather than the organisation's. Either set of labels works. What matters is that the phases are not equally weighted. Pre-crisis work is cheap and decisive. Crisis-response work is expensive and constrained by whatever was decided before it started.
Incident severity and when a plan activates
Many organisations never define severity in advance, then spend the first two hours of a real event arguing about whether it counts. A severity scale removes that argument. Three or four tiers is enough.
- Routine. Handled by the team that owns it, logged, no escalation.
- Elevated. A named manager is informed, monitoring begins, communications is on standby.
- Crisis. The plan activates, the response team convenes, and normal approval routes give way to the ones the plan names.
- Severe. Everything in tier three, plus the board, external counsel, and any regulator carrying a notification deadline.
The tiers matter less than the trigger written beside each of them. "Any incident involving injury", "any confirmed loss of customer records", "any contact from a regulator", "any coverage in a national outlet": those are testable at three in the morning by whoever happens to be on duty. "Significant reputational impact" is not, and a threshold nobody can apply is the same as no threshold at all.
Who sits on the crisis response team
A working response team is small, and named by role rather than by seniority.
- A decision lead who can commit the organisation without leaving the room to find someone else.
- An operations lead who owns the actual fix.
- A communications lead who owns every outbound word.
- Legal, present to say what is constrained rather than to say no to everything.
- Human resources, whenever an employee is involved, which is more often than plans assume.
- A log keeper, whose only job is recording what was known and decided at what time. This role gets skipped constantly, and it is the one people wish they had when the review starts.
Every name needs a deputy, because events do not check calendars, and everyone on the list needs to have read the plan before the day it is used.
What the crisis response phase actually looks like
The first hour is triage: confirm what is true, grade the severity, activate, and stop the bleeding. Public communication opens with a holding statement, a short pre-approved acknowledgement that says what is known, what is not yet known, and when the next update will come. That mechanism belongs to the plan, and what goes in a crisis communication plan covers how one is written and cleared in advance.
Two failures repeat at this stage. The first is speculating about cause before it is established, which creates a second story when the speculation turns out to be wrong. The second is defending intent before acknowledging harm, which reads as self-interest to everyone except the people who wrote it. Professional codes are direct about the standard: the PRSA Code of Ethics sets honesty and disclosure of information among its core provisions, and the working version of that is simple. Do not say anything in hour one that you will have to withdraw in week two.
The recovery phase, and what it is for
Recovery runs long after the event stops being news, and it is where reputation is either rebuilt or not. It has three parts: finishing the remediation that was promised, reviewing the response honestly enough that something changes, and dealing with the published record.
That last part is where crisis management meets search. Coverage of an event is indexed, and it keeps ranking for the organisation's name after the operational problem is closed. Time alone does not remove it. What changes a search result is the existence of newer, better material answering the same query, which is an ordinary publishing and technical problem rather than a trick. Google's own SEO starter guide is worth reading after a crisis for exactly that reason: an organisation's own account of what happened competes on the same terms as everybody else's account of it.
What crisis management does not do
It does not make an accurate account of a real failure disappear. It does not shorten a regulatory process. It does not substitute for the fix, and an organisation that runs the communication without the remediation usually finishes with two problems rather than one.
What it does is remove the delay, the contradiction, and the silence that turn a bad event into a long one. Much of the damage a plan prevents is self-inflicted and happens inside the first day. If the live question is what is already published about an organisation rather than what might happen next, that is a narrower and more measurable question, and it is the first thing a reputation audit establishes.
Questions about what is crisis management?
What is crisis management?
The discipline of preparing for, running through, and recovering from an event that threatens an organisation's people, operations, or standing. It covers the operational fix, the legal position, and the communication, not just the statement.
What are the stages of crisis management?
The standard division is three: pre-crisis, which is prevention, planning and rehearsal; crisis response, which is detection, activation, containment and notification; and post-crisis, which is remediation, review, and correcting the record. An older four-stage vocabulary calls the same arc prodromal, acute, chronic and resolution.
Is crisis management the same as crisis communication?
No. Crisis communication is one workstream inside crisis management. It decides what is said and by whom. Crisis management also covers the operational decisions, the legal position, and the remediation that the communication is supposed to describe.
How long does a crisis last?
Operationally, as long as the underlying problem is unresolved. In terms of what a search for the organisation returns, considerably longer, because coverage stays indexed. Those are two different clocks and plans that only track the first one tend to declare victory early.