What Is a Crisis? Meaning, Types, Stages and Examples

A crisis is a sudden or fast-developing event that seriously threatens people, operations or reputation, and that needs urgent decisions under pressure and uncertainty. For an organisation, a crisis is bigger than a normal incident: it can't be handled by everyday procedures alone, and how leaders respond in the first hours shapes how quickly everyone recovers.

This guide explains what a crisis means for organisations, how it differs from an emergency or an incident, the main types and stages of a crisis, real examples, and what employers can do to prepare and respond.

If you are looking for personal help rather than workplace guidance: in the UK you can call NHS 111 and choose the mental health option, call Samaritans free on 116 123 at any time, or call 999 if a life is at risk.

Book a call with our team

Crisis meaning: what a crisis is for an organisation

The word crisis comes from the Greek krisis, meaning a decision or turning point. In English it was first used in medicine for the point in an illness when a patient would either recover or get worse. That idea still fits: a crisis is the moment when the decisions you make change the outcome.

Dictionaries define a crisis as a time of great difficulty, danger or confusion when problems must be solved or important decisions made. For an organisation, the definition is more specific. ISO 22361, the international standard on crisis management, describes a crisis as an abnormal or extraordinary event or situation that threatens an organisation and needs a strategic, adaptive and timely response to protect its viability and integrity.

In plain terms, a situation becomes an organisational crisis when it has these four characteristics:

• Serious threat: to people's safety, to the organisation's ability to operate, to its finances or to its reputation.

• Surprise or little warning: it arrives suddenly, or escalates faster than expected.

• Limited time: decisions have to be made quickly, often before all the facts are known.

• Uncertainty: the cause, scale or likely outcome is unclear, and normal procedures don't cover it fully.

The plural of crisis is crises, pronounced "cry-sees". So you would talk about one crisis, and plan for many possible crises.

Crisis, emergency, incident or disaster?

These words are often used interchangeably, but the difference matters when you write plans and decide who needs to act. An incident can grow into an emergency, and an emergency can become a crisis if it threatens the whole organisation.

Term	What it means	Typical example	Who usually leads
Incident	A disruption that normal procedures and local teams can handle	A minor injury, a short IT fault, a false fire alarm	Line manager or on-site team
Emergency	An immediate threat to life, health, property or the environment that needs urgent action	A fire, a medical emergency, a gas leak	On-site responders and emergency services
Major incident	A UK term used by emergency services and the NHS for an event that needs special arrangements beyond business as usual	A large transport accident or a mass casualty event	Emergency services and local resilience partners
Crisis	A situation that threatens the organisation as a whole and needs strategic decisions from senior leaders	A cyber attack that shuts down operations, staff caught up in unrest abroad	Senior leadership or a crisis team
Disaster	A large-scale event causing widespread loss or damage, often beyond what local resources can manage	Major flooding, an earthquake	Government, emergency services and aid agencies

The test many organisations use is simple: if the problem can be fixed by the people closest to it using normal procedures, it is an incident. If it needs senior leaders to make strategic decisions about people, operations or reputation, it is a crisis.

Warning signs that a situation is becoming a crisis

Most crises don't arrive fully formed. They grow from an incident, a weak signal or a problem that wasn't escalated in time. Watch for these signs:

• People are injured, missing or can't be contacted.

• The situation affects more than one site, team or country.

• Normal procedures aren't working, or nobody is sure which procedure applies.

• Key systems, suppliers or premises are unavailable, and there is no clear restoration time.

• Media, social media or customers are already talking about it.

• Regulators, the police or emergency services are involved.

• The facts keep changing, and decisions can't wait for certainty.

If two or more of these apply, it is usually time to escalate to your senior team and start your crisis procedures. Escalating early and standing down later is far better than escalating late.

Types of crisis

There are many ways to group crises. For employers, the most useful approach is to group them by cause, because each type needs different first actions.

The table below sets out the main types of crisis, common examples and what usually needs to happen first. Lone workers, people who work in the community and staff travelling abroad are often the most exposed, because they are harder to reach and locate.

Type of crisis	Examples	First priority
Natural hazards	Flooding, storms, extreme heat	Warn people in the affected area and confirm they are safe
Technology and cyber	Ransomware, IT outage	Contain the problem and switch to backup ways of working and communicating
Health	Pandemic, outbreak	Protect staff, follow public health guidance and keep people informed
Security and violence	Attack, unrest, threats	Tell people what to do immediately, locate them and confirm they are safe
Travel and geopolitical	Conflict, border closure	Locate travelling staff, check on them and plan movement or evacuation
Industrial accident	Fire, explosion, chemical leak	Evacuate, call emergency services and account for everyone
Supply chain and operational	Supplier failure, site loss	Activate your business continuity plan
Financial	Fraud, loss of funding	Secure assets and brief leaders, lenders and regulators
Reputational	Recall, misconduct, viral story	Establish the facts and respond honestly and quickly

Many real crises combine more than one type. A storm can cause a power cut, which causes an IT outage, which becomes a customer service and reputational problem.

