Crisis Management Training

#CrisisSimulationmyths Are We Overlooking the Essential Lesson in Crisis Simulation? A prevalent misconception in crisis simulation is that the mere completion of procedural steps signifies genuine organizational preparedness. In reality, an exclusive focus on checklists and scripted responses can create a misleading sense of security, failing to account for the complex and unpredictable nature of actual crises. While procedural discipline remains a foundational element, effective crisis management ultimately requires flexibility, heightened situational awareness, and the capacity to improvise in the face of unforeseen challenges. The core value of crisis simulation, lies not in the flawless execution of established protocols, but in cultivating adaptive thinking and the ability to recognize and respond to emerging threats. What should you also look for in your next crisis simulation::::::::::::::::::: ✅ Prioritize reflective debriefs that examine not only actions taken, but also the reasoning and decision-making processes behind them. ✅ Assess adaptability, emotional intelligence, and leadership under pressure, rather than limiting evaluation to procedural adherence. ✅ Design simulations that incorporate genuine uncertainty, compelling teams to step outside their comfort zones. ✅ Promote a culture where identifying and addressing weaknesses is valued more highly than achieving flawless performance. #Crisis #Crisissimulation #themediacoach

Crisis management is a critical skill in communications. But here’s the truth: By the time you start managing a crisis, you’re already behind. That’s why crisis prevention matters more than crisis management. Prevention is possible. Here’s how: Study your internal systems—beyond just communications. Look at production, sales, marketing, admin, compliance, and more. Connect regularly with practice leaders. Monthly check-ins are ideal for spotting issues early. Flag anything that could trigger a future crisis. If possible, join meetings where corrective actions are discussed. Build potential crisis scenarios for each identified trigger. This is where prevention ends, and preparation begins. Create training modules for each crisis scenario. Assign clear responsibilities for every action in these scenarios. Run periodic mock drills to test your readiness. Adjust the frequency based on the scenario. Business is dynamic. Even with all the preparation, surprises can happen. But with a crisis prevention mindset, you’ll be ready to manage with speed and agility.

Crisis training isn’t optional. It’s CPR for your reputation. Yesterday, I ran a half-day, issues & crisis-focused media interview workshop for my long-time client, Goodwill of South Central Wisconsin. I will die on the hill that every organization with public-facing operations needs to run updated media trainings, crisis simulations, and playbook reviews 3–4 times per year. Why? Because it’s no different than office/school fire drills or renewing your CPR cert. You don’t do them because you expect the worst tomorrow; you do them because lives, livelihoods, and millions of dollars are at stake if you don’t keep your response muscles fresh. Pay a little now. Or pay much more later. Here are the core elements of my crisis trainings, updated with feedback from 30+ fellow trainers, journalists, and comms pros: 1. Safe Space & Energy – Ice breakers and laughter lower the stakes so trainees can fail fast and learn. 2. News Value & Archetypes – Journalists hunt for conflict, hypocrisy, humor, contradiction (“man bites dog”), rags-to-riches, romance gone bad, David vs. Goliath. And they’ll cast you as hero, villain, or something in between. Know both before you walk in. 3. Prep Your Headlines – Pick 2–3 key points you must convey. Even if your interview is 30 minutes, it may be condensed into one 10-second soundbite or a single sentence. If you said it, it’s fair game — context or not. 4. Modes Matter – Decide: are you educating with nuance, or delivering tight soundbites? The worst interviews are when you mismatch. 5. Foundations – Bridging, blocking, flagging, hooking. And always have a call to action ready. 6. Don’t Repeat Negatives – If asked “why is your company failing at X,” never restate “we’re not failing.” That soundbite will haunt you. Reframe and redirect. 7. The Big Crisis Questions – What happened? Who’s to blame? What are you doing to make it right? Train for these — they’ll come every time. 8. Nonverbals – Solid colors. Hands visible. Lean in. Silence beats nervous rambling. 9. Mock Interviews ON CAMERA – Not an iPhone selfie. Real lights, mic, hostile rapid-fire Qs. Run two full reps per person. 10. Respectful Feedback – Watching yourself is awkward. In a trust-based room, it’s priceless. 11. On the Record ≠ Optional – Yes, there’s on background, off record, and Chatham House rules. But unless there’s rare mutual consent, assume everything is on the record. Mic is always on. 12. Refreshers – Media training is never “one and done.” Quarterly reps keep you sharp. 👉 That’s my list. What’s yours? What’s the one drill, exercise, or tactic you swear by to make crisis simulations stick? And if your team hasn’t dusted off its crisis plan in a hot second — or you’ve never pressure-tested your spokespeople under fire — it might be worth a quick convo with someone who’s been in the room (I’m always happy to chat). Because crisis comms isn’t theory. It’s muscle memory. And muscle memory only works if you keep training.

