Crisis Management and ISO 22361: A Strategic Advantage for Every Organisation
Crisis management is no longer a niche concern — it’s a strategic capability that every organisation must cultivate. ISO 22361 provides a structured framework for doing just that. Whether you’re navigating reputational risk, cyber threats, or operational disruption, this international standard helps leaders respond with clarity and control.
What is ISO 22361?
ISO 22361:2022 is the global standard for crisis management. It offers guidance on building a crisis management capability, covering leadership, decision-making, communication, and coordination. Unlike ISO 22301, which focuses on continuity planning, ISO 22361 supports organisations in managing crises as they unfold.
Why Crisis Management Matters
- Unpredictable threats: From data breaches to supply chain failures, crises can emerge from anywhere.
- Leadership under pressure: ISO 22361 helps leaders make confident, timely decisions when it matters most.
- Stakeholder expectations: Customers, regulators, and communities expect transparency and control during a crisis.
- Reputation and recovery: A well-managed crisis can protect — or even enhance — your brand.
ISO 22361 vs ISO 22301: A Resilience Duo
ISO 22301 keeps operations running, and is a standard that you can be certified against. ISO 22361 is a guidance standard, helping to refine and drive your response. Together, they form a comprehensive resilience strategy:
| ISO 22301 | ISO 22361 |
|---|---|
| Focuses on continuity of operations | Focuses on strategic crisis response |
| Emphasises recovery and preparedness | Emphasises leadership and decision-making |
| Often led by operational teams | Often led by senior leadership |
Getting Started with Crisis Management
- Review your current resilience frameworks — identify gaps in crisis leadership and communication.
- Engage senior stakeholders — crisis management must be owned at the top.
- Use ISO 22361 as a guide — tailor its principles to your organisation’s structure and culture.
- Train and test — run scenario-based exercises to build confidence and capability.
Understanding the fundamentals of crisis management is critical to ensure effective coordination throughout the response to an incident.
RiskReady’s Approach
At RiskReady, we help organisations understand crisis management so that they can embed effective practices into their resilience frameworks. Our ISO 22361 crisis management e-learning modules — are designed to be practical, accessible, and grounded in real-world challenges.
Related posts:
Behind the Scenes: Designing RiskReady’s Learning Experience
Decision-Making Under Pressure: What Crisis Teams Get Wrong (and How to Fix It)
ISO Spaghetti: Making Sense of the Standards You Keep Hearing About
What England’s World Cup night can teach you about crisis management (even if, like me, you couldn’t care less about football)