Close Menu
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
More items
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
X (Twitter) LinkedIn
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
Login
LinkedIn Bluesky
Resilience Forward
Subscribe Now
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
Resilience Forward
You are at:Home»Managing resilience»Business continuity»The ‘anticipation’  aspect of the crisis management process (Page 12)
Business continuity

The ‘anticipation’  aspect of the crisis management process

July 9, 20255 Mins Read
A globe filled with business applications.

By Alberto G. Alexander

Anticipation in relation to crisis management is the process of identifying potential crises before they happen so that organizations can prepare and reduce risks. Anticipation is a key part of a crisis management capability and refers to the ability to detect critical developments within the organization or in its environment and to adapt proactively. In this article, crisis anticipation is described, and actions related to both the internal and external environments are presented.

Introduction

Crises are becoming more complex, increasingly transboundary, and interconnected. In a sense, crises have become endemic features of modern society. This evolution is partly due to long-term trends such as globalisation, mass communication, social fragmentation, and the changing geopolitical environment.

The potential impact of future crises is likely to increase. As Perrow recognised as far back as 1999, “As the complexity and coupling of ever-larger, complex systems continue to increase, small disruptions will lead to rapid escalation.” (1).

Before discussing crisis anticipation, it is important to define crisis. A crisis is an event with a low probability of occurrence but potentially high negative impact on the organization. It affects strategic objectives, reputation, and viability, and demands a swift resolution.

Crisis anticipation

In my previous Resilience Forward article, A five-stage framework for a crisis management process, the stages of crisis management are outlined. This article focuses on the first stage: anticipation.

A key aspect of anticipation is analysing both the internal and external environments surrounding the organization. The internal environment includes employees and organizational culture. The external environment consists of all stakeholders who have some vested interest in the organization but are not directly part of it. Stakeholders include regulators, industry bodies, media, and other companies in the value chain.

EnvironmentActions
InternalIdentify organizational weaknesses
Determine crisis management preparation
Evaluate organizational safety policies
ExternalDetermine the degree of industry vulnerability
Determine political stability
Consider globalisation implications
Assess technological implications

Figure one: the crisis anticipation process

Internal environment actions

Identify organizational weaknesses

Actions to identify weaknesses include:

  • Reviewing work processes: identify inefficiencies, rigidity, poor service, or weak leadership.
  • Talk to people! ‘Management by walking around’ builds trust, helps employees feel safe and valued, and reveals practical insights. People in the organization know the business better than any expert.

Determine crisis management preparation

Preparation involves:

  • Conducting risk assessments to identify potential crises that could impact the organization. Vulnerabilities need to be evaluated to analyze the organization’s weaknesses to determine which areas are most susceptible to crises. The organization should then rank potential crises based on their likelihood and potential impact.
  • Developing a comprehensive crisis plan which outlines procedures for responding to various potential crises. This also needs to allocate specific roles and responsibilities to team members, ensuring clear lines of authority and communication.
  • Establishing communication protocols.
  • Training teams and conducting simulations.

Evaluate organizational safety policies

Evaluate organizational safety policies by assessing clarity, comprehensiveness, accessibility, implementation, control measures, training, monitoring, and improvement processes.

External environment actions

Determine the degree of industry vulnerability

Industry vulnerabilities refer to flaws or weaknesses in a company’s systems, processes, or operations that can be exploited by external malicious actors, leading to security breaches, data loss, operational disruptions, or severe crises. These vulnerabilities can be in hardware, software, or even employee behaviour.

Steps for making an assessment of vulnerabilities include:

  • Identifying and categorising critical assets
  • Conducting vulnerability assessments
  • Calculating and prioritising risks.

Determine political stability

Political stability refers to consistent governance and rule of law. It enables planning and reduces risk of upheaval. Assessment should identify possible crisis scenarios based on national and international context.

Consider globalisation implications

Globalisation may expose firms to new risks and crisis triggers. To assess this area several things need to be considered. These include:

  • The organization’s current level of globalization,
  • The impacts on its operations and strategy, and
  • The risks and opportunities it faces. 

Factors to evaluate include: market access, competition, cultural differences, resource allocation, and the overall impact on the company’s value chain. 

