Crisis management

Crisis management is built on a structured approach that spans three phases: pre-crisis (prevention and preparation), crisis response (immediate action), and post-crisis (recovery and learning). A widely used framework is the crisis management lifecycle, which includes signal detection, preparation, containment, recovery, and learning. Effective response relies on a designated crisis team, clear communication channels, and predefined protocols. The situational crisis communication theory (SCCT) by Timothy Coombs emphasizes matching response strategies to the level of crisis responsibility, from denial to apology.¹ Organizations often adopt a command and control structure, with a single incident commander to coordinate actions, ensuring rapid decision-making and accountability.

Communication is the most visible aspect of crisis management, and a failure to communicate effectively can escalate a crisis. The golden hour—the first hour after an incident—is critical for establishing credibility and controlling the narrative.² Key principles include transparency, empathy, and consistency. The CERC (Crisis and Emergency Risk Communication) model, developed by the U.S. Centers for Disease Control and Prevention, outlines six principles: be first, be right, be credible, express empathy, promote action, and show respect.³ Organizations must also manage internal communication to ensure employees are informed and aligned, preventing rumors and misinformation. Social media has become a double-edged sword: it allows rapid dissemination of information but also amplifies unverified claims, requiring real-time monitoring and response.

Historical crises offer valuable lessons. The Tylenol cyanide crisis in 1982 is a benchmark for effective response: Johnson & Johnson recalled 31 million bottles, cooperated with authorities, and introduced tamper-evident packaging, restoring public trust.⁴ In contrast, the Exxon Valdez oil spill in 1989 is criticized for a slow, defensive response that damaged the company's reputation for years. The Fukushima Daiichi nuclear disaster in 2011 highlighted the importance of preparing for low-probability, high-impact events, as the plant's defenses were overwhelmed by a tsunami. More recently, the COVID-19 pandemic demonstrated the need for adaptive crisis management, with organizations shifting to remote work and re-evaluating supply chains.

Beyond the headlines, crisis management involves niche but critical elements. Crisis informatics studies how social media and crowdsourced data are used during disasters, enabling faster situational awareness. Business continuity planning focuses on maintaining essential functions, often through redundant systems and off-site backups. Reputational repair strategies, such as mortification (apology) and compensation, are studied in corporate communication. A lesser-known figure is Peter Drucker, who, though not a crisis specialist, influenced management thinking on adaptability. The Bhopal gas tragedy in 1984 is a case of inadequate crisis communication and safety culture, leading to changes in international chemical safety regulations. Additionally, crisis simulation exercises are used to train teams, but many organizations neglect them due to cost, leaving them unprepared.

Crisis management lifecycle

A model describing the stages of a crisis: detection, preparation, containment, recovery, and learning.

Situational crisis communication theory (SCCT)

A theory that matches crisis response strategies to the level of responsibility attributed to the organization.

Crisis informatics

The study of how information and communication technologies are used during crises and disasters.

Business continuity planning

The process of creating systems to prevent and recover from potential threats to an organization.