Name your core team in writing, say who holds which post in a crisis, and give one trusted colleague the right to call a pause when you are angry.
Days 0–30Phase 1 · Diagnose and commit
Secure the core team and find where alarms stall and who sits outside the crisis plan.
- Name the core team in writing, give each person a crisis post and a deputy, so the secure base exists before it is needed.
- Pull the past year's incident logs and record the time from first internal awareness to senior leadership being told.
- List every stakeholder group, including contractors, suppliers and nearby communities, and mark which have a named owner in the current crisis plan.
- Appoint the one colleague who holds the right to call a pause when the CEO is angry, and tell the core team who it is.
Deliverable: A fortress map: core team posts and deputies, the escalation baseline, the stakeholder coverage list and the named pause-holder.
Gate: Baseline recorded for every KPI, every core-team post has a named deputy, and the pause-holder is confirmed in writing.
Days 31–90Phase 2 · Pilot and prove
Prove the danger line and calm presence at one high-risk site.
- Open one direct escalation line from the pilot site to senior leadership and publish it to everyone there, contractors included.
- Answer every call within an agreed time, log it, and tell the caller what happened as a result.
- Run one crisis drill with the leader physically present, speaking slowly and plainly, and test the pause rule during it.
- Check the drill against the stakeholder list: did contractors, suppliers and neighbours hear from their named owner?
Deliverable: A drill report listing every gap found, with an owner and a fix date for each, and the first quarter's danger-line log.
Gate: The line has received reports from junior staff or contractors, every report was answered and logged, and every drill gap has an owner before the next drill.
Days 91–180Phase 3 · Embed and scale
Extend the fortress rules to every site without turning the leader into a single point of failure.
- Publish the fortress rules: no decision or public statement while angry, the pause right, and a named owner for each stakeholder group.
- Route the danger line to a rota of senior leaders so alarms reach the top quickly even when the CEO is away.
- Train every manager to receive an alarm without penalty to the caller and pass it on the same day.
- Rewrite the crisis plan so it covers contractors, suppliers and nearby communities at every site.
Deliverable: A company crisis plan with full stakeholder coverage, a staffed escalation rota and published fortress rules.
Gate: Stakeholder coverage is complete in the plan, the line is live at every site, and time to escalate is reported by site against the baseline.
Month 7 onwardsPhase 4 · Sustain and renew
Keep the fortress open to the outside and the core team strong enough to hold.
- Run drills at rotating sites, some unannounced, and check that gaps found last time were closed.
- Review once a year whether the core team has become a bunker, by checking how the CEO first heard of each incident.
- Refresh core-team posts and deputies after any departure, and check the load on the core team before widening care further.
- Thank the first people to use the line each year in public, so raising an alarm stays normal.
Deliverable: An annual crisis readiness review to the board covering drill gap closure, time to escalate and the safety pulse.
Gate: Drill gap closure is tracked from one drill to the next, and the psychological safety pulse holds at or above the baseline.
Governance
sponsor: The CEO, because the secure base, anger mastery and calm presence are personal disciplines that cannot be delegated.
lead: The chief risk officer or head of operations, who runs the danger line, the drills and the crisis plan day to day.
forum: Monthly risk review in the leadership meeting, and the board risk committee every quarter.
decision_rights: The lead can open lines, schedule drills and assign stakeholder owners; changes to core-team posts and any public statement during a crisis go to the sponsor.
Cadence
Daily: During an active crisis, a short core-team stand-up at a fixed time, with the leader present where the trouble is.
Weekly: Every danger-line report is reviewed for response time and outcome, and callers are told what was done.
Monthly: The CEO and the pause-holder meet privately to review any decision taken in anger and any pause that should have been called.
Quarterly: A crisis drill at one site, rotated through the company, with gaps logged against owners.
Annually: The core team, deputies and the stakeholder map are refreshed and checked for gaps.
startup
The founder's household and two or three co-founders are the fortress, and the danger line is the founder's own phone, shared with every employee and freelancer. A co-founder holds the pause right.
scaleup
The line becomes a staffed rota with a log, and a written crisis plan names an owner for each stakeholder group. Drills run at least twice a year at different sites.
enterprise
The line runs across all sites and countries with an escalation rota, so no one person is a single point of failure. The board risk committee reviews time to escalate and drill gap closure, and asks to see the stakeholder map.