Prepared. Capable. Resilient.
In times of crisis, the quality of crisis management determines operational capability and long-term success.
Our approach to crisis management combines proven methodology with practical implementability. We support you in developing a comprehensive crisis management system that equally considers prevention, preparation, response, and follow-up and is optimally integrated into your corporate culture and structures.
Our service offering in crisis management includes the design, implementation, and optimization of all components of a comprehensive crisis management system.
6 service modules
Bookable individually or as an end-to-end programme.
Development and implementation of crisis management governance structures and processes for effective crisis prevention and management.
Building and training of effective crisis staffs and crisis teams with clear structures, roles, and responsibilities.
Development and implementation of crisis management plans, playbooks, and checklists for various crisis scenarios.
Development and implementation of effective crisis communication strategies and processes for internal and external stakeholders.
Planning and conducting crisis management exercises, simulations, and workshops to validate and improve crisis readiness.
Conducting training and workshops on crisis management topics for executives, crisis teams, and employees.
5 phases
Our approach to developing and implementing crisis management systems follows a structured yet flexible methodology that we adapt to your specific requirements and business circumstances.
Your contact
Sarah Richter
Head of Information Security, Cyber Security
10+ years of experience, CISA, CISM, Lead Auditor, DORA, NIS2, BCM, Cyber and Information Security
The effectiveness of a crisis management system only becomes apparent in an actual emergency – which makes it all the more important to continuously test and improve crisis readiness through regular exercises and realistic simulations. Successful organizations are not characterized by not experiencing crises, but by their ability to manage them quickly and effectively and emerge stronger from them.
A key success factor in crisis management is preparation for the unexpected. Crisis management structures should be flexible enough to respond to various scenarios rather than focusing on managing specific, predictable events. Particularly important is regular practice of crisis management processes under realistic conditions – only this way can weaknesses be identified and addressed before an actual emergency occurs.
7 QUESTIONS, BRIEFLY ANSWERED
Crisis management encompasses all measures for preparing, responding to, and recovering from organizational crises. According to ISO 22361, it focuses on strategic leadership and decision-making under extreme pressure. Organizations need crisis management because unforeseen events such as cyberattacks, supply chain disruptions, or reputational crises can become existential threats without structured processes. A systematic crisis management framework reduces response times, minimizes damage, and ensures organizational capacity to act.
An effective crisis team consists of an experienced crisis leader plus representatives from communications, IT, legal, HR, and operations. Per BSI Standard 200‑4 and ISO 22361, the crisis team must have clear decision-making authority, defined escalation levels, and deputy arrangements. Regular crisis exercises, a reliable alerting chain, and a dedicated crisis room with redundant communication infrastructure are essential for operational readiness.
A crisis management plan includes activation criteria for various crisis scenarios, the crisis team organization with roles and authorities, escalation procedures, communication templates for internal and external stakeholders, and scenario-specific action guidelines. Contact lists, resource overviews, and checklists complement the plan. It must be regularly validated through exercises and updated to reflect current threats and organizational changes.
Crisis communication requires speed, transparency, and consistency. The initial response shapes public perception of the entire crisis management effort. Prepare key messages, talking points, and pre-approved initial statements. Internally, all employees must be informed promptly. Externally, you need a trained spokesperson and coordinated channels for media, customers, and authorities. Social media monitoring is indispensable for real-time situational awareness.
ISO 22361 focuses on strategic crisis leadership, decision-making, and crisis communication. BSI Standard 200‑4 is broader, covering the entire Business Continuity Management lifecycle including emergency management and crisis management. ISO 22361 complements BSI 200‑4 as a specialized guide for crisis team operations. Organizations should combine both standards to cover strategic and operational levels comprehensively.
Integration is achieved through shared governance structures, harmonized escalation paths, and aligned plans. The Business Impact Analysis forms the common foundation. Clear handover points between Incident Management, BCM, and crisis management prevent gaps. Joint exercises and a unified early warning system ensure both disciplines work together seamlessly to build organizational resilience.
ADVISORI guides you from assessing your existing crisis management maturity through ISO 22361 and BSI 200‑4 aligned design to full implementation. We establish your crisis team, develop tailored crisis plans and playbooks, train your teams through realistic crisis exercises, and integrate crisis management into your BCM system. As experienced consultants, we bring cross-industry best practices and field-tested frameworks to your organization.
Our clients trust our expertise in digital transformation, compliance, and risk management
Schedule a strategic consultation with our experts now
30 Minutes • Non-binding • Immediately available
Direct hotline for decision-makers
Strategic inquiries via email
For complex inquiries or if you want to provide specific information in advance