Stages of a crisis

A crisis tends to follow a recognisable lifecycle, from the first warning signs to recovery. Different experts split that lifecycle into three, four, five or six stages. They describe the same journey in more or less detail, so use whichever model your team finds easiest to work with.

The four stages of a crisis

The four-stage model, based on the work of crisis researcher Steven Fink, is widely used by organisations.

1. Prodromal (pre-crisis) stage: the warning signs appear. These might be a severe weather warning, reports of unrest, unusual network activity or a growing complaint on social media. Some crises, such as an attack or explosion, give no warning at all.

2. Acute stage: the crisis breaks and starts to cause harm. This is usually the shortest and most intense stage. The priority is to assess what has happened, protect people and start your response.

3. Chronic stage: the response continues while the effects are worked through. This can last days, weeks or months. Leaders keep making decisions, keep people updated and deal with knock-on effects.

4. Resolution stage: the crisis is over and the organisation returns to normal, or to a new normal. This includes recovery, support for staff and a review of what happened.

The three stages of a crisis

Many organisations simplify the lifecycle into before, during and after:

1. Pre-crisis: identify risks, plan, train and watch for warning signs.

2. Crisis response: take control, protect people, make decisions and communicate.

3. Post-crisis: recover, support staff, review and improve your plans.

The five stages of a crisis

Researcher Ian Mitroff describes five stages, focused on what the organisation does:

1. Signal detection: spotting early warning signs.

2. Preparation and prevention: reducing the chance of a crisis and getting ready for one.

3. Damage containment: limiting the harm once it happens.

4. Recovery: getting back to normal operations.

5. Learning: reviewing what happened and improving.

How the stage models compare

3-stage model	4-stage model	5-stage model (Mitroff)	What to do
Pre-crisis	Prodromal	Signal detection, preparation and prevention	Assess risks, plan, train, monitor for warnings
Crisis response	Acute	Damage containment	Assess, alert, protect people, activate your plan
Crisis response	Chronic	Damage containment	Keep people updated, manage knock-on effects, make decisions
Post-crisis	Resolution	Recovery and learning	Recover, support staff, review and update plans

Some organisations use six stages, adding separate steps for early warning and assessment. Whatever model you use, the lesson is the same: most of the work that decides the outcome happens before the crisis starts.

Crisis examples

These well-known events show how different types of crisis affect organisations and their people.

• COVID-19 pandemic: a health crisis that closed workplaces, moved huge numbers of people to remote working and lasted far longer than most plans assumed.

• WannaCry ransomware (2017): a cyber attack that disrupted organisations around the world, including NHS services in the UK, where appointments and operations had to be cancelled.

• Global IT outage (July 2024): a faulty security software update caused Windows computers to crash worldwide, grounding flights and disrupting hospitals, banks and broadcasters, with no attack involved.

• Storm Arwen (2021): a severe storm that left homes and businesses in parts of northern England and Scotland without power for days, showing how weather can cut communications as well as access.

• Eyjafjallajokull volcanic ash cloud (2010): a volcanic eruption in Iceland closed much of European airspace and left travelling employees stranded far from home.

• Tylenol recall (1982): a reputational and product safety crisis in which a company recalled its product nationwide after deliberate contamination. It is still taught as an example of putting public safety first.

Each of these examples started with a different cause, but every organisation affected faced the same core questions: where are our people, are they safe, what do they need to do, and how do we keep operating?

How organisations prepare for a crisis

You can't prevent every crisis, but you can make sure your organisation is ready to act quickly and calmly. These steps form the basis of good preparation.

1. Assess your risks

List the crises most likely to affect your organisation, based on your locations, sectors, travel patterns and dependencies. Think about which would have the biggest impact on people and operations, and focus there first.

2. Write a clear plan

Set out who decides that a situation is a crisis, who is on the crisis team, how the team is contacted, and what happens in the first hour. Keep it short enough to use under pressure. Link it to your business continuity plan, which covers how you keep critical activities running. Our guide to writing a business continuity plan explains how the two fit together.

3. Agree roles and deputies

Name a crisis lead, a deputy and owners for people safety, operations, communications and IT. Make sure every role has a backup, because crises rarely happen at convenient times.

4. Keep contact and location data up to date

You can't protect people you can't reach. Keep mobile numbers, emergency contacts and travel itineraries current, and know who is working on site, at home, alone or abroad.

5. Set up more than one way to reach people

Plan how you will alert staff, confirm they are safe and update them as the situation develops. Crisis communication deserves its own plan, but the basic rule is to never rely on a single channel. Our article on why email alone isn't enough for emergency employee communication explains why.

6. Monitor for early warnings

Watch weather warnings, local news, security alerts and travel advice for the places your people work and travel. Early warning gives you time to act during the prodromal stage, before harm is done.

