The purpose of a crisis management plan is to limit the consequences of an undesirable incident.

A crisis management plan is a simple and clear description of the actions that need to be taken in various crisis situations.

Preparing a crisis management plan puts your business in the best possible position to handle an undesirable event/incident, accident, or cyberattack. Actions should be taken for every identified event.

A crisis management plan should be easily accessible and easy to understand. It should outline its purpose and scope. Principles and concepts should be defined. There should be a list of the members of the crisis team, including roles and responsibilities.

A good crisis management plan defines how the crisis team is to be convened. It contains clearly defined alarm and contact/mobilisation lists. It should be designed so that an organisation can handle all situations based on this overall plan. It should contain scenario-specific checklists for different incidents.

A crisis management plan should contain instructions for following up with employees and relatives during and after an undesirable incident. Good internal and external communication are key factors for successful crisis management. A plan should include instructions for crisis communication and the name of the person responsible.

The number of drills that a company is obliged to conduct will depend on statutory requirements.
 
Practice and train as often as possible. Short training sessions are preferable to large-scale exercises. In any event, all companies should hold at least one drill a year, during which they practice the basics, such as notification, convening, and holding the first meeting.