Every communication professional should understand this: Crisis communication is not only about responding when things go wrong. It is the strategic management of information, perception, and trust under pressure. It is how you speak when stakes are high, emotions are elevated, and people are watching closely. Handled well, it can preserve credibility. Handled poorly, it can damage years of trust in a matter of hours. So what should every communication professional know? - Before a Crisis (Preparation is your advantage) Prepare before the crisis, not during it. The strongest organizations do not improvise crisis communication. They plan for it. They define protocols, assign roles, and anticipate scenarios. Preparation is what allows composure under pressure. This also means knowing your risks, aligning leadership, and ensuring everyone understands how communication will flow when it matters most. Because when a crisis hits, confusion inside the organization will always show up outside. - During a Crisis (This is where trust is tested) a. First, speed matters; but accuracy matters more. Silence creates a vacuum, and that vacuum will be filled with speculation. But rushing out unverified information can worsen the situation. The balance is to respond quickly, while ensuring what you say is grounded and reliable. b. Second, acknowledge before you explain. In a crisis, people are not just looking for information; they are looking for reassurance. Acknowledge the issue clearly, show awareness., then provide context. Skipping acknowledgment often comes across as avoidance or insensitivity. c. Third, control the narrative early. If you do not define what is happening, others will define it for you. The first few communications in a crisis often shape public perception long after the situation is resolved. d. Fourth, consistency builds trust. Mixed messages from different spokespeople create confusion and weaken credibility. Align internally before speaking externally. One message, clearly delivered. 5. Fifth, tone is as important as content. In high-pressure moments, how you say something matters just as much as what you say. Defensive, dismissive, or overly technical language can escalate tension. Calm, direct, and human communication helps stabilize it. - After a Crisis (Reputation is rebuilt here) The work does not end when the storm dies down. You must continue communicating, clearly and consistently, until confidence is restored. Rebuilding trust requires transparency. Review what happened. Identify gaps, strengthen your systems and most importantly, reshape the narrative so the crisis does not become the only story people remember about your organization. Because the truth is this: A crisis is not the time to decide how your organization communicates. It is the time your communication is tested and when that moment comes, your response will do more than address the issue.

