Good crisis decision making is mostly decided before the crisis begins. Leaders who know who holds authority, which functions cannot fail and how the team will test its own assumptions make better calls in the first hours than leaders who try to invent all of that under pressure. This guide walks through what to settle in advance, a process you can follow when facts are thin, the traps that derail smart teams, and how each decision connects to what you tell the public.
TL;DR
- Assign decision authority, backups and succession before an event, not during it.
- Use a repeatable loop (perceive, orient, predict, decide, act, communicate) and revisit it as facts change.
- Give every team member permission to pull an "emergency brake" when assumptions look wrong.
- Treat every decision as a communication decision: stakeholders judge you on what you do and how candidly you explain it.
- Rehearse the process with realistic scenarios so the first real run is not the first run.
Table of Contents
- What crisis decision making actually involves
- Settle authority before you need it
- A process you can follow with incomplete information
- The traps that derail capable teams
- Every crisis decision is also a communication decision
- Rehearse before it counts
- Where the decision and the reputation meet
- Get a decision process in place
- FAQ
- Sources
What crisis decision making actually involves
A crisis compresses time and information. CDC's crisis communication guidance describes decisions made with unavailable or incomplete information and in minutes, not months. That is the core difficulty: you rarely get to wait for certainty.
For an organization, the work is larger than one leader making one call. FEMA's continuity guidance treats this as a senior-management responsibility: setting policy, appointing the people who will carry it out, budgeting resources, providing succession and delegated authority, and identifying the essential functions that must continue or resume quickly.
Harvard Business School's Working Knowledge names five elements of organizational decision making during recovery: information gathering, strategy, combining long-term thinking with short-term action, clear communication inside and outside, and a review of policies and processes. Notice that two of the five are about communication and learning, not the decision itself.
Settle authority before you need it
The most common failure we see is not a bad decision. It is a delay while people work out who is allowed to decide.
FEMA recommends a clear succession line and predetermined delegations of authority, so designated people know who may make key decisions when normal channels are disrupted. Its planning guidance for cyber incidents adds the practical detail: effective plans name response-team members and backups, contact methods, roles, staged actions and overall responsibility, while staying flexible because incidents bring ambiguity and cascading effects.
Passing the baton
Think of a crisis as a relay race. The baton is the decision, and the risk is in the handoffs. If the CEO is unreachable, who takes it? If legal counsel needs to weigh in, at what point and for how long? Write the answers down. Our guide to building a crisis management framework covers how to structure this so it holds up under stress.
Clear intent, delegated execution
A UK practitioner's guide on leading through crisis describes "mission command": leaders provide clear intent and delegate execution so people closest to events can adapt as they change. In a company, that means the executive team states the objective (protect people, keep the service running, tell the truth quickly) and trusts operations, communications and legal to choose the means.
Coordination also has to reach beyond your walls. When incidents involve several agencies or jurisdictions, FEMA's guidance for public information officers notes that a Joint Information Center can support gathering, verifying, coordinating and disseminating accurate information. Private organizations can borrow the principle: one place where facts are verified and messages are aligned before anyone speaks.
A process you can follow with incomplete information
When the facts are partial, a process keeps you from freezing or lurching. Two frameworks are worth knowing.
The POP-DOC loop
Researchers describe POP-DOC as a continuous cycle: Perceive, Orient, Predict, Decide, Operationalize, Communicate. It links situational awareness to decisions and actions. The word "loop" matters. You do not finish the cycle once; you run it again as new information arrives.
In practice, that looks like this. Perceive: what do we know, and how do we know it? Orient: what does it mean for our people, customers and operations? Predict: where does this go in the next day, week and month if we do nothing? Decide: choose and record the call, the owner and the reason. Operationalize: assign the work. Communicate: tell those who need to know, and then return to perceive.
Setup, decision, follow-through
The nonprofit advisory group Bridgespan frames crisis decisions in three phases: setup, decision and follow-through. Setup clarifies roles, goals, scope and whose voices are affected. The decision phase calls for open debate and evidence examined for bias. Follow-through covers implementation, stakeholder communication, tracking outcomes and revisiting the decision only when significant factors change.
That last clause is useful. A team that reopens every decision each hour burns energy and confuses staff. A team that never reopens one is exposed when the facts shift. Agree in advance what counts as a significant change.
Triage first
Before you debate options, sort the problem. CISA's incident-management guidance describes analyzing an incident to categorize and prioritize it, correlate information, declare it when appropriate, select containment or continuity actions, and escalate to capable stakeholders. FEMA's risk framing is similar: identify hazards, determine acceptable relative risk, and prioritize and allocate resources.
A simple version for a leadership team: which decisions are urgent and irreversible, which are urgent but reversible, and which can wait? Spend your best minds on the first group.
Treat the plan as provisional
The same UK guide says strategic crisis management needs plans treated as living, provisional documents that are revised as the situation changes. A plan is a starting position, not a script.
The traps that derail capable teams
Smart people make poor decisions in crises for predictable reasons. Stern, Hart and McConnell, writing about high-performance crisis teams, explain that uncertainty, fluidity, high stakes and emotion can suppress deliberate reasoning and encourage premature agreement. That is groupthink in a sentence: the room converges because convergence feels like progress.
Their remedy is simple and worth adopting. Empower any team member to apply an "emergency brake" when an assumption or proposed policy looks incomplete, outdated, self-serving, catastrophic or unethical. Make it a stated rule at the start of every crisis meeting, and thank the first person who uses it.
