In times of crisis, the quality of crisis management determines operational capability and long-term success. We support you in developing and implementing a comprehensive crisis management system that optimally prepares your company for potential crises and enables structured, effective management.
Our clients trust our expertise in digital transformation, compliance, and risk management
30 Minutes • Non-binding • Immediately available
Or contact us directly:










A key success factor in crisis management is preparation for the unexpected. Crisis management structures should be flexible enough to respond to various scenarios rather than focusing on managing specific, predictable events. Particularly important is regular practice of crisis management processes under realistic conditions – only this way can weaknesses be identified and addressed before an actual emergency occurs.
Years of Experience
Employees
Projects
Our approach to developing and implementing crisis management systems follows a structured yet flexible methodology that we adapt to your specific requirements and business circumstances.
Assessment of existing crisis management capabilities and structures
Development of a customized crisis management framework and governance model
Building and training of crisis teams and responsible persons
Creation of crisis management documentation and tools
Validation through exercises and continuous improvement of the crisis management system
"The effectiveness of a crisis management system only becomes apparent in an actual emergency – which makes it all the more important to continuously test and improve crisis readiness through regular exercises and realistic simulations. Successful organizations are not characterized by not experiencing crises, but by their ability to manage them quickly and effectively and emerge stronger from them."

Head of Information Security, Cyber Security
Expertise & Experience:
10+ years of experience, CISA, CISM, Lead Auditor, DORA, NIS2, BCM, Cyber and Information Security
We offer you tailored solutions for your digital transformation
Development and implementation of crisis management governance structures and processes for effective crisis prevention and management.
Building and training of effective crisis staffs and crisis teams with clear structures, roles, and responsibilities.
Development and implementation of crisis management plans, playbooks, and checklists for various crisis scenarios.
Development and implementation of effective crisis communication strategies and processes for internal and external stakeholders.
Planning and conducting crisis management exercises, simulations, and workshops to validate and improve crisis readiness.
Conducting training and workshops on crisis management topics for executives, crisis teams, and employees.
Choose the area that fits your requirements
A systematic Business Impact Analysis (BIA) is the foundation of every effective Business Continuity strategy. Using our structured, industry-proven methodology, we identify and assess your critical business processes and functions, their dependencies, and resource requirements — providing a solid basis for targeted and economically sound continuity measures.
The ability to respond quickly, in a coordinated manner, and effectively in emergency situations is critical for limiting damage and maintaining critical business functions. Our Emergency Response approach supports organizations in developing solid emergency response capabilities based on best practices and proven methods.
Transitioning Business Continuity Management from a project phase into steady-state operations is the critical step towards lasting organizational resilience. We support you in structurally embedding BCM processes into your line organization — with defined roles, training programmes, regular exercises and measurable KPIs aligned to ISO 22301 and BSI 200-4.
Develop tailored recovery strategies that provide maximum resilience for your critical business processes. Our experts support you in selecting and implementing the right recovery options that enable optimal recovery times at reasonable costs.
Crisis management encompasses all measures for preparing, responding to, and recovering from organizational crises. According to ISO 22361, it focuses on strategic leadership and decision-making under extreme pressure. Organizations need crisis management because unforeseen events such as cyberattacks, supply chain disruptions, or reputational crises can become existential threats without structured processes. A systematic crisis management framework reduces response times, minimizes damage, and ensures organizational capacity to act.
An effective crisis team consists of an experienced crisis leader plus representatives from communications, IT, legal, HR, and operations. Per BSI Standard 200–4 and ISO 22361, the crisis team must have clear decision-making authority, defined escalation levels, and deputy arrangements. Regular crisis exercises, a reliable alerting chain, and a dedicated crisis room with redundant communication infrastructure are essential for operational readiness.
A crisis management plan includes activation criteria for various crisis scenarios, the crisis team organization with roles and authorities, escalation procedures, communication templates for internal and external stakeholders, and scenario-specific action guidelines. Contact lists, resource overviews, and checklists complement the plan. It must be regularly validated through exercises and updated to reflect current threats and organizational changes.
Crisis communication requires speed, transparency, and consistency. The initial response shapes public perception of the entire crisis management effort. Prepare key messages, talking points, and pre-approved initial statements. Internally, all employees must be informed promptly. Externally, you need a trained spokesperson and coordinated channels for media, customers, and authorities. Social media monitoring is indispensable for real-time situational awareness.
ISO
22361 focuses on strategic crisis leadership, decision-making, and crisis communication. BSI Standard 200–4 is broader, covering the entire Business Continuity Management lifecycle including emergency management and crisis management. ISO
22361 complements BSI 200–4 as a specialized guide for crisis team operations. Organizations should combine both standards to cover strategic and operational levels comprehensively.
Integration is achieved through shared governance structures, harmonized escalation paths, and aligned plans. The Business Impact Analysis forms the common foundation. Clear handover points between Incident Management, BCM, and crisis management prevent gaps. Joint exercises and a unified early warning system ensure both disciplines work together seamlessly to build organizational resilience.
ADVISORI guides you from assessing your existing crisis management maturity through ISO
22361 and BSI 200–4 aligned design to full implementation. We establish your crisis team, develop tailored crisis plans and playbooks, train your teams through realistic crisis exercises, and integrate crisis management into your BCM system. As experienced consultants, we bring cross-industry best practices and field-tested frameworks to your organization.
Discover how we support companies in their digital transformation
Klöckner & Co
Digital Transformation in Steel Trading

Siemens
Smart Manufacturing Solutions for Maximum Value Creation

Festo
Intelligent Networking for Future-Proof Production Systems

Bosch
AI Process Optimization for Improved Production Efficiency

Is your organization ready for the next step into the digital future? Contact us for a personal consultation.
Our clients trust our expertise in digital transformation, compliance, and risk management
Schedule a strategic consultation with our experts now
30 Minutes • Non-binding • Immediately available
Direct hotline for decision-makers
Strategic inquiries via email
For complex inquiries or if you want to provide specific information in advance
Discover our latest articles, expert knowledge and practical guides about Crisis Management (BCM)

Cyber insurance covers financial losses from cyberattacks, data breaches, and IT outages. This guide explains what insurers require in 2026, coverage types, costs by company size, and how to choose the right policy — including how ISO 27001 certification reduces premiums.

Over 30,000 CVEs are published annually. Effective vulnerability management prioritizes what matters most to your organization and remediates before attackers exploit. This guide covers the full lifecycle: discovery, scanning, risk-based prioritization, remediation, and compliance.

The human layer remains the weakest link in cybersecurity. This guide covers how to build an effective security awareness program, run phishing simulations, design role-based training, and measure whether your program actually reduces risk — with benchmarks and KPIs.

Penetration testing reveals vulnerabilities before attackers exploit them. This comprehensive guide covers black box, grey box, and white box methods, the 5-phase pentest process, provider selection criteria, DORA TLPT requirements, and cost benchmarks for every test type.

Business continuity software automates BIA, plan management, exercise tracking, and incident response. This comparison reviews leading BCM platforms, selection criteria, DORA alignment, and which solution fits organizations at different maturity levels.

SOC 2 and ISO 27001 are the most requested security certifications. This practical comparison covers scope, cost, timeline, customer expectations, regulatory alignment, and the 70% control overlap — helping you decide which to pursue (or whether you need both).