Lessons from the Frontlines of Corporate Crisis Management
At TNG, we’ve spent years watching even the most capable executives and CEOs make costly and, understandably, short-sighted decisions under the pressure of organizational crisis.
Our global security and intelligence firm is called upon when Fortune 500 CEOs face cyber breaches that threaten the future of their companies, when boards must navigate geopolitical crises that leave thousands of employees stranded, and when brilliant visionary leaders are confronted with decisions that will define the survival of their organizations.
Here’s what we’ve learned: the patterns never change. When a crisis strikes, even the most seasoned executives fall into the same traps that turn manageable problems into company-destroying disasters. We’ve seen it time and time again across the world.
These are the mistakes that keep happening, over and over.
The Information Trap That Kills Companies
The most common mistake C-Suite leaders make? Delaying action while waiting for perfect information.
We observe this often. CEOs postpone critical decisions for hours, even days, while waiting for one more data point or a sense of complete clarity in circumstances that evolve by the minute.
Consider a recent ransomware attack on one of our Fortune 100 clients. The CEO devoted eighteen hours to requesting increasingly detailed damage assessments as the attack continued spreading across their global network. By the time we received authorization to implement our containment protocol, what began as a manageable incident had escalated into a crisis spanning three continents.
The hard truth is that perfect information rarely exists in a crisis. Acting with 70% certainty is far more effective than waiting for 100% clarity that may never arrive. In most cases, delay proves more costly than imperfect action.
The Control Freak Problem
Under intense pressure, even experienced leaders can shift into what we call ‘command bunker mode’, wanting to see every update, approve every decision, and oversee every response. Though it may feel like leadership in the moment, it often creates paralysis rather than momentum.
We once observed a CEO who insisted on personally approving every external communication during a supply chain crisis. Every email, media statement, and customer update had to receive his sign-off. Meanwhile, the operations team remained idle, waiting for permission to fix problems they already knew how to solve.
The result? Customers, employees, and the media were left without information for hours while he focused on preparing press releases.
Effective crisis response demands swift, distributed decision-making. Authentic leadership is not about controlling every detail; it is about empowering your team to act decisively when it matters most.
When Your Priorities Become a Prison
Executives often know their stakeholder hierarchy by heart: shareholders first, customers second, employees third, and others last. In a crisis, though, rigid adherence to this order can create blind spots, and this hierarchy can become a trap.
One client confronted a workplace violence situation. The CEO’s first instinct was to focus on damage control for shareholders, including the stock price, liability exposure, and legal risk. Each of these concerns was legitimate. But as he concentrated on the financial impact, employees began posting on social media, families spoke to reporters, and the issue rapidly evolved into a PR crisis.
Crisis rarely respects standard priorities. Sometimes, employees must come first. Sometimes it’s customers: other times, the wider community. When leaders cling too tightly to their usual playbook, blind spots emerge, and those blind spots can turn an otherwise manageable crisis into a serious reputational threat.
The Silence That Screams
“We can’t say anything until legal clears it.”
Fear of saying the wrong thing often prevents executives from speaking up. We’ve seen CEOs go silent for days during a crisis, creating vacuums that quickly fill with speculation, rumors, and conspiracy theories, causing far more damage than any imperfect statement ever could.
Silence hits employees the hardest. In times of uncertainty, they’re eager to hear from leadership; yet, many C-Suite executives remain quiet internally while fixating on external messaging. It’s backwards thinking that erodes trust at the very moment it’s needed most.
Our simple rule is to over-communicate internally and move quickly externally. A first statement should not aim for perfection but for timeliness. Choosing silence is not a strategy; it is a failure of leadership.
The One-Person Bottleneck
Many CEOs see being indispensable as a strength, but in a crisis, that instinct can put the whole company at risk.
Too many leaders become single points of failure, personally bottlenecking every decision and communication. When everything depends on one person, even a short absence, whether from travel, illness, or overwhelm, can bring the entire response to a standstill at the very moment speed matters most.
We’ve seen major corporations stall during a developing crisis simply because their CEO was on a flight and no one else had the authority to make decisions. It’s a common blind spot, even for organizations that invest millions in operational redundancy. Too often, the same level of backup just isn’t built into crisis leadership, leaving the company more vulnerable than it needs to be.
