Crisis Readiness: The Board's Role in the First 72 Hours

In a corporate crisis response, the first 72 hours are often the “defining window” for a company’s reputation and long-term viability. While the executive team is on the front line managing operational fires, the board of directors must occupy a unique space: providing a steady hand of governance without micro-managing the response.

The goal for directors is to ensure the response remains aligned with the company’s values and legal obligations, even as information remains fragmented and the pressure for an immediate statement mounts.

Hour 0–12: Escalation and Activation

The board’s first priority is to confirm that the pre-defined crisis protocols have been triggered correctly. In the initial hours, the focus is on situational awareness rather than decision-making.

• Triggering the Board Liaison: A single point of contact—often the Board Chair or the Chair of the Audit Committee—should be embedded as a liaison to the executive crisis team. This ensures the full board receives a “single version of the truth” and prevents directors from making individual, uncoordinated enquiries to management.
• Conflict Audit: The board must immediately assess if any senior executives are “implicated” in the crisis (for example, in cases of financial fraud or workplace misconduct). If so, the board may need to transition from an oversight role to a direct leadership role, potentially appointing an interim lead.
• The “Holding” Stance: Ensure that the first public statement is a “holding line”—acknowledging the event, expressing empathy, and outlining immediate safety or containment measures—rather than a definitive declaration of cause.

Hour 12–36: Strategic Guardrails

Once the crisis is contained, the board’s role shifts to providing the “strategic guardrails” for the executive response. This is the period where the pressure to “do something” is at its peak, and the board must ensure the company doesn’t sacrifice its long-term integrity for a short-term PR win.

• Evidence Preservation: In the age of digital discovery, the board must ensure that legal counsel has issued immediate “data freezes.” This includes preserving emails, chat logs, and server data to protect the company in the inevitable post-crisis litigation or regulatory inquiry.
• Resource Assessment: Ask the “sustainability” question: Does the crisis team have the stamina for the long haul?Boards often see executive teams burn out within 48 hours. Directors should push for the onboarding of external advisors—forensic accountants, specialist legal counsel, or crisis PR firms—to supplement internal capabilities.
• Value-Based Decision Making: Boards should act as the “conscience” of the organisation. Every major decision made by the crisis team should be stress-tested against the company’s stated purpose and values. If the company claims to put “safety first,” the board must ensure that financial considerations are not being prioritised over physical risk mitigation.

Hour 36–72: Stakeholder Orchestration

By the third day, the “information vacuum” will have been filled by social media speculation and analyst reports. The board must now look outward, ensuring that key relationships are being managed with transparency.

• Direct Investor Outreach: While the CEO focuses on customers and employees, the Board Chair or Senior Independent Director should engage directly with major institutional investors. These stakeholders want to know that the board is exercising “active oversight” and that the long-term investment case remains intact.
• Regulatory Alignment: Ensure that mandatory notifications to bodies such as the Financial Conduct Authority (FCA) or the Information Commissioner’s Office (ICO) have been made within the required timeframes. A secondary crisis—failure to report—is often more damaging than the primary event.
• The Internal Feedback Loop: Employees are your most critical advocates. The board must ensure that internal communications are happening before or simultaneously with external ones. If staff are learning about their company’s fate via news alerts, the board has failed in its duty of care.

Avoiding the Micro-Management Trap

One of the greatest risks during these 72 hours is “Director Overreach.” When high-achieving individuals feel a lack of control, they tend to start “playing the game” rather than “coaching from the sidelines.”

The board’s mandate is to verify, not execute. A board that begins drafting tweets or calling warehouse managers directly only creates confusion and undermines management confidence. The board’s questions should be “what” and “why,” while management’s focus is “how.”

“In the first 72 hours, the board doesn’t need to have all the answers; they need to ensure the company is asking the right questions.”

Preparing the Post-Crisis Period

As the 72-hour mark approaches, the board should already be thinking about the recovery phase. This involves commissioning an independent “root cause” analysis and planning for a future board session dedicated exclusively to the lessons learned.

A crisis is a test of a company’s “governance muscle.” Those who have exercised that muscle through tabletop simulations and clear delegation of authority will emerge with their reputation and their board-executive relationship, not just intact, but strengthened.