Skip to content

Crisis Communication

What is Crisis Communication?

The processes and protocols for communicating with internal and external stakeholders during a crisis to manage information flow and maintain trust.

Business Continuity

Each of these is named in at least one of the same controls as crisis communication. The number is how many controls name both.

What the standards actually require on crisis communication

Requirements naming crisis communication across 6 standards, quoted from the control text.

Institutions shall implement crisis communication measures ensuring timely communication to internal and external stakeholders and authorities in the event of a major disruption.

EBA-GL-3.7.5 · Crisis communications

In a disruption or emergency and during BCP implementation, undertakings should have effective crisis communication measures so all relevant internal and external stakeholders, including supervisory authorities (where required) and relevant service providers,...

EIOPA-ICTSG-GL.24 · Crisis communications

Establish a crisis communications capability that addresses internal employees, external stakeholders, regulators, and the public.

NFPA1600-09 · Crisis Communications
DORA1 control

Financial entities shall have crisis communication plans enabling responsible disclosure of major ICT-related incidents or vulnerabilities to clients, counterparts and the public as appropriate, and designate communication policies for internal staff and exter...

DORA-Art.14 · Communication

HBNR compliance program implementation roadmap. ORGANIZATIONAL ROLES: (a) PRIVACY COUNSEL or CHIEF PRIVACY OFFICER - HBNR + state-law + HIPAA + GDPR + multi-regime coordination;

HBNR-Implementation-Roadmap-Org · HBNR Compliance Program Implementation - Organizational Roles, Detection, Incident Response, Records

Project + Programme + Third Party + Resilience + Assurance operationalise risk management in specific contexts. (1) Project + Programme Risk Management: systematic application of risk management to projects + programmes per Association for Project Management (...

IRM-Project-Programme-ThirdParty-SupplyChain-Resilience-BCP-Crisis-AssuranceMapping-3LoD · IRM Project + Programme Risk + Third Party + Supply Chain Risk + Operational Resilience + BCP + Crisis Management + Assurance Mapping + Three Lines of Defence

Questions people ask about crisis communication

What is Crisis Communication?
The processes and protocols for communicating with internal and external stakeholders during a crisis to manage information flow and maintain trust.
Why is Crisis Communication important for compliance?
Crisis Communication is a key concept in Business Continuity. Understanding crisis communication helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Crisis Communication?
Crisis Communication appears in the requirement text of EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07), EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600), NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management, DORA, FTC Health Breach Notification Rule. Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Crisis Communication?
Explore our compliance framework pages to see how crisis communication applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Crisis Communication applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.