You should establish deputy authority structures before you need them to ensure your response can function even when you are unavailable.
Read the story of a well-handled crisis here: That Night in October: A Lesson in Preparedness
Living in the Wrong Timeline
Executives often think in quarters and fiscal years.
Crises, however, move in hours and minutes. What feels manageable at 2 PM can be overwhelming and catastrophic by 6 PM. When leaders attempt to apply regular business planning cycles to crisis management, they quickly find that events are unfolding faster than their decision-making processes can keep pace.
Early in the COVID pandemic, this played out clearly. Many executives built “return to office” plans around two-week projections, while epidemiologists were already modeling year-long scenarios. Organizations that failed to align their planning horizons with reality during crises often ended up scrambling, always a step behind.
The lesson is simple: think in hours and days, not weeks and months, and design frameworks that can scale quickly rather than incrementally.
The Appearance Game That Backfires
When crises hit, executives often focus heavily on managing external perception while internal capabilities quietly erode.
Stock prices, media coverage, and regulatory attention can consume leadership’s energy, but if the organization’s health isn’t protected, external challenges inevitably worsen as internal systems start to falter.
We’ve seen companies pour enormous resources into crisis PR while their operational response remained strained and under-resourced. External messaging promised competence and control that didn’t exist internally, creating a credibility gap that often became more damaging than the original crisis itself. We encourage leaders to align outward communication with internal reality, because credibility is built on consistency, not optics.
Fix your insides first. Then worry about how it looks from the outside. You can’t fake competence when your house is burning down.
When There’s No Plan at All
Companies that enter crises without a structured response framework often stumble in predictable, damaging ways.
The first misstep is usually overlooking people. Without a plan, executives tend to focus on technical and financial damage while missing the human impact. In one chemical spill, leadership spent four hours calculating cleanup costs and regulatory exposure while employees sat evacuated in a parking lot with no information, no shelter, and no timeline. The employee crisis stretched on for months, long after the environmental cleanup was complete.
Second, they end up reinventing everything under pressure. We’ve seen even brilliant executives lose precious hours debating basic protocols that could have been settled long before the crisis. Who speaks to the media? When do we activate continuity sites? How do we reach employees if normal channels go down? Without predetermined answers, these debates become time-consuming when speed matters most.
Third, they often create legal complications. Without established frameworks, executives may make statements that unintentionally increase liability exposure. In one case, a CEO’s well-intentioned transparency during a data breach accidentally waived attorney-client privilege and complicated regulatory negotiations for months. We encourage leaders to establish legal guardrails in advance, ensuring that communication remains transparent while protecting the organization.
Finally, they underestimate the cascading effects. A supply chain problem quickly becomes a customer service issue, then a media problem, and ultimately an investor confidence issue, all while leadership is still trying to understand the original issue. We encourage leaders to anticipate how one challenge can ripple across the organization, enabling them to stay ahead of the curve.
What Even Great Plans Miss
Even the most sophisticated crisis plans have blind spots that only reveal themselves under real-world pressure. After reviewing hundreds of plans across industries, we’ve found the same gaps appear again and again.
Plans often fight the last war.
Most are shaped by recent experiences or high-profile industry events. We’ve seen financial services plans written after 2008 focus heavily on market volatility while overlooking cybersecurity. Likewise, manufacturing plans developed in response to safety incidents often focus on operations but overlook supply chain vulnerabilities.
Plans often assume infrastructure works.
Nearly every framework we review assumes that power, communication, transportation, and banking systems will remain intact. When Hurricane Maria hit Puerto Rico, we watched as multinationals realized too late that their crisis communications had failed once the towers were destroyed and internet access was down for weeks. We encourage leaders to pressure-test their plans against the possibility of losing critical infrastructure.
Plans often ignore human behavior.
Too many assume people will act rationally under extreme stress. They don’t account for a seasoned crisis manager being emotionally compromised when the event impacts their family, or key personnel becoming unreachable due to personal emergencies. We encourage leaders to factor human vulnerability into planning, because resilience isn’t just about systems, it’s about people.
