Crisis Management
Why Crisis Management Matters
Crises are, by their nature, unpredictable. They arrive without notice, unfold quickly, test leadership and often place intense pressure on communication, decision making and coordination. The consequences can be significant:
- harm to people or service users
- interruption to essential operations
- reputational damage
- financial loss
- contractual or regulatory breaches
A wellestablished crisis management capability reduces uncertainty and enables better decisions. It helps organisations act with clarity rather than panic, communicate truthfully and consistently, and move from reaction to stabilisation more quickly.
Modern crisis expectations also continue to rise. Customers expect transparency, regulators expect diligence, and stakeholders expect a steady, coherent response. Effective Crisis Management supports all of these.
Common Challenges for Organisations
Most organisations recognise the need for Crisis Management, but many face similar challenges:
1. Unclear definitions and thresholds
Many organisations struggle to distinguish between an “incident” and a “crisis”. Without agreed escalation criteria, teams hesitate — escalating too late or too early.
2. Confusion around roles and responsibilities
During a crisis, uncertainty over who leads, who supports, who decides and who communicates is one of the biggest sources of delay and stress.
3. Plans that don’t match reality
Some organisations rely on thick documents that look impressive but don’t work under pressure. Others have vague one page plans that offer little practical guidance.
4. Limited exercising or rehearsal
Teams that never practise together often freeze or duplicate effort when something goes wrong. Crises are as much about teamwork as they are about process.
5. Over reliance on individuals
Crisis response often depends heavily on one or two experienced people, making capability vulnerable to absence or turnover.
6. Poor communication structures
Uncoordinated or inconsistent communication — internal or external — can worsen an already difficult situation.
7. Focus on causes rather than consequences
You cannot predict every scenario. Crisis capability must focus on managing consequences, not trying to catalogue every possible event.
Cambridge Risk Solutions’ Approach
We help organisations build supportive, structured and confidencebuilding crisis management arrangements, grounded in ISO 22361 principles and years of practical consultancy experience.
Clear, proportionate frameworks
We design crisis management structures that are easy to understand and simple to activate. We avoid unnecessary complexity and ensure plans support your organisation’s size, culture and operational realities.
Human centred design
Crisis Management is about people making decisions under pressure. Our materials are written in plain, accessible language that helps teams think clearly in difficult situations.
Supportive, not punitive
We create environments where teams can learn, ask questions and build confidence. Crises require trust: in the process, in the team and in the decisions being made.
Real world grounding
Our approach reflects the pressures organisations face during crises: incomplete information, time pressure, emotional strain, competing priorities and heightened public expectations.
Business Continuity Planning
We develop clear, user-friendly Business Continuity Plans that your teams can actually follow under pressure — practical, tested, and built around the way your organisation really works.
Business Continuity Strategy
We help you define the right recovery strategies for your organisation — from working from alternative locations to cross-training staff — so you have effective options when you need them most.
Business Continuity Training
We provide objective, engaging training that builds genuine awareness and capability across your organisation, ensuring your people know what to do and feel confident doing it.
BCM for SMEs
Business Continuity is not just for large organisations. We provide practical, proportionate BCM solutions designed specifically for small and medium-sized businesses — without unnecessary complexity or cost.
Outsourcing Business Continuity
For organisations that need BCM capability without a dedicated in-house resource, we offer a fully managed Business Continuity service — giving you expert cover without the overhead.
ISO 22301 Certification Support
As qualified Lead Auditors for ISO 22301, we provide end-to-end support for organisations seeking certification to the international standard for Business Continuity Management Systems.
Key Components of Crisis Management
1. Clear definitions, thresholds and activation
We help organisations establish a shared understanding of what constitutes a crisis, how incidents escalate and when the crisis team should be activated. This prevents hesitation and ensures a consistent, confident response.
2. Roles, responsibilities and structure
A well functioning crisis team requires clarity. We help define:
- Crisis Manager / Strategic Lead
- Deputy or Support Leads
- Communications Lead
- Business Continuity / Operational Lead
- HR and Welfare Lead
- Specialist advisors (IT, legal, safeguarding etc.)
- Log Keeping
This structure ensures decisions are made, actions delegated and communication remains coordinated.
3. Practical, usable crisis plans
We develop crisis management plans that provide:
- simple activation guidance
- early actions and stabilisation steps
- clear communication routes
- stakeholder considerations
- decision making support tools
- log keeping guidance
- welfare and support considerations
- links to business continuity and recovery arrangements
Plans are written so teams can use them under pressure, not search for information they cannot find.
4. Staff welfare and decision support
Crises are stressful. We support organisations in building welfare considerations into plans, helping leaders recognise stress indicators and designing structures that provide psychological safety.
5. Communication and stakeholder management
Communication can make or break a crisis response. We help organisations develop:
- clear internal communication processes
- external communication strategies
- media response considerations
- stakeholder mapping
- holding statements
- approval routes
Messaging should be calm, truthful and coordinated.
6. Escalation and linkage with Business Continuity
Crisis Management and Business Continuity are often confused. We help clarify how these disciplines interact:
- Business Continuity manages operational disruption.
- Crisis Management provides strategic leadership during highpressure events.
Both are essential, but they serve different purposes. We help align the two so they work together seamlessly.
7. Logging, documenting and learning
Accurate logs support decisions during and after a crisis. We help teams adopt calm, structured log keeping practices, ensuring key information is captured without overburdening the team.
8. Debriefing and continuous improvement
After a crisis or exercise, learning is critical. We support structured debriefs that focus on:
- what worked well
- what could be improved
- any capability gaps
- practical improvements
Learning is supportive, not critical — and it builds long-term capability.
Training, Exercising and Capability Building
1. Team training
Covering:
- crisis roles and responsibilities
- decision making under pressure
- communication principles
- situational awareness
- leadership behaviours
Training is interactive, practical and tailored.
2. Desktop exercises
Scenario based sessions that help teams explore their roles, decision paths and the interaction between crisis response, continuity, IT, communications and leadership.
3. Command and simulation exercises
For organisations wanting deeper testing, we design more challenging simulations aligned with ISO 22361 principles. These exercises test:
- teamwork
- decision making
- communication flow
- organisational resilience under pressure
4. Leadership and executive briefings
We support senior leaders in understanding their role, ensuring they feel confident and prepared.
Our exercises are always supportive. They are about capability development — not catching people out.
Long-Term Crisis Capability
Crisis Management is not a onetime project. We help organisations embed and maintain capability through:
- periodic reviews of crisis plans
- updates based on organisational change
- refresher training
- scheduled exercises
- lessons learned cycles
- alignment with other resilience disciplines
The aim is a steady, sustainable level of preparedness that grows with the organisation.
Why Organisations Choose Cambridge Risk Solutions
Organisations work with us because:
- our approach is calm, proportionate and supportive
- we have deep experience across sectors
- we avoid unnecessary jargon or complexity
- our plans and guidance are human and easy to use
- we build long-term relationships with clients
- our exercises are realistic, safe and constructive
- we work across Resilience, Business Continuity, Information Security and Data Protection, providing a joined up view
We help organisations respond more confidently, learn more effectively and recover more smoothly.