"In a crisis, the plan you trained for is the only plan you have."
What Is a Crisis?
Instructor Sele: Every security professional will face a crisis at some point in their career. Most are not prepared. This course makes sure you are. We begin with the foundation — understanding exactly what a crisis is, how it develops, and the management framework that brings it under control.
Section 1 — Defining a Crisis
A crisis is any event that threatens life, safety, or serious injury; significantly disrupts normal operations; requires an immediate, co-ordinated response beyond routine procedures; and has potential legal, reputational, or financial consequences.
Not every incident is a crisis. A visitor who falls in the car park is an incident. A fire that forces a full building evacuation is a crisis. The distinction matters because crises require a different command structure, communication approach, and resource allocation than routine incidents.
Section 2 — The Crisis Management Cycle
Crisis management is not just responding to emergencies — it is a continuous cycle. The correct order is: Prevention → Preparedness → Response → Recovery. Most organisations focus only on Response. SafeHaven professionals invest equally in all four phases — because the quality of Prevention and Preparedness determines the quality of Response.
| Phase | Description |
|---|---|
| Prevention | Identifying and eliminating hazards before they cause a crisis |
| Preparedness | Planning, training, and equipping for crises that cannot be prevented |
| Response | Managing the crisis as it unfolds — protecting life, containing the situation |
| Recovery | Restoring normal operations and addressing the aftermath |
Section 3 — Crisis Characteristics
Crises share common characteristics that distinguish them from routine incidents: Speed — they develop faster than normal decision-making can keep up. Uncertainty — information is incomplete, contradictory, or rapidly changing. Stakes — the consequences of wrong decisions are severe. Pressure — time, resources, and attention are all under strain simultaneously.
This is why crisis response must be trained in advance — there is no time during a crisis to work out the plan.
Section 4 — The Incident Command System (ICS)
The ICS is the standardised management structure used for emergency response. It provides a clear chain of command, defined roles, and unified communication regardless of the size or nature of the incident.
Key ICS positions: Incident Commander (IC) — overall authority, one person, one decision-maker. Operations Section — manages tactical response on the ground. Logistics Section — provides resources, equipment, and support. Planning Section — tracks the situation and develops response plans. Safety Officer — monitors all response activities for safety risks.
The IC has absolute authority during an active crisis. No committee decisions. No consultation delays. One voice, one command.
- •A crisis threatens life, disrupts operations, and requires a co-ordinated response beyond routine procedures
- •The crisis management cycle: Prevention → Preparedness → Response → Recovery — in that order
- •Crises are characterised by speed, uncertainty, high stakes, and resource pressure
- •The ICS provides a clear command structure: one Incident Commander, defined roles, unified communication
- •Crisis response must be trained before the crisis — there is no time to plan during one
"I have managed twelve major incidents in my career. The ones that went well all had one thing in common: the team knew the plan before the incident started. The ones that went badly all had one thing in common: they were making it up as they went. Prevention and preparedness are not bureaucracy — they are what saves lives when everything goes wrong."
What is the correct order of the crisis management cycle?