What is crisis management and why does it matter today?
Crisis management is the strategic capability to decide and communicate under high uncertainty and time pressure. It covers events that threaten reputation, viability or operational control, and it matters because modern crises escalate in hours and shape regulatory and reputational outcomes.
Crisis management is the strategic capability that lets an organisation decide and communicate under high uncertainty and time pressure. It covers events that put reputation, viability or operational control at risk: major cyber incidents, executive misconduct, regulatory sanctions, critical supply-chain failures or geopolitical disruption.
It matters more than ever because modern crises escalate in hours rather than days, and the organisation’s visible response conditions the regulatory, contractual and reputational outcomes. ISO 22361 offers formal guidance, but most organisations struggle to put it into practice beyond policy documents.
Crucially, crisis management is a discipline in its own right, distinct from business continuity or incident response. It has its own governance, its own organisational culture and its own competence indicators, which is why it is trained and exercised rather than simply written down.
Related Information
- A strategic capability for deciding under uncertainty.
- Cyber, regulatory, reputational and geopolitical events.
- Escalates in hours, not days.
- ISO 22361 provides the formal reference framework.
- Distinct from business continuity or incident response.
Expert Insight
Crisis management is not the stressed version of business continuity. It is a distinct discipline, with its own governance, its own organisational culture and its own indicators of competence.
“Crisis management is measured in hours of response, not pages of plan.”
What's next?
Explore related training
Browse all: Business Continuity & Crisis ManagementLead Operational Resilience Manager
This course prepares participants to design, implement, test, and improve an operational resilience management framework. It addresses the growing pressure to maintain critical services through cyber incidents, supplier failures, technology outages, regulatory scrutiny, and physical disruptions. Participants learn how to identify critical business services, set impact tolerances, assess risk, and coordinate response and recovery decisions. Abilene Academy teaches through consultant-led case work, realistic evidence review, and exam-focused coaching built from field practice. It is designed for resilience leaders, risk managers, business continuity professionals, internal consultants, and managers responsible for disruption readiness.
View courseLead Disaster Recovery Manager
This course prepares participants to initiate, develop, implement, test, and activate a disaster recovery plan (DRP) for ICT environments. Organizations face growing exposure to natural, human, and technological disruptions that legacy response plans fail to address, leaving recovery teams without tested procedures or clear accountability. Participants work through business impact analysis, risk assessment, recovery strategy design, and post-incident review across four intensive training days. Abilene Academy delivers this training through active consultants who bring operational DRP experience from real incident scenarios, not theoretical frameworks. It targets IT managers, ICT continuity professionals, risk consultants, and DR team members who own or contribute to recovery planning.
View courseISO 22301 Lead Implementer
This intensive 4-day training prepares participants to implement and manage a Business Continuity Management System (BCMS) compliant with ISO 22301:2019. It covers planning, deployment, monitoring, updates, and continual improvement, with a focus on context analysis, business impact analysis, risk.
View courseMore from Lead Crisis Manager
What does a Lead Crisis Manager actually do?
A Lead Crisis Manager builds the crisis-management capability and runs it in a live event. They organise preparation, guide the response, then steer recovery and learning.
How long is crisis management training?
The length of crisis management training depends on the level you are aiming for. Awareness for teams runs 1–2 days. The operational Crisis Manager credential — PECB Lead Crisis Manager — runs 5 days, exam included, and is aligned with ISO 22361:2022.
How do you build an effective crisis management framework?
An effective crisis-management framework defines leadership, structure, culture and skills, then tests them through scenarios. It has to make decision-making, information flow and communication explicit.
How do you integrate cyber crisis management into NIS 2 and DORA?
Both the NIS 2 Directive and the DORA regulation require formalised incident- and crisis-management arrangements with defined notification deadlines set out in their respective articles. ISO 22361:2022 provides the methodological framework for the crisis cell that responds to both regimes.
Browse all FAQs →
Full knowledge base