Prompt

You are a crisis management consultant developing a comprehensive crisis response and business continuity plan for [ORGANIZATION].

Create a complete crisis management framework:

## Crisis Identification & Classification

**Crisis Types & Scenarios:**
- Natural disasters: [Earthquakes, floods, hurricanes, wildfires]
- Cyber security incidents: [Data breaches, ransomware, system failures]
- Public health emergencies: [Pandemic, disease outbreak, contamination]
- Financial crises: [Market crash, liquidity crisis, customer loss]
- Operational disruptions: [Supply chain failure, key personnel loss]
- Reputational crises: [PR disasters, social media backlash, scandals]
- Regulatory/legal issues: [Compliance violations, lawsuits, investigations]

**Crisis Severity Levels:**
- Level 1 (Minor): [Local impact, minimal disruption, routine response]
- Level 2 (Moderate): [Regional impact, significant disruption, coordinated response]
- Level 3 (Major): [Widespread impact, severe disruption, full activation]
- Level 4 (Catastrophic): [Enterprise-wide impact, existential threat, maximum response]

## Crisis Response Organization

**Crisis Management Team Structure:**
- Crisis Leader: [CEO/Senior Executive] - Overall command and external communication
- Operations Manager: [COO] - Business continuity and recovery coordination
- Communications Director: [CCO/PR] - Internal and external messaging
- HR Director: [CHRO] - Employee safety and workforce management
- IT/Security Manager: [CIO/CISO] - Technology and cybersecurity response
- Legal Counsel: [General Counsel] - Legal and regulatory compliance
- Finance Manager: [CFO] - Financial impact and resource allocation

**Activation Procedures:**
- Initial alert and assessment: [Who can trigger, notification process]
- Team assembly: [Contact methods, backup contacts, assembly locations]
- Situation briefing: [Information gathering, impact assessment]
- Response level determination: [Escalation criteria, approval authority]
- Action plan activation: [Resource mobilization, task assignments]

## Business Impact Analysis

**Critical Business Functions:**
- Function 1: [Description] | RTO: [X hours] | RPO: [X hours] | Priority: High/Med/Low
- Function 2: [Description] | RTO: [X hours] | RPO: [X hours] | Priority: High/Med/Low
- Function 3: [Description] | RTO: [X hours] | RPO: [X hours] | Priority: High/Med/Low

**Dependencies Mapping:**
- Technology dependencies: [Critical systems, data, infrastructure]
- Personnel dependencies: [Key roles, specialized skills, minimum staffing]
- Supplier dependencies: [Critical vendors, alternate suppliers, contracts]
- Facility dependencies: [Essential locations, alternate sites, equipment]
- Financial dependencies: [Cash flow, credit lines, insurance coverage]

**Impact Timeline:**
- Hour 1-4: [Immediate impacts and responses required]
- Hour 4-24: [Short-term impacts and stabilization needs]
- Day 1-7: [Medium-term impacts and recovery actions]
- Week 1-4: [Long-term impacts and full restoration]

## Response Procedures & Protocols

**Emergency Response Procedures:**
- Life safety protocols: [Evacuation, medical response, security measures]
- Damage assessment: [Safety inspection, operational assessment, financial impact]
- Resource mobilization: [Personnel, equipment, facilities, finances]
- Stakeholder notification: [Employees, customers, suppliers, regulators]
- Media management: [Initial response, ongoing communication, messaging]

**Communication Protocols:**
- Internal communication: [Employee notification, management updates, team coordination]
- External communication: [Customer communication, supplier notification, regulatory reporting]
- Media relations: [Press releases, interviews, social media management]
- Stakeholder updates: [Investors, board, partners, community]

**Decision-Making Framework:**
- Authority levels: [Who can make what decisions at what levels]
- Escalation procedures: [When and how to escalate decisions]
- Documentation requirements: [Decision logging, rationale, approval]
- Review and approval: [Decision validation, sign-off procedures]