𝐔𝐧𝐢𝐟𝐨𝐫𝐦 𝐫𝐞𝐬𝐩𝐨𝐧𝐬𝐞𝐬 𝐭𝐨 𝐜𝐫𝐢𝐬𝐞𝐬 𝐜𝐚𝐧 𝐭𝐫𝐢𝐠𝐠𝐞𝐫 𝐥𝐨𝐜𝐚𝐥 𝐦𝐚𝐥𝐚𝐝𝐚𝐩𝐭𝐚𝐭𝐢𝐨𝐧. National or federal responses to crises are fast, clear, and seem fair. But our new paper with Mikhail Sirenko and Alexander Verbraeck in Nature Scientific Reports shows that these standardised interventions can trigger maladaptation, effectively flipping risk profiles and creating new hotspots in previously safe urban areas. 𝐖𝐡𝐲 𝐢𝐬 𝐜𝐫𝐢𝐬𝐢𝐬 𝐦𝐚𝐥𝐚𝐝𝐚𝐩𝐭𝐢𝐚𝐭𝐢𝐨𝐧 𝐨𝐯𝐞𝐫𝐥𝐨𝐨𝐤𝐞𝐝? Using a large-scale agent-based simulation for Gemeente Den Haag, we identified a crisis paradox: while the response worked on an aggregated level and total incidents dropped, it failed locally. Vulnerabilities and exposure were shifted, because crisis policies force behavioural rigidity. 𝐇𝐨𝐰 𝐭𝐨 𝐦𝐨𝐧𝐢𝐭𝐨𝐫 𝐦𝐚𝐥𝐚𝐝𝐚𝐩𝐭𝐢𝐚𝐭𝐢𝐨𝐧? We introduce the Urban Adaptation Index (UAI) to help policymakers and civil protection authorities to track maladaptation. The index identifies when a crisis intervention creates shifting vulnerabilities and spatial inequity, improving the situation for the majority while drastically worsening it for specific neighbourhoods. Implications: - For better preparedness, we need to map "capacity bottlenecks" at the neighbourhood or district level. - During the response, we need to acknowledge that heterogeneity drives crisis outcomes, and tailor crisis management to the local context. - In the recovery phase, we need to account for the shifted vulnerabilities, and reassess priorities. TU Delft | Technology, Policy and Management DLR Institut für den Schutz terrestrischer Infrastrukturen

#Incidents Don’t Ruin #Reputations—Poor #Responses Do In any organizational #crisis, the response can have a bigger impact than the incident itself. #Cybersecurity breaches? Even more so. They don’t just hit your systems.. they test your #resilience, #trust, #transparency, and #tone. Let’s take a look at how different companies responded to major incidents, and what we can learn from them: ❌️ #Equifax (2017): Hackers accessed sensitive data of 147 million people, but the real damage came afterward. The company #delayed and waited weeks to disclose the breach, offered #unclear guidance, and #mishandled public communication. The result? Public #outrage, #lawsuits, and #billions lost. The breach was bad, but the response made it worse. ❌️ #Uber (2016, revealed in 2017): Instead of disclosing the breach, Uber #paid hackers $100,000 to cover it up and disguised it as a “bug bounty.” Once exposed, the #backlash was swift, #regulatory investigations, #reputational harm, and #leadership changes followed. A case study in what not to do. ✅️ #Microsoft (2020 SolarWinds attack): Though impacted, they didn’t hide. Microsoft #shared technical insights, #guided customers, and called for international #cooperation. Their clarity and leadership #strengthened, not weakened, their position. ✅️ #Maersk (2017 NotPetya attack): 80% of their global IT infrastructure was wiped out. But Maersk responded with #honesty, #speed, and #collaboration,restoring operations in record time. Their transparency turned crisis into #credibility. 🌩"You can’t #control the #storm, but you can control how you #sail through it." And in cybersecurity, how you respond speaks louder than what happened. 📚 So what should you #prepare in advance to #respond effectively to a crisis? ✨️ A pre-approved #crisis_communication plan with draft messages for different scenarios ✨️ #Darkweb_monitoring to detect compromised data and offer affected users early support ✨️ A list #contracts with of external #partners: legal advisors, PR firms, forensics experts, regulatory contacts ✨️ Incident #playbooks tailored to different attack types (e.g., ransomware, phishing, insider threat) ✨️ A #communication_chain with clear #roles for executives, legal, tech, and customer support ✨️Pre-established #customer_support workflows for high-volume, high-stress inquiries ✨️Regular #tabletop exercises to rehearse real-time crisis scenarios with leadership ✨️And most importantly: a #culture that values transparency, accountability, and speed 🚨"It’s not a matter of #if , but #when".. And when it happens, your preparedness is your #power.✊️ Have you seen an incident response done exceptionally well, or painfully wrong? What would you add to the preparation checklist? #Cybersecurity #CrisisResponse #Leadership #IncidentManagement #DigitalTrust #Reputation #BoardroomTalk #CxO #Governance #CyberAwareness #TechLeadership #CyberResilience

