Crisis Management

Crisis Management Team Roles and RACI

How to assign strategic, coordination, operations, communications, legal and support responsibilities during a crisis. It connects crisis management team roles with Crisis Management, accountable ownership and evidence that can be tested during exercises, reviews or real disruption.

A crisis-team RACI should remove ambiguity when time is limited. It must show who can make consequential decisions, who executes them, who supplies specialist advice and who must be informed—without turning every senior manager into an approver for every action.

Design the RACI around decisions

Start with decisions that matter during a crisis: activation and escalation, life safety, service prioritization, emergency expenditure, regulatory notification, workforce actions, public communication, customer commitments and stand-down. Assign one accountable decision owner wherever practical and distinguish advice from approval.

Separate strategic and operational command

Define the boundary between strategic crisis leadership and operational incident command. The operational team should manage tactical response within delegated limits; the crisis team should address enterprise priorities, external consequences, resource conflicts and decisions beyond those limits. Document the trigger for escalation between the two.

Make authority usable when leaders are absent

  • Name alternates for critical roles and define succession order.
  • Document financial, legal, HR, technology and communications authorities that change in crisis conditions.
  • Confirm alternates have system access, contact data and information needed to exercise their authority.
  • State when delegated authority activates, who records it and how it is revoked at recovery.

Protect decision traceability

Give the crisis scribe or log role explicit responsibility for recording timestamps, facts known at the time, assumptions, decisions, accountable owners and actions. The log should distinguish a decision from an action and preserve superseded decisions rather than silently overwriting history.

Test ambiguity, absence and conflict

Exercises should remove a primary leader, introduce competing business priorities and require at least one decision outside normal authority. Observe whether participants know who decides, whether escalation stalls, whether alternates can act and whether the decision log provides a defensible record.

Keep the RACI current

Review roles after organizational restructures, leadership or delegation changes, major incidents and exercises. Avoid personal names in durable role definitions where possible; maintain current contact and succession information in a controlled operational source that can be updated quickly.

Reviewer challenge

  • Is there more than one Accountable role for a time-critical decision?
  • Can the alternate actually approve and access what the role requires?
  • Which decisions have no explicit escalation threshold?
  • Can an independent reviewer reconstruct why a major crisis decision was made?

Design the RACI around crisis decisions, not job titles

A crisis RACI should identify who can make time-critical decisions when normal governance is compressed. Build it around decisions such as activation, life-safety escalation, site closure, customer notification, regulatory notification, emergency expenditure, technology isolation, alternate-site invocation and recovery prioritisation. For each decision, name one accountable role, the people who must be consulted when time permits, and the role that can act if the primary decision-maker is unavailable. Avoid assigning accountability to a committee because that can hide who is authorised to decide.

Validate authority under degraded conditions

Test the matrix when executives are unreachable, communications channels fail, a site is inaccessible or several incidents compete for the same specialists. Confirm deputies have the required system access, financial authority, contact information and situational data. Exercise observers should record delayed or disputed decisions and map them back to unclear authority, missing information or excessive consultation. The corrective action should change the role design, delegation or information flow rather than simply reminding participants to respond faster.

Evidence for assurance

Retain the approved role matrix, delegation references, acknowledgement or training records, exercise observations and actions from real incidents. A reviewer should be able to select a critical crisis decision and identify who is accountable, who can substitute, what information is required and how the organisation proved that the authority works in practice.

Run the crisis team as a decision system

Role design is stronger when it specifies the operating rhythm as well as names. Define who owns the common operating picture, who chairs decision cycles, who challenges assumptions, who records decisions and who converts decisions into tracked actions. Establish a cadence for situation updates, decision points and stakeholder communications, but allow the chair to shorten the cycle when life safety or tolerance breach is imminent.

Separate command, advice and execution

Technical specialists should provide options and consequences without accidentally becoming the accountable crisis authority. Likewise, the crisis team should set priorities and constraints without taking over detailed operational recovery. Document the hand-off between strategic direction, tactical coordination and operational execution so that an urgent instruction has an owner, deadline, acknowledgement and feedback path.

Measure whether the team can actually operate

Useful assurance measures include time from trigger to quorate team, time to first verified situation picture, time to first priority decision, percentage of critical decisions with an explicit owner and rationale, overdue actions, and decisions delayed by missing authority or data. Trend these measures across exercises and incidents. Persistent delay should trigger a change to delegation, information design or team structure rather than simply more training.

Operational validation checkpoint for Crisis Management Team Roles and RACI

For Crisis Management Team Roles and RACI, the most useful quality test is whether the organization can separate decision authority, coordination, information ownership and task execution so the crisis team does not become a large meeting with unclear accountability. A credible implementation should be supported by role purpose, decision rights, RACI by core activity, alternates, information inputs, escalation routes and handover expectations. Reviewers should be able to trace those artifacts to an accountable owner and to the critical service, scenario or decision they are intended to protect. If the evidence is old, generic or disconnected from the actual operating environment, treat the gap as an improvement item rather than assuming the documented approach will work during disruption.

A practical failure mode for Crisis Management Team Roles and RACI is assigning many people as accountable or responsible for the same decision, causing delay when everyone waits for consensus or assumes another person owns the action. Challenge that assumption in a walkthrough, exercise, test or evidence review that reflects realistic constraints. The corrective action is to use scenario walkthroughs to confirm who decides, who advises, who records and who executes each recurring crisis-management activity. Record the decision, owner, due date and proof required for closure so the improvement can be verified instead of remaining a narrative recommendation.

  • Decision: state what must be decided, triggered or recovered when this capability is used.
  • Evidence: identify the current artifact or test result that proves the capability exists for Crisis Management Team Roles and RACI.
  • Dependency: name the person, system, supplier, facility, data source or authority that can prevent the outcome.
  • Threshold: define the point at which the current approach is no longer sufficient and escalation is required.
  • Verification: specify how the owner will demonstrate that the corrective action materially improved the capability.

Connect this review to Crisis Management Team Structure: Strategic, Tactical and Operational Command so the decision does not sit in isolation. Crisis Management Team Roles and RACI should remain consistent with the wider BIA, recovery strategy, crisis governance and exercise evidence that apply to the same service.

Related BCM.Center resources: Crisis Management Team Structure: Strategic, Tactical and Operational Command.