Practical lessons from the front line of crisis response
At Global Risk Advice, we support organizations before, during and after crises. We respond to incidents and help leadership teams prepare through training, exercises and realistic simulations.
Across sectors and countries, we see the same pattern: organizations often struggle not because the incident is unique, but because pressure exposes predictable gaps in leadership, governance and communication. In this blog post we are showing the most common to help you avoiding them and perform well at the moment that it is needed most.
- Assuming serious disruption happens to others
A long period without major incidents can create false confidence. Yet humanitarian, INGOs and governmental organizations worldwide face armed conflict, political unrest, disease outbreaks, extreme weather, cyberattacks and disruptions to essential services. Resilience starts with accepting that these threats can emerge quickly and affect staff, communities and public services across borders. Leaders should regularly discuss realistic risks and early warning signs and the possible impact on people, operations and reputation. This keeps preparedness on the management agenda.
- Confusing a crisis plan with crisis readiness
A crisis plan is only a starting point. Under time pressure and with incomplete information, even logical procedures may fail. Regular training, tabletop exercises and simulations show what works, clarify roles and build confidence. Readiness comes from practice, not from the thickness of the manual. Exercises should test decisions, communication and cooperation, followed by clear actions to improve the plan and the team.
- Leaving leadership unclear
A crisis response slows quickly when it is unclear who is in charge, or unclear who holds which mandate. Strong organizations define the crisis leader, decision rights, escalation routes and responsibilities before an incident. Technical experts advise; authorised leaders make strategic decisions. In a crisis, clarity creates speed. Deputies should also be appointed, so the structure remains effective when key people are unavailable or the response continues for several days.
- Waiting for certainty before escalating
Escalating too late, too low is one of the most common lessons learned.
Crises often grow because leaders wait for complete information before activating the response. Complete certainty rarely arrives. Strong teams recognize warning signs, act early and adjust as facts develop. It is easier to scale down a response than to recover lost time. Clear activation criteria and permission to escalate concerns help teams act before a manageable incident becomes a major crisis.
- Failing to build a single point of truth.
During the first hours, information comes from many sources and may conflict. Without coordination, teams work from different versions of events. Maintain one clear overview of what is known, unknown, decided and underway. A shared picture keeps attention on consequences and actions. Use a simple situation report, update it at fixed times and record the source and reliability of important information.
- Treating communication as an afterthought
Poor communication can turn an operational incident into a wider organizational crisis. Do not wait for every detail, but do not guess. Be transparent, consistent and regular: explain what is known, what is not yet known, what is being done and when the next update will follow. Agree who approves messages, which groups must be informed first and which channels will be used if normal systems fail.
- Focusing only on the incident
Technical teams must solve the immediate problem, while crisis leaders must manage the wider impact. The severeness of both, the incident and the sentiment dictate the impact of the crisis. For example, armed conflict, a disease outbreak, civil unrest or disruption to essential services can affect staff, communities, public trust, legal duties, funding and operational continuity. Keep asking: What happened, and what does it mean for our organization? Separate operational response from strategic oversight, but ensure both teams share information, priorities and decisions throughout the crisis.
- Overlooking key stakeholders
Employees and customers matter, but so do regulators, insurers, investors, suppliers, authorities, boards and partners. Map these stakeholders before a crisis, understand their needs and decide who will contact them. Existing relationships make communication faster and more credible under pressure. Contact lists, key messages and reporting duties should be checked regularly, not for the first time during an emergency.
- Protecting image instead of building trust
Crisis communication should not be driven by image protection. Stakeholders mainly judge how leaders respond: are they competent, open, accountable and respectful? Reputation follows good crisis management. Trust should guide decisions, even when the message is difficult. Acknowledge impact, explain choices and correct mistakes quickly. Credibility is built through visible action and honest communication, not through polished statements alone.
- Failing to learn after the crisis
Once operations resume, improvement work is easily forgotten. Hold a structured review, test assumptions, examine decisions and identify gaps. More importantly, assign owners and deadlines for each action. A lessons-learned report has value only when the lessons are implemented. Leadership should track progress and retest key improvements through a new exercise, so learning becomes part of normal organizational development rather than a one-off activity.
From Crisis Management to Crisis Readiness
Crisis management is not about predicting every scenario. It is about helping leaders make sound decisions under pressure, using reliable information, clear roles, disciplined communication and agreed priorities.
At Global Risk Advice, we see that resilient organizations invest in governance, practice their plans, train their leaders and learn from disruption. Crisis readiness is not knowing exactly what will happen. It is knowing how your organization will respond when it does.