Most boards expect management to respond quickly when a crisis hits. The harder question is whether the board itself is ready to govern under pressure.

A crisis-ready board can make fast, well-governed decisions, protect stakeholders and preserve trust. It knows what information it needs, when it should be notified, which decisions require board authority and how to support management without taking over operational control.

Crisis-readiness is now a governance discipline. It cannot be delegated entirely to the communications team, legal team or executive.

The governance questions directors should ask

Directors should start with authority and escalation. Who can declare a crisis? What triggers board notification? Which matters require full board approval, chair approval or delegated authority to management?

The board should also test whether it receives the right information early enough. Crisis reports should be short, factual and decision-focused. They should separate known facts, assumptions, risks, decisions required and next actions.

Directors should ask whether the organisation has mapped its most material crisis scenarios. These may include cyber incidents, workplace fatalities, regulatory action, executive misconduct, supply disruption, product failure, data breaches or activist campaigns.

Knowing the board’s role before the first hour

Confusion at board level slows response. Directors need to understand their role in the first hour, first day and first week of a crisis.

That does not mean the board becomes operational. It means directors know when to convene, what information to request, which decisions sit with them and how to maintain a clear line with the CEO and crisis lead.

The chair has a critical role in keeping discussion disciplined. They need to draw on director expertise, avoid panic, focus the board on decisions only it can make and ensure the organisation’s legal, operational and communication positions remain aligned.

Testing readiness, not assuming it

A crisis plan that has not been tested is only an assumption. Boards should review recent incidents, near misses and external examples to see whether existing systems would hold up under pressure.

Scenario exercises are useful because they expose practical gaps. A desktop exercise can reveal weak escalation paths, unclear decision rights, slow approvals, incomplete stakeholder maps and inconsistent messaging. A live simulation can test speed, judgement and pressure management.

The board should also examine the quality of crisis documentation. Plans should identify roles, decision pathways, contact points, approval processes and recovery priorities. They should not depend on outdated assumptions or inaccessible documents.

Culture matters as much as process

Crisis-readiness depends on whether management feels able to escalate bad news early. Directors should reward transparency, not optimism that hides risk.

The board should agree its posture before a crisis. How will it balance legal risk, human impact, commercial consequences and public accountability? Delayed alignment during a crisis can produce mixed messages and poor decisions.

Reputation should be treated as a governance asset, not a communications afterthought. A sound response considers what the organisation did, what it knew, how it acted and whether its public position matches the facts.

What good board crisis-readiness looks like

  • Set clear escalation triggers for board notification and involvement.
  • Keep crisis roles, delegations and contact details current.
  • Run realistic scenario exercises at least annually.
  • Require concise crisis reports that distinguish facts from assumptions.
  • Align legal, operational and communication decisions early.
  • Review lessons after every incident and update the system.

Article curated with AI based on a question we wished we had once asked, all reviewed by Bastion Reputation’s specialist team.