Peter Maurer, a board member of Zurich Insurance Group Ltd., the President of the Basel Institute on Governance, and the former President of the International Committee of the Red Cross (ICRC), shared profound insights during our recent session for the IMD Board Community. Drawing from his experience leading the ICRC for a decade, he emphasized the importance of proactive crisis preparation through solid preparation. “When a crisis starts, it’s too late to start thinking about it. Through scenario training and anticipating the 'unthinkable', your response improves,” he said. Key takeaways included: 1. Prepare well, but delay crisis mode: In crisis governance, prepare well and conduct contingency planning, but switch to crisis mode as late as possible, and maintain escalation capacity. Most crisis management and governance systems fail because fatigue sets in before the real crisis begins. 2. Avoid dangerous human behaviours: Two dangerous behaviors in crises—herd behavior (blindly following a dominant lead) and nervous breakdowns (fractured decision-making). It is enormously difficult to maintain a critical discourse, so ask the right questions and ensure that you don't blindly follow the crowd over the cliff. Also, work closely with management to ensure that the institution does not experience a nervous breakdown during a crisis event. 3. Establish best practices, but do not interfere: It is damaging when board members forcefully interfere with the crisis management of the executive. Your role as a board member is to ensure that the best practices are in place. This is a clear governance oversight function that is particularly important in a crisis. 4. Ensure adequate questions reach the board: A key aspect of any crisis is that it brings fundamental issues to the forefront, such as ethical dilemmas and core values. Boards must engage with these issues thoughtfully. Therefore, it is essential to ensure that the tensions arising during a crisis are effectively escalated for board deliberation. Finally, Peter shared his vision on strategic thinking in crisis management. "The best exit from a crisis is to try to work towards the endgame that you want. So, strategic thinking in a crisis is about starting to think from the end, not from your starting point.” #IMDBoardCommunity #IMDBoardDiploma #IMDGovernanceExcellence #IMDImpact

If a major tech incident hit your organization tomorrow, would your executive team know how to respond? I’ve been in rooms where systems were down, information was incomplete, and every decision carried real consequences. In those moments, preparedness isn’t a binder sitting on a shelf. It shows up in the quality of leadership decision-making under pressure. There are three stages of crisis response during a cyber incident: before, during, and after. Each one requires different executive discipline. Before an incident - Clarify who has decision authority. - Align on risk tolerance at the board and executive level. - Rehearse executive communication plans. - Agree in advance on what transparency looks like during a crisis. During an incident - Avoid reactive decisions driven by fear. - Prioritize action over consensus-building. - Delegate execution to the technical experts. - Avoid speculation. Make decisions based on verified facts. After an incident - Run a rigorous, blameless review. - Fix structural weaknesses, not just surface symptoms. - Reinforce accountability without triggering defensiveness. - Institutionalize what was learned. Technology will fail at some point. That’s the nature of complex systems. What matters is whether your leadership team has already been tested before that moment arrives. #BusinessLeaders #Cybersecurity #RiskManagement #LeadershipDecisionMaking #TechnologyRisk

