Crisis management and business continuity in OSH

Crisis management organises decisions in situations that threaten an organisation. Business continuity prepares for maintaining or recovering priority activities. In OSH, both must ensure that responding to a disruption does not expose people to uncontrolled risks.

In brief

Continuity prepares the recovery of priority activities; crisis management coordinates exceptional decisions. Both must integrate OSH, define responsibilities and safe working conditions, test alternatives and verify recovery, without confusing continuity with production at any cost.

Contents
  1. Emergency, crisis and continuity: different functions
  2. Identify critical activities and dependencies
  3. Integrate prevention into alternative working arrangements
  4. Responsibilities and communication during a crisis
  5. Test the plan and return to normal
  6. Hypothetical example: a prolonged system outage
  7. Related concepts
  8. References

A–Z dictionary →

Emergency, crisis and continuity: different functions

Emergency response focuses on protecting people and controlling immediate consequences. Crisis management coordinates wide-ranging decisions under uncertainty. Continuity determines which activities must be maintained or recovered, with which resources and under what conditions.

A disruption can activate all three areas, but does not always do so. A system outage may affect service without requiring evacuation; a fire may first call for an emergency response. Agreeing activation criteria avoids unnecessary meetings and, above all, delays when a situation requires a quick decision.

Identify critical activities and dependencies

Analyse what happens if an activity is interrupted and how its consequences develop over time. Identify the people with necessary skills, facilities, supplies, contractors, communications and data on which it depends. Priorities must consider protection of people and obligations, as well as commercial impact.

ISO 22301 provides a business continuity management framework, but a certificate does not replace analysis of the site. An alternative is viable only if the resources and conditions needed to use it exist. Document assumptions: having another building or supplier does not demonstrate that it can take over the activity when required.

Integrate prevention into alternative working arrangements

Relocation, an extra shift or a manual procedure can introduce risks different from the usual ones. Before adopting them, review facilities, equipment, workload, fatigue, accessibility and coordination with other companies. Also consider access to preventive information if the network fails.

In Spain, the LPRL requires emergency planning and management of work-related risks. The need to maintain service does not remove those obligations. Define minimum conditions for starting or continuing each alternative and who verifies compliance. If essential measures are missing, there must be a clear decision on suspending or reducing activity.

Responsibilities and communication during a crisis

Establish who assesses the situation, who makes decisions and who informs staff, emergency services, suppliers and other parties. Arrange deputies and alternative channels. A telephone list is useful only if it is current and people understand their role.

Communicate brief, consistent and verifiable instructions: what is happening, what each group must do and when information will be updated. Distinguish confirmed facts from unresolved information. Include other shifts, contractors and people with specific needs. Keep a record of significant decisions and their reasons to support follow-up and subsequent review.

Test the plan and return to normal

Combine tabletop exercises with proportionate tests of communications, resources and recovery. Check actual dependencies without creating unnecessary exposure. HSE highlights the importance of rehearsed responsibilities and not resuming work while serious danger remains.

Returning requires explicit criteria: usable facilities, verified safeguards, available information and prepared staff. Restoring electricity or reopening the building is not enough. Review problems observed, assign improvements and confirm completion. A plan that nobody can execute or that depends on one person needs to change.

Hypothetical example: a prolonged system outage

An organisation temporarily loses access to the applications used to coordinate maintenance work. Its alternative arrangements allow only certain tasks to continue using previously available and verified information. Interventions requiring information that cannot be recovered are postponed until it is available.

The crisis team coordinates priorities and communication; operations and prevention check the conditions for each task. When the system returns, completed activities are reconciled and discrepancies resolved before the episode is closed. Continuity is demonstrated by maintaining controlled, recoverable activity, not by carrying out all the work originally planned.

References

  1. ISO. ISO 22301:2019, Business continuity management systems. Official source
  2. HSE. Emergency procedures. Official source
  3. BOE. Law 31/1995 on Occupational Risk Prevention. Official source

Editorial information

Publication date: 19 October 2026.

Editorial responsibility: Sabentis Editorial Team.

Author: Pablo RodríguezLinkedIn

Executive Vice President of the ORP International Foundation and Chief Financial Officer of Sabentis.

Request a Demo

Discover all that Sabentis can do for your organization.

Try Sabentis

request a demo
stars 5
GetApp Software Advice Capterra