Skip to content

Crisis Management

What is Crisis Management?

The process by which an organization responds to and manages the impact of a major unpredictable event that threatens to harm the organization.

Business Continuity

Each of these is named in at least one of the same controls as crisis management. The number is how many controls name both.

What the standards actually require on crisis management

Requirements naming crisis management across 6 standards, quoted from the control text.

Article 47 establishes the CRISIS MANAGEMENT framework for cross-border electricity cyber-incidents that escalate beyond entity-level + Member-State-level response capacity.

NCCS-Art.47_48 · Crisis management and Cyber Solidarity Act coordination (NCCS Articles 47-48)

Establish incident and crisis management arrangements with trained teams and rehearsed plans.

BS65000-8.7 · Incident and Crisis Management
NIS2 Directive2 controls

Requires Member States to designate authorities responsible for managing large-scale cybersecurity incidents and crises, and to adopt a national response plan covering objectives, capabilities, roles and procedures.

nis2-directive::Art.9 · National cyber crisis management frameworks

The operator and Customs develop and document contingency plans for emergency security situations and for disaster or incident recovery, with periodic training of employees so the plans can be executed.

AEO-12 · Crisis Management and Incident Recovery

Availability. Article 25 addresses unavailability situations that generate a crisis at the institution and the related obligations.

BR-OF-A25 · Availability and crisis management

Article 19 extends Reserve and Emergency Mechanism support to Digital Europe Programme-associated third countries (EFTA + accession-track countries that have signed DEP association agreements).

CSA-Art.19_20 · Support to DEP-associated third countries and coordination with Union crisis-management mechanisms (Articles 19-20)

Questions people ask about crisis management

What is Crisis Management?
The process by which an organization responds to and manages the impact of a major unpredictable event that threatens to harm the organization.
Why is Crisis Management important for compliance?
Crisis Management is a key concept in Business Continuity. Understanding crisis management helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Crisis Management?
Crisis Management appears in the requirement text of EU Network Code on Cybersecurity for the Electricity Sector, BS 65000:2014 - Guidance on Organizational Resilience, NIS2 Directive, Authorised Economic Operator (AEO) Programmes - Global Standards, Brazil Open Finance (Resolução Conjunta No. 1/2020). Across these standards we have identified 10 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Crisis Management?
Explore our compliance framework pages to see how crisis management applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Crisis Management applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.