Incident, emergency, crisis: knowing where you stand

The criterion is not size

A six-hour power outage at a production site is serious. It is not necessarily a crisis: you know what is happening, who to call and how long it will take. That is a severe incident, handled by a known procedure.

An unexplained anomaly in the accounting entries, found on a Friday evening, with no certainty about its origin, its extent, or whether it is accidental: that is a crisis, even though no machine has stopped.

ISO 22361 is explicit here: a crisis is characterised by uncertainty, instability and threat to strategic objectives — not by the scale of the damage.

The three levels and what they engage

Incident

A known deviation, an existing procedure, an identified owner. The organisation handles it without changing operating mode. Incident volume is a health indicator, not an alarm: an organisation reporting no minor incidents has a culture problem, not a reliability record.

Emergency

People's safety or the integrity of an asset is at stake. Priorities change: protect first, analyse afterwards. Emergency procedures — evacuation, lockdown, first aid — override any business consideration.

Crisis

Three conditions come together:

1. The situation exceeds the scope of existing procedures;
2. Information is incomplete, contradictory or shifting;
3. Reputation, compliance or viability is at stake.

At that point you are no longer applying a plan but deciding under uncertainty. That is a different job, which is why the crisis team is not the on-call team with extra chairs.

Write the thresholds before you need them

Human judgement at 3 a.m., under fatigue and hierarchical pressure, systematically underestimates severity. That is why escalation thresholds must be written, quantified and binding:

• Number of clients affected above X;
• Expected unavailability longer than Y;
• Any suspicion of personal data compromise;
• Any approach by a media outlet or an authority;
• Any event that could trigger a regulatory notification duty.

Any single criterion must be enough to trigger, with no debate. The debate happens after activation, never before: standing down a team convened for nothing costs an hour; activating too late costs the crisis.