7. Train and exercise

Run tabletop exercises where the crisis team talks through a scenario, and live tests of your alerts and check-in process. Each exercise will show gaps you can fix before a real crisis.

8. Use tools that make response faster

Many organisations use crisis and incident management software so that alerts, location, check-ins and records sit in one place rather than across spreadsheets, phone lists and email chains.

What to do in the first hour of a crisis

The first hour of a crisis is when confusion is highest and decisions matter most. Use this checklist as a starting point and adapt it to your own plan.

Time	Action
First minutes	Make sure anyone in immediate danger is told what to do, and call 999 if needed
First minutes	Alert the crisis lead and agree that the situation is a crisis
First 15 minutes	Send a short, clear alert to everyone affected, on every channel you have
First 15 minutes	Ask people to confirm they are safe, and start a list of who hasn't replied
First 30 minutes	Bring the crisis team together, in person or online
First 30 minutes	Establish the facts: what happened, where, who is affected and what is still unknown
First hour	Decide priorities and assign owners for people, operations and communications
First hour	Follow up with anyone who hasn't confirmed they are safe
First hour	Brief senior leaders and agree when the next update will go out
Throughout	Keep a timestamped log of every decision, alert and action

Two principles help throughout: people's safety comes before everything else, and it is better to send a short update saying what you know and when you'll update again than to say nothing while you wait for certainty.

What UK law expects from employers

UK employers already have legal duties that apply when a crisis affects staff. Under the Health and Safety at Work etc. Act 1974, employers must protect the health, safety and welfare of their employees so far as is reasonably practicable. The Management of Health and Safety at Work Regulations 1999 require employers to assess risks and to set up procedures to follow if there is serious and imminent danger to people at work.

These duties don't stop at the office door. They apply to people who work alone, in the community, from home or abroad. Our guide to duty of care explains what that means in practice. Organisations named as responders under the Civil Contingencies Act 2004, such as emergency services and local authorities, have additional duties to plan for emergencies.

How Vismo helps organisations through every stage of a crisis

Vismo helps you spot a crisis early, reach your people fast, know who is safe and keep a record of everything you did.

• Alerts that reach everyone: mass notification sends the same message by SMS, voice call, email, app push, Microsoft Teams and Slack at the same time, and staff confirm they are safe with one tap so you can see who hasn't replied.

• The right message to the right place: geofencing targets alerts to people in an affected area, and can alert you when people enter or leave a zone.

• Early warning: threat intelligence flags incidents near your people and sites, so you can act during the warning stage rather than after harm is done.

• People working alone or on the move: the Vismo app and dedicated devices show employee locations on a live map, with SOS alarms and timed check-ins that escalate when a check-in is missed. See lone worker safety.

• Staff abroad: travel security helps you locate and contact travelling employees when a crisis hits overseas, and satellite devices keep people connected where there is no mobile coverage.

• The same steps every time: Vismo crisis and incident management software brings alerts, location and responses together. An administrator can start your crisis procedures as guided, timestamped steps with Vismo Workflows, so whoever is on duty follows the same process.

• A full record: audit trails log every alert, reply and action, ready for your post-crisis review.

A crisis often tests your business continuity arrangements too. Our guide to business continuity plans explains how to keep critical activities running. To see how alerts, location and response come together across larger events, explore critical event management.

Crisis FAQ

What is the definition of a crisis?

A crisis is a serious, often sudden situation that threatens people, operations or reputation and needs urgent decisions under uncertainty. For organisations, it is an abnormal event that can't be handled by normal procedures alone and needs a strategic response from senior leaders.

Is it crisis or crises?

Both are correct. Crisis is the singular and crises is the plural. You would say "a crisis" for one event and "crises" for more than one.

What are the 5 stages of a crisis?

A widely used five-stage model from Ian Mitroff covers signal detection, preparation and prevention, damage containment, recovery, and learning. Other models use three stages (before, during and after) or four (prodromal, acute, chronic and resolution).

What does a crisis situation mean?

A crisis situation is any situation where there is a serious threat, little time to decide and real uncertainty about what will happen next. At work, that could be a fire, a cyber attack, violence against staff or employees caught up in an emergency abroad.

How can you tell if your organisation is in a crisis?

Signs include people being hurt or unaccounted for, normal procedures not working, more than one site or team affected, emergency services or regulators being involved, and the situation attracting media attention. If several apply, escalate to your senior team.

What should employees do in a crisis at work?

Follow instructions from your employer and the emergency services, move to safety, confirm you are safe when asked, and keep your phone with you for updates. Don't share unconfirmed information, and tell your manager straight away if you or a colleague needs help.

Be ready before the next crisis

Every crisis is different, but the organisations that cope best have already agreed who decides, how they will reach their people and how they will confirm everyone is safe. Vismo helps you do all three, from the first warning to the final review.

Request a product demo