Crisis Management (BCM)

Crisis management encompasses all measures for preparing, responding to, and recovering from organizational crises. According to ISO 22361, it focuses on strategic leadership and decision-making under extreme pressure. Organizations need crisis management because unforeseen events such as cyberattacks, supply chain disruptions, or reputational crises can become existential threats without structured processes. A systematic crisis management framework reduces response times, minimizes damage, and ensures organizational capacity to act.

An effective crisis team consists of an experienced crisis leader plus representatives from communications, IT, legal, HR, and operations. Per BSI Standard 200–4 and ISO 22361, the crisis team must have clear decision-making authority, defined escalation levels, and deputy arrangements. Regular crisis exercises, a reliable alerting chain, and a dedicated crisis room with redundant communication infrastructure are essential for operational readiness.

A crisis management plan includes activation criteria for various crisis scenarios, the crisis team organization with roles and authorities, escalation procedures, communication templates for internal and external stakeholders, and scenario-specific action guidelines. Contact lists, resource overviews, and checklists complement the plan. It must be regularly validated through exercises and updated to reflect current threats and organizational changes.

Crisis communication requires speed, transparency, and consistency. The initial response shapes public perception of the entire crisis management effort. Prepare key messages, talking points, and pre-approved initial statements. Internally, all employees must be informed promptly. Externally, you need a trained spokesperson and coordinated channels for media, customers, and authorities. Social media monitoring is indispensable for real-time situational awareness.

ISO

22361 focuses on strategic crisis leadership, decision-making, and crisis communication. BSI Standard 200–4 is broader, covering the entire Business Continuity Management lifecycle including emergency management and crisis management. ISO

22361 complements BSI 200–4 as a specialized guide for crisis team operations. Organizations should combine both standards to cover strategic and operational levels comprehensively.

Integration is achieved through shared governance structures, harmonized escalation paths, and aligned plans. The Business Impact Analysis forms the common foundation. Clear handover points between Incident Management, BCM, and crisis management prevent gaps. Joint exercises and a unified early warning system ensure both disciplines work together seamlessly to build organizational resilience.

ADVISORI guides you from assessing your existing crisis management maturity through ISO

22361 and BSI 200–4 aligned design to full implementation. We establish your crisis team, develop tailored crisis plans and playbooks, train your teams through realistic crisis exercises, and integrate crisis management into your BCM system. As experienced consultants, we bring cross-industry best practices and field-tested frameworks to your organization.