## Business Continuity Strategies

**Continuity Options by Function:**

**Technology Continuity:**
- Backup systems: [Redundant infrastructure, cloud failover, data recovery]
- Remote work capability: [VPN access, collaboration tools, security measures]
- Communication systems: [Phone, email, video conferencing alternatives]
- Data protection: [Backup procedures, recovery testing, security measures]

**Workforce Continuity:**
- Remote work plans: [Work-from-home policies, equipment, connectivity]
- Cross-training programs: [Skill redundancy, succession planning]
- Flexible staffing: [Contractors, temporary staff, outsourcing]
- Employee support: [Safety, health, family considerations]

**Supply Chain Continuity:**
- Alternate suppliers: [Backup vendors, emergency contracts, stockpiling]
- Inventory management: [Safety stock, critical materials, distribution]
- Logistics alternatives: [Shipping methods, routes, warehouses]
- Quality assurance: [Standards maintenance, inspection procedures]

**Customer Service Continuity:**
- Service delivery models: [Remote service, reduced service levels, alternatives]
- Customer communication: [Status updates, alternative contact methods]
- Order processing: [Alternate systems, manual processes, prioritization]
- Support channels: [Phone, email, chat, self-service options]

## Recovery Planning & Procedures

**Recovery Phases:**

**Phase 1: Immediate Response (0-72 hours)**
- Life safety and security
- Damage assessment
- Emergency communications
- Critical system restoration
- Stakeholder notification

**Phase 2: Short-term Recovery (72 hours - 2 weeks)**
- Partial operation restoration
- Temporary facilities setup
- Supply chain reactivation
- Customer service restoration
- Financial stabilization

**Phase 3: Long-term Recovery (2 weeks - 6 months)**
- Full operation restoration
- Permanent facility repair/replacement
- Technology system restoration
- Process normalization
- Performance optimization

**Recovery Procedures:**
- Damage restoration: [Facility repair, equipment replacement, system recovery]
- Process restart: [Operational procedures, quality checks, performance monitoring]
- Staffing restoration: [Personnel return, training, productivity ramp-up]
- Customer reconnection: [Service restoration, relationship rebuilding, trust recovery]

## Testing & Training Program

**Testing Schedule:**
- Quarterly: [Desktop exercises, communication tests]
- Bi-annually: [Functional exercises, department-specific drills]
- Annually: [Full-scale exercises, cross-functional simulations]
- Ad-hoc: [Lessons learned implementation, new scenario testing]

**Training Components:**
- Crisis team training: [Roles, responsibilities, procedures, decision-making]
- General employee training: [Emergency procedures, communication, safety]
- Leadership training: [Crisis communication, decision-making, stress management]
- Specialized training: [IT recovery, media relations, regulatory compliance]

**Exercise Types:**
- Tabletop exercises: [Discussion-based scenario walkthroughs]
- Functional exercises: [Department-specific response testing]
- Full-scale exercises: [Complete response simulation with external stakeholders]
- Surprise drills: [Unannounced testing of specific procedures]

## Plan Maintenance & Improvement

**Regular Review Process:**
- Monthly: [Contact information updates, minor procedure adjustments]
- Quarterly: [Plan effectiveness review, lessons learned integration]
- Annually: [Comprehensive plan review, major updates, strategy alignment]
- Post-incident: [After-action reviews, improvement identification, plan updates]

**Continuous Improvement:**
- Feedback collection: [Employee input, external stakeholder feedback]
- Best practice research: [Industry standards, peer benchmarking]
- Technology updates: [New tools, system enhancements, capability improvements]
- Regulatory changes: [Compliance updates, new requirements, industry standards]

**Success Measurement:**
- Response time metrics: [Activation speed, decision-making efficiency]
- Recovery metrics: [RTO achievement, business function restoration]
- Communication effectiveness: [Stakeholder satisfaction, message clarity]
- Financial impact: [Cost containment, revenue protection, insurance claims]
- Learning metrics: [Training completion, exercise participation, competency]

Include specific procedures, contact information, and measurable objectives throughout.