A Crisis Management Team (CMT) provides enterprise-level leadership when a situation requires coordination, priorities, and decisions beyond normal management arrangements.
Its purpose is not to manage every aspect of the response.
Business and operational managers should continue managing their areas. Specialist response teams should continue handling the activities for which they are responsible. The CMT should remain focused on the organization-wide consequences of the crisis and the strategic decisions required to address them.
This separation of responsibilities is essential. A CMT that becomes absorbed in operational management can lose the strategic perspective it was created to provide.
1. What Is the Role of the Crisis Management Team?
The CMT should provide direction across the organization during a crisis.
Its responsibilities may include:
- stablishing crisis objectives and enterprise priorities;
- maintaining an organization-wide view of the situation;
- assessing emerging risks and consequences;
- making significant decisions under uncertainty;
- resolving competing organizational priorities;
- determining major resource priorities;
- coordinating stakeholder considerations;
- overseeing crisis communication;
- and providing strategic direction for recovery.
The CMT should concentrate on matters requiring enterprise-level authority or coordination rather than decisions that can appropriately remain within individual business units or operational teams.
2. Who Should Be on the CMT?
The CMT should normally be a small strategic team, not a meeting of every senior manager in the organization.
Its permanent membership should reflect the organization’s governance structure and the types of enterprise-level decisions that may need to be made during a crisis.
Core representation may include executive leadership and functions responsible for areas such as communications, people, legal and regulatory considerations, finance, risk, security, or technology where these are relevant to strategic crisis decision-making.
Business units require a different approach.
The manager responsible for an affected business unit should normally remain focused on managing that business and its response. Removing the unit manager from that role to participate continuously in CMT meetings can weaken operational management at exactly the time it is most needed.
Instead, an appropriately senior representative should represent the business unit at the CMT when required.
That representative should be able to:
- communicate high-level business impacts, priorities, and constraints;
- raise matters requiring enterprise-level decisions;
- represent the needs and perspective of the business;
- understand CMT priorities and decisions; and
- ensure those decisions are communicated back into the business.
The representative supports the connection between the CMT and the business. The representative does not replace the business-unit manager.
3. CMT Leader and Core Responsibilities
The CMT Leader is responsible for keeping the team focused on strategic leadership.
The leader should ensure that the team establishes priorities, understands significant uncertainties, identifies decisions requiring attention, considers consequences and trade-offs, and assigns clear actions.
Individual CMT members bring different responsibilities and expertise, but the team also carries collective responsibility for maintaining an enterprise perspective.
The CMT should continually ask:
What requires our attention and authority, and what should remain with the business or operational teams?
That question helps prevent unnecessary escalation of operational detail into the CMT.
4. CMT vs Business and Operational Management
Clear interfaces between the CMT, business management, and operational response teams are critical.
Operational teams may be containing a cyberattack, restoring technology, managing a facility emergency, protecting employees, or implementing continuity arrangements.
Business managers should continue managing business priorities, people, customers, resources, and continuity within their areas.
The CMT operates above these activities, addressing matters that require an organization-wide perspective.
Information should therefore move upward from business and operational teams so the CMT understands impacts, risks, constraints, and decisions required.
CMT objectives, priorities, and decisions should move downward so that business and operational activity remains aligned with enterprise direction.
The CMT should provide direction without unnecessarily taking over responsibilities that belong elsewhere.
5. Alternates and Specialist Support
Crisis arrangements should not depend on one individual being available.
Critical CMT roles should have trained alternates who understand the role, possess appropriate authority, and participate in exercises.
The same principle applies to business representation.
Organizations should know who can represent an affected business if the normal representative is unavailable, while allowing the business manager to remain focused on managing the unit.
Specialist advisers can also join the CMT when required. Depending on the crisis, this may include cybersecurity, health and safety, regulatory, insurance, supply-chain, technical, investigative, or other expertise.
Specialists should provide information and professional advice without unnecessarily expanding the permanent CMT.
6. Making the CMT Work in Practice
A documented organization chart does not create an effective Crisis Management Team.
Members and representatives need to understand their authority, responsibilities, interfaces, and information requirements.
Exercises should test whether:
- the right matters reach the CMT;
- operational detail remains at the appropriate level;
- business representatives can provide the information leadership needs;
- strategic decisions reach the people responsible for implementation;
- roles and authority remain clear under pressure; and
- the CMT maintains an enterprise perspective.
Ambiguities identified during exercises should be corrected before a real crisis exposes them.
Strategic Leadership, Not Operational Takeover
An effective CMT does not succeed by taking control of every response activity.
Business managers need to manage the business. Operational teams need to manage the response. Representatives and specialists need to provide the CMT with the information and expertise required for enterprise-level decisions.
The CMT’s responsibility is to provide strategic direction, enterprise priorities, coordination, and decision-making across the organization.
The CMT should lead the organization through the crisis without taking over the management of the business.
For professionals seeking a structured learning path, the online crisis management course Mastering Crisis Management with ISO 22361 explores crisis leadership, team roles, decision-making, communication, exercises, and organizational crisis capability in greater depth.
The Professional Crisis Management Toolkit provides editable resources supporting Crisis Management Team governance, role definition, decision-making, communication, exercises, and continual improvement.
Independent Resource Notice: Crisis Readiness Pro resources are independently developed by Shalom David and aligned with ISO 22361 principles where applicable. They are not ISO publications and are not affiliated with, endorsed by, approved by, or certified by the International Organization for Standardization (ISO).