A quick illustration
Imagine a regional healthcare group learns of a data breach on a Friday afternoon. The first instinct in the room is to wait until Monday for a full forensic picture. A junior compliance analyst raises a hand: the assumption that nothing is required until the facts are complete may be wrong. The team pauses, checks its notification obligations with counsel, and issues a short holding statement that evening. This is a hypothetical, but the pattern is real: the brake works only if the culture lets a junior voice use it. For sector specifics, see our piece on healthcare crisis communications.
Watch for the early signals
Many bad decisions are late decisions. Weak signals, such as a rise in complaints, an unusual social thread or a regulator's inquiry, were visible days earlier. Building a habit of reading them is part of decision quality, which is why we wrote about early warning indicators.
Every crisis decision is also a communication decision
Stakeholders do not see your deliberations. They see what you do and what you say about it. FEMA's guidance on communicating risk in an emergency asks leaders to communicate with honesty, candor and openness, convey uncertainty, and explain the measures being taken to fill knowledge gaps.
That gives you a workable test for any decision: can we explain it plainly to employees, customers, regulators and the press, including what we do not yet know? If the explanation sounds evasive, the decision may need another look.
FEMA's Ready Business guidance also says planning should cover communications with employees, authorities, suppliers, customers and the media, and that the plan should be exercised and revised. Put your approvals, spokespeople and holding statements in writing in advance. Our guides to the crisis communication plan and the crisis communications policy show what belongs in each.
Some decisions carry heavier communication weight than others. Workforce reductions are one, and the layoff communication plan is a good example of sequencing a hard decision well. Decisions made with litigation looming need counsel and communicators in the same room, as we explain in litigation communications.
Rehearse before it counts
A process you have never used will not hold up at 2 a.m. FEMA's business guidance explicitly calls for identifying critical operations, dependencies, staff, facilities and records, then exercising and revising the plan. Tabletop exercises are the least expensive way to do it. Pick a scenario, run the clock, force a decision with partial facts, then debrief on who decided, how long it took and what the team assumed. Our tabletop exercise scenarios give you nine to start with.
Afterward, ask the questions the Harvard piece raises: what did we learn, and which policies and processes should change? Prevention matters too, and reputation risk mitigation is where the review should feed.
Where the decision and the reputation meet
Once the immediate danger passes, the question shifts from "what do we do now?" to "what will people believe about us afterward?" Credible action is what answers it. A statement without a visible change behind it rarely rebuilds trust; a change that is explained candidly usually helps. Decide with that second audience in mind from the first hour.
Our perspective
After more than 30 years in crisis work, we have come to think of crisis decision making as a discipline of preparation, not heroics. The leaders who steady their organizations are rarely the ones with the best instincts on the day. They are the ones who decided earlier who would decide, how they would test their thinking and what they would say.
That is why we pair planning with real-time response. A readiness assessment shows where authority is unclear or where a single person is a point of failure. A rehearsed plan lets leaders spend the crisis on judgment instead of logistics. And when the call comes at midnight, a team that has already worked together, with a network of specialists behind it, can move with confidence and keep decisions tied to credible action.
We would rather help you build that muscle before you need it. But if you are already in the middle of something, the same principles apply: name the decision owner, set the loop, invite the brake, and tell the truth as you learn it.
Mark
Get a decision process in place
If your organization does not yet have clear decision authority, tested escalation paths and a communication plan tied to them, that is the work we do. We help executives, boards and nonprofit leaders assess readiness, write tailored crisis communication plans, and respond in real time when something breaks.
Talk with us about crisis management and communications support for your organization.
FAQ
What is the first step in crisis decision making?
Establish the facts you have and name who owns the decision. Then categorize and prioritize the situation so you spend your effort on what is urgent and hard to reverse. Record the decision, its reason and the point at which you will revisit it.
How do you decide when you do not have all the information?
Accept that incomplete information is the norm and use a loop rather than a single decision. Make the best call with what you know, state your assumptions, communicate uncertainty openly, and update as facts arrive. Pre-agreed triggers for revisiting a decision keep this from becoming constant second-guessing.
How can leaders avoid groupthink in a crisis?
Start each session by stating that anyone may apply an emergency brake when an assumption looks incomplete, outdated or unethical. Ask for dissent directly, and have someone argue the opposite case. Leaders should speak last so they do not anchor the room.
Who should be in the room when a crisis decision is made?
Keep the core group small: the decision owner, operations, legal, communications and a person responsible for the affected stakeholders. Name backups for each in advance, and bring in technical specialists as needed. Clear roles matter more than headcount.
How often should we practice?
At least once a year is a sensible baseline, and again after major changes in leadership, systems or operations. FEMA's guidance calls for exercising and revising the plan, so treat each exercise as a test of the process and not just of the document.
Sources
- Continuity Guidance Circular 1 (CGC 1), FEMA
- Prepare For Emergencies Now: Information for Businesses, Ready.gov
- It's Time to Reset Decision-Making in Your Organization, Harvard Business School Working Knowledge
- CRR Supplemental Resource Guide, Volume 5: Incident Management, CISA
- Leading Through Crisis: A Practitioner's Guide, UK Army
- The POP-DOC Loop: A continuous process for situational awareness and decision making, PMC
- From Principles to Practices: Structuring Your Decision-Making, Bridgespan
- Basic Guidance for PIOs, FEMA
- Planning Considerations for Cyber Incidents, FEMA and CISA
- Leading in a Crisis: Building High-Performance Teams, Government Technology
- Best Practices for Communicating Risk in an Emergency, FEMA
- CERC: Crisis and Emergency Risk Communication, Community Engagement, CDC