6 Steps to Create a Crisis Management Plan


Steps to Create a Crisis Management Plan

If your company is one of the 51 percent of organizations that admits to not having crisis management playbooks in place, now is the time to sit down and start planning. The very future of your business could depend on it.

But where should you begin? If you’re new to the process, building crisis management plans likely seems like a daunting task. Luckily, there are just six key steps required to create a plan—and the process will likely become easier after you’ve gone through it the first time.

Here’s how to get started:

1. Assess your risks.

The first step is a risk assessment, which identifies potential crises that would disrupt your business function and/or processes. Work with members of leadership, your crisis response team, and other key stakeholders to begin listing all relevant threats and vulnerabilities that could impact the company. These might include public relations blunders, social media gaffes, product recalls, cyberattacks, data breaches, and more.

2. Determine the business impact.

A business impact analysis (BIA) is a way to quantify the potential impact of a business-disrupting crisis.

Working your way through a BIA can reveal a variety of potential effects, including:

  • Customer dissatisfaction or attrition
  • A damaged reputation in the public eye
  • Lost or delayed sales or income
  • Increased expenses (for example, as a result of paying for overtime labor or to expedite shipping of products)
  • Regulatory fines

A BIA is an important step to make sure your organization is truly considering every angle of a threat, and it can help to make a business case to anyone who doesn’t see the value of crisis management plans. Ready.gov offers a free BIA template that can help guide you through the process.

3. Identify contingencies.

Now that you have determined what risks could impact your business and how, begin identifying which actions will help your company to respond effectively to each crisis scenario. Think about the steps that would be required to resolve a given crisis, what resources would be required, and how employees can help.

For example, a plan for a social media blunder might include your digital team issuing statements across all your social media platforms, while your customer service team is briefed on what to say on incoming calls. Meanwhile, a crisis plan for a product recall may require help from IT and logistics to determine how to fix the problem, while customer service, sales, and public relations work together to answer customer questions and maintain the company’s good standing.

4. Build the plan.

Once you’ve determined an effective contingency for each potential crisis, flesh out the plans with relevant stakeholders. Key employees, such as department heads, can help to provide insight into available resources and potential hurdles. For certain crisis scenarios, you may also need input from outside parties, such as contractors and partners that work closely with your business.

As you work your way through the plan, keep in mind any relevant regulatory requirements, and determine how you will continue to meet them, even in the midst of a crisis. For example, if your organization must remain compliant with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), be sure to account for this regulation in each crisis scenario.

5. Familiarize users.

It’s important that all employees understand their roles during a crisis. Remember, stress and panic can make it difficult to remember your role in a crisis response; however, there are two ways to mitigate the effects of stress.

First, ensure that your stakeholders have the information they need. During the tense moments of a crisis, people require very quick access to straightforward information. Consider ways to quickly and effectively distribute a crisis plan, such as through a crisis management app, which includes real-time access to up-to-date documents, incident reporting, contact lists, messaging capabilities, and more.

Second, be sure to frequently train stakeholders on your crisis management plan. Stage regular tests and rehearsals to ensure that every individual is familiar with the plan, can respond confidently, knows where to get additional information, and understands his or her role.

6. Revisit the plan frequently.

Once your plan is written and approved and has been tested, be sure to revisit it frequently. It’s vital to keep the plan up to date, especially as employees join or leave the company, new technologies are implemented, and other changes occur. It can be helpful to review and test the plan at least a few times a year to keep the content fresh.

This is another area in which a crisis management app can help. The platform automatically pushes all updates to each user’s smartphone, so you can rest assured that all stakeholders have immediate access to the most up-to-date crisis plans available, no matter when they require it. So if a PR nightmare or a product recall strikes on a Saturday afternoon, your people still have immediate access to the information they need to activate the appropriate plan right away.

Interested in converting your crisis management plans into actionable, digital playbooks? Try the In Case of Crisis mobile app for free.