Skip to content

Crisis Communication

What is Crisis Communication?

The processes and protocols for communicating with internal and external stakeholders during a crisis to manage information flow and maintain trust.

Business Continuity

Each of these is named in at least one of the same controls as crisis communication. The number is how many controls name both.

What the standards actually require on crisis communication

Requirements naming crisis communication across 6 standards, quoted from the control text.

ISO 22361:20226 controls

Communicating effectively is a key part of successful crisis management and a necessary part of any response; it spans internal and external communication, designed and developed to support the crisis management function.

iso-22361-2022::8.1 · General (crisis communication) →

The information for preparing plans for emergency operations and response, crisis communications, continuity and recovery is required to come from three assessments: of risk, of business impact (the BIA) and of resource needs.

nfpa-1600-standard-on-continuity-emergency-and-crisis-management::5.1.4 · 5.1.4 Risk assessment, BIA and resource needs assessment informing response, crisis communications, continuity and recovery plans →

The organization should plan on-site communications for warning of imminent threat, emergency actions and departures from the plan, and off-site communications with agencies, policymakers, media and families.

ansi-asis-wvpi-aa-2020-workplace-violence-and-active-assailant::A.3.1.1 · A.3.1.1 Activate crisis communications →

In a disruption or emergency and during BCP implementation, undertakings should have effective crisis communication measures so all relevant internal and external stakeholders, including supervisory authorities (where required) and relevant service providers,...

EIOPA-ICTSG-GL.24 · Crisis communications →

The bank ensures its crisis communication plan works by periodic drills with stakeholders including customers and service providers.

rbi-cybersecurity-framework-for-banks::190 · Para 190: crisis communication tested through drills with customers and providers →
DORA2 controls

Within their ICT risk management framework, entities keep crisis communication plans to disclose responsibly, at a minimum, major ICT-related incidents and any vulnerabilities to clients, counterparts and, where appropriate, the public;

DORA-Art.14 · Communication →

Questions people ask about crisis communication

What is Crisis Communication?
The processes and protocols for communicating with internal and external stakeholders during a crisis to manage information flow and maintain trust.
Why is Crisis Communication important for compliance?
Crisis Communication is a key concept in Business Continuity. Understanding crisis communication helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Crisis Communication?
Crisis Communication appears in the requirement text of ISO 22361:2022, NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management, ANSI/ASIS WVPI AA-2020 Workplace Violence and Active Assailant, EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600), RBI Cybersecurity Framework for Banks. Across these standards we have identified 21 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Crisis Communication?
Explore our compliance framework pages to see how crisis communication applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Crisis Communication applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.