Plans are often written by people who won’t execute them.
Senior executives or consultants may design the framework, but middle managers and frontline employees are ultimately responsible for implementing it. That disconnect can lead to plans that appear strong on paper yet struggle in practice. Partnering with the people closest to execution helps ensure the plan is both realistic and actionable.
Plans often focus on containment rather than recovery.
Most excel at guiding immediate response but provide little direction for the longer-term path forward. How do you rebuild employee confidence? When do you resume normal operations? How do you regain customer trust? Too often, those questions go unanswered. Strong crisis leadership includes both response and recovery, ensuring the organization can emerge more resilient on the other side.
The Simple Stuff That Isn’t
Some of the most damaging failures happen over details so basic that everyone assumes someone else has already taken care of them.
Phone trees may seem basic, but they can be delayed for hours when contact information is outdated, stored on obsolete systems, or formatted incorrectly across platforms. We saw one client’s emergency system fail during a weekend incident because it was designed for office landlines, while executives relied only on mobile devices.
Keys and access codes may seem minor, but in a crisis, they become critical, and too often their management is informal or poorly documented. When we were finally called in, we saw security teams unable to access emergency supplies during a facility lockdown because the only person with the storage codes was quarantined at home.
In another case, a company was unable to activate backup servers because the credentials were stored on the very systems that had been compromised. These are the kinds of minor oversights that quickly become major obstacles without built-in redundancy.
Time zones add layers of complexity that global organizations often underestimate. A crisis that begins in Asia during business hours unfolds in Europe by evening and reaches the Americas overnight. Decision authority, communication protocols, and resource availability shift through this cycle in ways most plans never fully address.
Language barriers compound the challenge, even within English-speaking organizations. Technical terminology, urgency levels, and authority relationships don’t translate cleanly across cultures. We’ve seen critical safety information misunderstood because English suggestions were taken as optional guidance elsewhere. Building cross-time-zone and cross-language clarity into plans is essential for true global resilience.
Vendor relationships often reveal unexpected fragility during times of crisis. Emergency service providers may be overcommitted during widespread incidents. Backup suppliers may lack the needed capacity or the right contracts. Legal agreements that seem straightforward in normal operations can quickly become complicated under emergency conditions.
Communication technology fails in unexpected ways. Email servers overload, video platforms crash under demand, messaging apps require internet connectivity, and satellite phones necessitate training that most executives never received. “Staying in communication” becomes complex when primary systems fail.
Media management moves faster than executives realize. Crises that seem contained internally become public knowledge within minutes through social media, employee communications, or automated monitoring. Information control is actually the most complex aspect of crisis management.
What Separates Survivors from Casualties
After many years in this work, we know crisis response capability isn’t built in the middle of an event; it’s built in the quiet years beforehand.
The executives who navigate crises successfully share a common discipline: they prepare and rehearse regularly. Not just tabletop exercises, but full simulations that test decision-making under pressure, validate communication protocols, and ensure leadership redundancy.
They invest in intelligence infrastructure. They build systems that provide early warning and situational awareness, understanding that prevention costs less than response.
They cultivate trusted advisor networks. They maintain relationships with external experts who can provide unbiased counsel when internal perspectives get compromised by stress and proximity.
They prioritize resilience over efficiency. They accept that some redundancy and “inefficiency” during normal times pays massive dividends when a crisis strikes.
Most importantly, they understand that crisis leadership is fundamentally different from normal business leadership. Skills making you successful in stable environments can become liabilities when everything falls apart.
Why This Matters
Every crisis carries both danger and opportunity. The executives who emerge stronger are those willing to resist their instincts, challenge assumptions, and remember that their job isn’t about protecting their own comfort, but about ensuring organizational survival and recovery.
These mistakes aren’t character flaws. They’re natural human responses to extreme stress and uncertainty. Recognizing them is the first step to overcoming them. In crisis, self-awareness isn’t just a leadership virtue; it’s an organizational lifeline.
Through our work with Fortune 500 companies during major crises across six continents, we’ve seen that the organizations most likely to survive and thrive are those preparing for what they hope never happens.
Because when everything goes wrong, preparation is what matters most.
