Prepared. Capable. Resilient.
Professional crisis management for organisations.
Our approach to crisis management combines proven methodology with practical implementability. We support you in developing a comprehensive crisis management system that equally considers prevention, preparation, response, and follow-up and is optimally integrated into your corporate culture and structures.
Our service offering in crisis management includes the design, implementation, and optimization of all components of a comprehensive crisis management system.
5 service modules
Bookable individually or as an end-to-end programme.
A clearly structured crisis team with defined roles and escalation levels ensures that the right decisions are made quickly in an emergency.
A standardized process ensures that no step is overlooked from alerting to follow-up.
A comprehensive crisis plan bundles strategy, handbook, and infrastructure in an audit-proof document.
An effective early warning system detects emerging crises in time and enables proactive action.
Transparent, structured communication is crucial to maintain trust internally and externally.
5 phases
Our approach to developing and implementing crisis management systems follows a structured yet flexible methodology that we adapt to your specific requirements and business circumstances.
Your contact
Melanie Düring
Head of Risk Management
The effectiveness of a crisis management system only becomes apparent in an actual emergency – which makes it all the more important to continuously test and improve crisis readiness through regular exercises and realistic simulations. Successful organizations are not characterized by not experiencing crises, but by their ability to manage them quickly and effectively and emerge stronger from them.
A key success factor in crisis management is preparation for the unexpected. Crisis management structures should be flexible enough to respond to various scenarios rather than focusing on managing specific, predictable events. Particularly important is regular practice of crisis management processes under realistic conditions – only this way can weaknesses be identified and addressed before an actual emergency occurs.
7 QUESTIONS, BRIEFLY ANSWERED
Crisis management encompasses all measures for preparing for, managing, and recovering from crisis situations. For banks, MaRisk AT 7.3 and BAIT mandate establishing emergency management that ensures the continuity of critical business processes. DORA adds specific requirements for ICT-related incident response from 2025. Effective crisis management protects against reputational damage, regulatory sanctions, and existentially threatening operational disruptions.
Business Continuity Management (BCM) is the overarching management process that identifies which time-critical processes must be maintained during disruptions. Emergency planning defines concrete measures for emergency operations and recovery, including resources, responsibilities, and timelines. Crisis management activates the crisis team and coordinates decision-making, communication, and escalation during an acute crisis. All three disciplines interlink and must be planned in an integrated manner.
The crisis team typically includes the executive board, risk management, IT, legal, compliance, communications, and affected business units. The structure must be predefined with clear roles, deputies, escalation paths, and decision-making authority. A crisis handbook documents alerting chains, situation room setup, and reporting channels. Regular crisis exercises, at minimum annually, ensure the crisis team functions under pressure.
MaRisk AT 7.3 requires emergency concepts for time-critical activities and processes with regular review and testing. BAIT specifies IT emergency management requirements. DORA mandates ICT-related incident reporting and response, digital operational resilience testing, and information sharing from 2025. BSI Standard 200‑4 provides a recognized BCM framework. BaFin reviews the adequacy of emergency management under SREP and expects documented business impact analyses.
The Business Impact Analysis identifies and assesses the effects of operational disruptions on business processes. It determines Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for each critical process, defines maximum tolerable downtime, and identifies dependencies between processes, systems, and external service providers. The BIA forms the foundation for all emergency plans and is mandatory for financial institutions under MaRisk and DORA.
Crisis exercises follow a defined sequence: planning with a realistic scenario (cyberattack, system failure, natural disaster), execution under conditions as realistic as possible with an activated crisis team, observation and documentation by an evaluation team, and structured debriefing with lessons learned and improvement measures. MaRisk requires at minimum annual emergency tests. ADVISORI supports from scenario development through exercise execution to results evaluation.
Costs depend on maturity level and scope. Typical project budgets range from EUR 100,000 to 300,000 for complete BCM setup including business impact analysis, emergency plans, crisis team establishment, crisis handbook, and initial exercise. Ongoing support including annual reviews, exercise delivery, and plan updates requires additional resources. ADVISORI offers modular packages from BCM quick checks through full implementation to ongoing crisis management support.
Our clients trust our expertise in digital transformation, compliance, and risk management
Schedule a strategic consultation with our experts now
30 Minutes • Non-binding • Immediately available
Direct hotline for decision-makers
Strategic inquiries via email
For complex inquiries or if you want to provide specific information in advance