Crisis Management
Plans
What’s a crisis management plan?
When a crisis like a cyberattack, a fire, or a serious workplace incident hits, your leadership team needs to make fast decisions under pressure with incomplete information. How they perform in those first hours shapes the outcome: for your organisation, your staff and your reputation.
A Crisis Management Plan doesn't prevent crises. It makes sure that, if things go wrong, the right people are in the room, that they know their roles, that they're communicating clearly and that they're focused on the decisions that matter, not scrambling to work out who's in charge.
What’s included?
Crisis management plan development
We develop a comprehensive plan tailored to your organisation, covering escalation triggers, team structure, roles and responsibilities, decision-making protocols and stakeholder communications.
Roles charter
Each member of your Crisis Management Team needs to understand their specific responsibilities during a crisis. We develop clear role charters so there's no ambiguity under pressure and everyone knows what to do.
Crisis escalation matrix
Not every incident needs the full Crisis Management Team. We develop an escalation matrix that defines which incidents require which level of response, so your team isn't over-reacting to minor incidents or missing serious ones.
Crisis management exercises
Plans need to be tested. We facilitate exercises that simulate realistic scenarios, testing your team's ability to make decisions, communicate clearly and coordinate a response under pressure.
Crisis management vs business continuity
A Crisis Management Plan and a Business Continuity Plan serve different purposes, and need to work together.
The Crisis Management Plan focuses on strategic leadership response: who's in charge, how decisions get made, how you communicate with staff, customers, regulators and the media. The Crisis Management Team also keeps the Board informed as the crisis develops.
The Business Continuity Plan focuses on operational recovery: how you restore your time-critical activities and services after a disruption.
Both are necessary. We often develop them in parallel, so they're aligned from the start.
Regulated by APRA?
Crisis response forms part of your obligations under CPS 230 (Operational Risk Management), including scenario testing and Board reporting during a disruption.
Where next?
Ready to strengthen your crisis management capability? Contact us for a confidential discussion.
Get in touch