Before the Crisis Arrives: How to Build a Crisis Preparedness Programme That Actually Works
There is a question I ask every new client before we discuss anything else: Show me your crisis preparedness programme. Not the document — the programme. The training records, the simulation results, the spokesperson assessment, and the stakeholder communication protocols have been tested under pressure rather than drafted in a meeting room.
In thirty years at senior level across Electronic Arts, Virgin Media, Deutsche Telekom and Etisalat, I have seen every variation of the answer. The most common is a folder. Sometimes, a well-designed folder. But a folder nonetheless — static, untested and quietly outdated from the moment it was printed.
That is not a crisis preparedness programme. That is a comfort object.
The Difference Between a Plan and a Capability
The fundamental error most organisations make is confusing documentation with preparedness. A crisis plan describes what should happen. A crisis preparedness programme builds the capability to make it happen — under pressure, with incomplete information, at speed, with people who are frightened and conflicted and being watched.
Those are entirely different things. And the gap between them is where reputations are lost.
A genuine preparedness programme has five components: threat identification, framework development, spokesperson training, simulation testing and retainer-based response capability. Most organisations have fragments of one or two of these. Very few have all five operating as a coherent system.
Threat Identification — Starting from Reality
Preparedness begins where risk assessment ends. Once an organisation has mapped its exposure across operational, regulatory and reputational dimensions, the preparedness programme is built around the specific threats that assessment has identified — not generic scenarios borrowed from industry templates.
The threats facing a Romanian manufacturing company with three production sites and a unionised workforce are fundamentally different from those facing a Bucharest-based fintech business operating across six European markets. Generic preparedness frameworks fail because they are built for an organisation that doesn't exist. Effective programmes are built around the organisation that does.
Framework Development — Building the Architecture
A crisis framework is the structural architecture of the organisation's response capability. It defines who has authority to declare a crisis, who sits on the crisis management team, what the escalation thresholds are, how decisions are made under time pressure, and how crisis communication is coordinated internally and externally from the first hour.
The framework must answer several questions that most organisations have never formally addressed. Who speaks to the media? Who speaks to regulators? Who speaks to employees? Who speaks to investors? Who coordinates between all of them? And critically, who has the authority to override the normal approval process when speed matters more than consensus?
In my experience, the authority question is the one that most consistently exposes the gap between what organisations believe their structure is and what it actually is under pressure. Hierarchies that function perfectly in normal operating conditions frequently collapse when the situation is faster than the decision-making process can accommodate.
The Crisis Communication Protocol
Within the broader framework, the crisis communication protocol deserves particular attention. It must specify the message approval process, the holding statement library, the stakeholder notification sequence and the media response procedure — all designed to function when the people implementing them are operating under significant stress.
The protocol should also address the digital dimension. Social media moves faster than any traditional media cycle. An organisation that has designed its communication response around a 24-hour news rhythm will be consistently behind in an environment where the narrative can be established and locked within hours.
Spokesperson Training — The Human Factor
A crisis framework without trained spokespeople is an architectural drawing without a building. The framework defines what should happen. Trained spokespeople are the ones who make it happen — in front of cameras, on the phone with journalists, in regulatory hearings, in town halls with frightened employees.
Spokesperson training for crisis scenarios is a specialist discipline that goes well beyond media training. It addresses decision-making under time pressure, message discipline when facts are incomplete, the management of emotional stakeholders, the coordination of legal and communication positions, and the specific challenge of speaking credibly when you cannot yet say everything you know.
I have sat in crisis training sessions with some of the most senior executives in European business. The ones who perform best under simulated pressure are rarely the ones who perform best in the boardroom. Presence, authority and analytical capability are valuable in normal conditions. Under crisis pressure, the qualities that matter most are composure, discipline and the ability to say less than you know without appearing to hide something.
Those qualities can be developed. But only through practice — not through reading a document.
Simulation Testing — The Only Real Measure of Preparedness
A preparedness programme that has never been tested is a hypothesis. The only way to know whether an organisation is genuinely prepared is to put it under pressure in a controlled environment and observe what actually happens.
Lighthouse PR designs and runs crisis simulation exercises at two levels. Tabletop exercises bring the crisis management team together around a realistic scenario and work through the decision-making and communication process in real time — identifying gaps, testing authority structures and building the shared understanding that allows teams to function cohesively under pressure.
Full simulation exercises add the external dimension — simulated media calls, social media activity, regulatory contact and stakeholder pressure — creating a more complete representation of what an actual crisis environment feels like. These exercises are deliberately uncomfortable. The discomfort is the point.
At Etisalat, we ran full crisis simulations annually across the regional operation. The first time we ran one, the gaps were significant — not in the framework, which was well-designed, but in the human responses to pressure. People deferred when they should have decided. They communicated when they should have listened. They managed upward when they should have managed outward. The simulation revealed all of this in a controlled environment. The next real incident we faced was handled measurably better as a result.
Retainer-Based Response Capability
The fifth component of a genuine preparedness programme is retainer-based access to senior crisis management expertise when a real incident occurs. Because even the best-prepared organisation benefits from an external perspective, specialist capability and the kind of clear-eyed assessment that is difficult to maintain when you are inside the situation.
Lighthouse PR provides retainer-based crisis response support for organisations across Romania and Southeastern Europe — available around the clock when an incident occurs, with senior consultant involvement from the first hour. Through its exclusive representation of both CCNE and Eurocom for Romania and Moldova, that capability extends across Central and Southeastern Europe when the situation requires it.
The Investment Argument
Crisis preparedness has a cost. It requires time, senior leadership commitment and the willingness to confront uncomfortable truths about organisational capability. Many leadership teams quietly decide that the probability of a serious crisis is low enough to justify deferring the investment.
That calculation changes the moment a crisis occurs. The cost of genuine preparedness is modest measured against the cost of an unprepared response — in regulatory consequence, in reputational damage, in client attrition, in the leadership time consumed by a crisis that could have been contained or prevented.
The organisations that invest in preparedness before they need it are the ones that navigate serious incidents with their reputations intact. The ones that don't are the ones that call us after the fact — beginning the harder and more expensive work of crisis recovery from a position of damage rather than strength.
The difference between those two outcomes is a decision made before the crisis arrives.
———
About the Author
Steve Gardiner (exec MBA) is a senior marketing and commercial leader at Lighthouse PR, bringing global experience from Accenture, Electronic Arts, Virgin Media, Telekom, and Etisalat. Latterly, as VP Business at Etisalat, he was responsible for $1.8B in revenue.
Today, Steve applies his strategic, marketing, and growth expertise to support Lighthouse PR clients as part of the agency’s service offering.
About Lighthouse PR
Lighthouse PR is a leading PR agency in Romania that works with a select number of organisations across Central and Southeastern Europe, delivering media relations, reputation management, crisis communications, social media and an extensive range of business continuity services — always led by senior practitioners.
We hold exclusive membership for Romania and the Republic of Moldova in both the Eurocom worldwide PR network and the CCNE, Europe's leading crisis communications network.
Lighthouse PR: Clear. Concise. Convincing.