Best laid plans and all that… but how do you account for chaos, tragedy, and panic? You might invest in the world's best Business Continuity Plan (BCP) or crisis management plan, only to see it fall apart when the crisis hits. Why does this happen? Because we often forget to factor in human emotion and impaired decision-making. Let’s talk about a real-life example: prisons. When a riot breaks out, despite advanced control and restraint training, detailed procedures, and comprehensive policies (someones controls), things can quickly spiral into chaos. These volatile situations endanger lives and safety because multiple compounding issues and priorities come into play, and suddenly, those meticulously crafted controls are forgotten. Are prison officers to blame here? No- people do the best they can in this situation, trying to protect themselves, their colleagues and of course the inmates in their care. The simple fact is- procedures and once per year training are not enough to overcome panic and a rapidly evolving chaotic situation. When we’re under stress, our bodies flood with adrenaline and cortisol. These hormones are great for immediate physical reactions – think fight or flight – but they seriously impair our ability to make rational decisions. Under such conditions, complex plans with many steps are almost impossible to follow. So, how easy do we make it for our organisations to implement their plans under stress? How many buttons need to be pressed to trigger the plan? What are the friction points? The harder and more complex the process, the less likely people are to follow it when it matters most. It needs to almost be autonomous. Think about it this way: a jet ski has a kill cord. If you fall off, the cord pulls out and the engine stops immediately, preventing you from getting injured by the motor whilst you are in the water. In a crisis, what are the equivalents of kill cords in our businesses? What simple, immediate actions can we design to halt danger and begin recovery? To be truly effective, our crisis management plans and BCPs need to work with our natural human responses, not against them. This is NOT easy- but that doesn't mean we get to ignore the human element at play. This means embedding simple, intuitive controls that become almost autonomous under stress. For example, a single, clearly marked button that activates the entire crisis response plan, or a protocol that is as easy as pulling a kill cord. It’s about creating a culture that is embedded over time, not just relying on a policy or document suite. These documents won’t help when your adrenaline is rushing, and your decision-making is impaired. We need human-centric risk management that acknowledges our natural responses and works with them. What controls will act as the kill cords when a crisis occurs in your organisation? How can we make our scenario testing and planning more human-centric?

What Every CISO Should Have Ready Before the Next Cyber Incident. Most organizations have an incident response plan. Far fewer have a communication response plan. And that's where things usually break down. A cyber incident doesn't become a crisis because systems go offline. It becomes a crisis when communication fails. I've seen organizations spend millions on security tools. Yet struggle to answer simple questions during an incident: "What do we tell customers?" "Who approves the statement?" "When do we notify regulators?" "Who updates the board?" That's why strong cyber crisis communication matters. Here are 15 prompts every security leader should have ready: 1/ Communications Gap Assessment ↳ Identify approval bottlenecks slowing decisions. ↳ Expose visibility gaps across teams and leadership. 2/ Incident Communications Review ↳ Analyze communication failures from past incidents. ↳ Capture lessons learned for future responses. 3/ Executive Communication Readiness ↳ Assess leadership confidence during crisis events. ↳ Measure transparency and stakeholder trust. 4/ Stakeholder Communication Mapping ↳ Define messaging for every stakeholder group. ↳ Prioritize communication channels and timing. 5/ Crisis Communication Playbooks ↳ Create repeatable response templates. ↳ Prepare for ransomware, breaches, and outages. 6/ Regulatory Communication Readiness ↳ Review reporting obligations and deadlines. ↳ Identify compliance and governance gaps. 7/ Video Communication Strategy ↳ Prepare CEO and CISO video updates. ↳ Build trust during the first 24 hours. 8/ Crisis Simulation Exercises ↳ Test communication processes under pressure. ↳ Validate executive and board readiness. 9/ Internal Communications Strategy ↳ Improve employee communication workflows. ↳ Strengthen escalation and alignment processes. 10/ Board Preparedness Assessment ↳ Evaluate cyber crisis decision-making readiness. ↳ Clarify governance and oversight responsibilities. 11/ Escalation Framework Design ↳ Define ownership and approval paths. ↳ Establish communication timelines in advance. 12/ Communications Performance Metrics ↳ Measure communication effectiveness with KPIs. ↳ Track stakeholder confidence and response quality. 13/ Post-Incident Communications Analysis ↳ Review communication performance objectively. ↳ Identify gaps and improvement opportunities. 14/ Communications Maturity Benchmark ↳ Compare against industry best practices. ↳ Build a roadmap for continuous improvement. 15/ Cyber Resilience Communications Program ↳ Align security, legal, PR, and leadership. ↳ Create a unified resilience communication framework. Organizations prepare for the technical response. But not the communication response. When a crisis happens, trust becomes your most valuable asset. ♻️ Repost if more security leaders should be talking about cyber crisis communications. 📌 Follow Marcel Velica for more cybersecurity and leadership insights.