Assess technological implications

Technological crises may stem from a variety of events, including accidents, pollution, software failures, or disruptions linked to natural hazards. Assess technology by examining:

  • Alignment with strategy
  • Process efficiency
  • Technology gaps and threats.

Anticipation and resilience

Anticipation is a proactive capability to detect and respond to emerging issues. It does not eliminate crises, but enables faster, more adaptive responses. The key capabilities offered by anticipation include:

  • Observing internal and external developments
  • Identifying threats
  • Preparing for uncertainty.

Effective anticipation enables organizations to identify early warning signs and act decisively. When embedded within a culture of resilience, it enhances preparedness, reduces risk, and strengthens long-term adaptability.

Reference

(1) Perrow, C. (1999), Normal Accidents: Living with High-Risk Technologies, Second edition, Princeton University Press, Princeton.

The author

Dr Alberto G. Alexander holds a PhD from the University of Kansas and an MA from Northern Michigan University. He is an MBCI, BCMS IRCA Lead Auditor, and Approved Tutor. He is Managing Director of the international consulting and managerial training firm Eficiencia Gerencial y Productividad SAC, based in Lima, Peru. He can be contacted at alexander@egpsac.com

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp
Previous ArticleBuilding a Responsive and Effective Crisis Management Programme
Next Article How organizations can prepare for the era of AI cyberwarfare

Related Posts

An exploding digital padlock illustrates the requirement for post-quantum cryptography.

Research breakthrough brings reliable quantum computers and Q-day closer to reality

September 10, 2026
A danger sign on a digital background.

New blob URL phishing technique evades detection by using legitimate Microsoft services

September 10, 2026
AI risks

Unmanaged AI workflows expose EMEA organizations to rising compliance and data risks

September 9, 2026
City skyline at sunset with bright light trails and a translucent blue smart-city grid overlay and GPS pins indicating locations.

AI world models: future possibilities for organizational resilience?

September 7, 2026
DRJ and BCI logos

DRJ and BCI publish guidance for governing, managing, and using AI in resilience

September 7, 2026
Decision making with over whelming information.

AI can find the vulnerability. Accountability still sits with your crisis leadership

September 7, 2026
Advertisement
Resilience First
This week's most read articles
Under pressure: An egg cracking under pressure applied by squeezing clamps form the sides.

Managing scenario testing for operational resilience

May 16, 2024
COSO logo

New COSO ERM guidance aims to help organizations with practical implementation

May 12, 2026
Close-up of a green-brown iris peering through a jagged tear in dark paper or wall material.

The blind spots in business continuity

September 2, 2026
Latest resources
A batch of Euro notes, some which are showing signs of being burned. Image © De Nederlandsche Bank - used under media permissions.

Identifying scenarios of interest under deep uncertainty

April 21, 2026
Load More

Subscribe to Updates

Get our Resilience Updates newsletter.

Most Popular Feature Articles
Three dark coloured light bulbs on a black background illustrate the concept of The Dark Triad in Crisis Management.

The Dark Triad in crisis management

Five stage crisis management framework

A five stage framework for a crisis management process

Blue interconnected gears and network nodes symbolizing automation and complex machinery.

Agent zero – the 2028 digital pandemic

Latest Reports
A futuristic red warning alert icon with glowing exclamation mark.

Cloud Security Alliance publishes Hugging Face Incident Initial Post-Mortem

A person hold a building door open for a person behind who is tailgating to get unauthorised access.

Security Culture: A Strategic Capability That Builds Resilience in a Volatile World

An identity icon with a map marker on it, indicating the concept of identity as a target for attackers. The icon is on a generic IT background predominantly in black and orange.

Identity-based approaches dominate initial access for ransomware attacks

A promo box for an article about resilience governance.
© 2026 Resilience Forward
  • About Resilience Forward
  • Newsletter
  • Newsfeed
  • Advertise
  • Call for Papers
  • Contact
  • Privacy Policy and Cookie Use
  • AI Use Policy

Type above and press Enter to search. Press Esc to cancel.

Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Ad Blocker Enabled!
Ad Blocker Enabled!
Our website is made possible by displaying online advertisements to our visitors. Please support us by disabling your Ad Blocker.

Sign In or Register

Welcome Back!

Login to your account below.

Lost password?