Other cookies are configurable.
The crisis you handle well is the one you prepared for.
Supply chain failure, cyberattack, fraud, accidents, scandal: whatever lands, your handling of it, real or perceived, is what will come to define your organisation. We build the doctrine, structures and communications that contain the peak and shorten the recovery.
What is crisis management consulting?
Crisis management consulting builds an organisation's capability to lead through a serious disruption: the governance and doctrine that define who decides, the structures and plans that carry the response, and the communications discipline that protects reputation while the operational crisis is resolved, anchored on ISO 22361.
Bad news travels fast. A crisis that is not resolved swiftly and coherently spirals into a public relations disaster that erodes customer, investor and regulator confidence long after the operational problem is fixed. The organisations that emerge stronger share four communication disciplines: be prepared, be quick, be consistent, be accurate. All four are built before the crisis, when time is still available.
We help you identify the threats that matter to your business, design the crisis management framework and plans, establish and train the crisis team, and embed the communications capability at the heart of the response, so that when the pressure arrives, your organisation acts from rehearsed structure rather than improvisation.
The crisis capability, end to end
Consulting that ends in rehearsed people
Capability is built as well as designed: every consulting engagement can draw on our Crisis Management Masterclass, Top-Team Exercises and exercise formats, so the people who own the plans have rehearsed them.
Frequently asked questions
What is the difference between crisis management and business continuity?+
Business continuity keeps products and services flowing through a disruption; crisis management leads the organisation through the event itself, the decisions, the stakeholders and the reputation. They interlock: continuity gives leaders options, crisis leadership chooses among them. See our business continuity service.
What are the golden rules of crisis communications?+
Be prepared, be quick, be consistent, be accurate. The most effective crisis communications work is completed before the crisis strikes, while time is still available: stakeholder maps, holding statements and trained spokespeople.
Which standard applies to crisis management?+
ISO 22361 is the international standard for crisis management, covering concepts, principles and the framework for building capability. Our consulting, masterclass and exercises are all anchored to it.
Do regulators expect crisis management capability?+
Increasingly, yes. NIS2 makes management bodies accountable for cyber incident handling, DORA expects crisis communication plans and tested response in the financial sector, and the Swiss ISG's 24 hour reporting duty is unmeetable without a rehearsed crisis structure.
Can you support us during a live crisis?+
Yes. Our senior practitioners provide real time support to crisis teams: structure, challenge and experience alongside your own leadership, followed by a post incident review that converts the event into improvement.
Related services
Business Continuity Exercises
Tabletop, functional, cyber and full scale exercises that prove the plans and evidence ISO 22301, NIS2 and DORA.
Business Continuity Management
BIA, ISO 22301 aligned strategy, plans and validation: a continuity programme built to survive contact with a real disruption.
Cyber Resilience
Beyond prevention: the capacity to withstand, respond and recover while essential services keep running.
Organisational Resilience
The structure above the plans: risk, continuity, crisis, cyber and people on one governed foundation, per ISO 22316.
DAEDALUS Airport Resilience Framework
The Airport Resilience Framework: five domains as one operating model across the aerodrome, powered by the 7A engine, in commercial, freight and business aviation editions.
NIS2 Compliance
From scope determination to Article 21 measures and 24 hour reporting readiness under Directive (EU) 2022/2555.
DORA Compliance
The five pillars of Regulation (EU) 2022/2554 implemented for financial entities and their critical ICT providers.
Risk Management
From risk universe to governed risk: identification, stress aware assessment, owned treatment and live monitoring.
Supply Chain Security
The risk you inherit from suppliers and shared platforms: mapped, assured, contracted and exercised, per ISO 28000, NIS2 and DORA.
Information Security
Confidentiality, integrity and availability protected through a living ISMS aligned to ISO 27001.
7A Risk Management Framework
Our proprietary decision centric operating model: exposure and decision confidence measured separately, for the board.
AI Governance and Resilience
Governance wrapped around every layer of intelligent systems, from model behaviour to board accountability and ISO 42001.
Build the capability before the trigger finds you.
Talk to us about a crisis readiness assessment, a framework build or communications preparation for your leadership.
Book a consultation