Three-tier crisis architecture — tactical incident, operational continuity, strategic / reputation — engineered for high-hazard enterprises
Modern crisis management separates three concurrent but distinct response demands: Tier 3 tactical incident response (ICS / NIMS / emergency services interface), Tier 2 operational continuity (business and supply-chain protection per ISO 22301), and Tier 1 strategic crisis management (executive decision-making, reputation, regulatory, investor, and community communication). The post-pandemic period, combined with the rise of cyber-physical events (Colonial Pipeline 2021, Norsk Hydro 2019), ESG-driven activist scrutiny, social-media-amplified incident dynamics, and supply-chain disruptions (Suez 2021, Ukraine grain corridor, Red Sea 2023–2024), has made the strategic tier as consequential as the operational tier. Effective frameworks define roles per RACI, activation criteria per quantitative thresholds (Tier 1 PSE, financial impact, media reach), pre-authorised decisions and communication templates, dedicated facilities with redundant connectivity, and quarterly executive-level drills. The cost of getting this wrong is now measurable: BP Deepwater Horizon 2010 ($65B+ total cost), Volkswagen Dieselgate ($35B+), Wells Fargo accounts scandal ($3B+ in fines plus brand damage) — all of which had crisis-management execution gaps that amplified the underlying event.

A structured, facilitated process — from scope definition through close-out — producing defensible, actionable outputs.
Define crisis vs emergency vs incident per ISO 22320 / FEMA NIMS — crisis as strategic / reputational / regulatory event requiring executive engagement; map crisis scenarios from QRA / Bow-Tie major accident scenarios.
Design Crisis Management Team (CMT) structure — Crisis Director, Operations, Communications, Legal, HR, Finance; align with ICS / NIMS section chiefs and CCPS Crisis Management Guidelines.
Author decision-making framework with pre-authorised thresholds — evacuation, production halt, mutual-aid call, regulatory notification, media engagement; specify decision-log requirement and chain-of-custody.
Design communications protocol — internal cascade (employee notification), external (regulator, media, community, customer, supplier, shareholder); specify holding statements, spokesperson designation, and social media response.
Design crisis drill programme — tabletop (annual), functional (biennial), full-scale (triennial); specify independent observer team and after-action review; align with ISO 22320 and NFPA 1600.
Specify crisis recovery — short-term stabilisation, medium-term business resumption, long-term reputation restoration; align with ISO 22301 Business Continuity Management and crisis-to-BCP integration.

Speak with our team to scope an engagement tailored to your facility, regulatory context, and lifecycle stage.