---
title: [CM] [BDCB] [E1] [C11] Post Crisis - Crisis Recovery
description: [CM] [BDCB] [E1] [C11] Post Crisis - Crisis Recovery
image: https://blog.bcm-institute.org/hubfs/BDCB%20Graphic%20Folder/BDCB%20CM%20Graphic%20Folder/%5BCM%5D%20%5BBDCB%5D%20%5BE1%5D%20%5BC11%5D%20Post%20Crisis%20-%20Crisis%20Recovery.jpg
---
.
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Crisis Management in Action: A Practical Implementation Guide for BDCB
# \[CM\] \[BDCB\] \[E1\] \[C11\] Post Crisis - Crisis Recovery
[![\[CM\] \[BDCB\] \[Full Banner\] Crisis Management in Action\_ A Practical Implementation Guide for BDCB](https://no-cache.hubspot.com/cta/default/3893111/399bc296-6bd2-4c03-8819-8bfe517a3e07.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/399bc296-6bd2-4c03-8819-8bfe517a3e07)
This chapter explains how **Brunei Darussalam Central Bank (BDCB)** should manage the transition from an active crisis to recovery and ultimately to an appropriate business-as-usual state.
It focuses on three important dimensions of post-crisis management: **transition from crisis to recovery; psychological first aid and stakeholder support; and reputation and brand management after a crisis**.
It also explains how these activities should feed into post-crisis evaluation, learning, and continual improvement.
The approach is aligned with **ISO 22361:2022 — Security and resilience — Crisis management — Guidelines**.
ISO 22361 addresses the establishment, maintenance, review, and continual improvement of strategic Crisis Management capability, including leadership, decision-making, communication, training, validation, and learning from crises.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdaa676d-372d-4ec3-804d-4ef4b3b7ef43)
[Moh Heng Goh](https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh) Oct 9, 2026
###### Crisis Management Certified Planner-Specialist-Expert
##### [![\[CM\] \[BDCB\] Legal Disclaimer Banner](https://no-cache.hubspot.com/cta/default/3893111/062c8304-1699-4f7b-a38d-f128d9815304.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/062c8304-1699-4f7b-a38d-f128d9815304)
### Chapter 11
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/fdaa676d-372d-4ec3-804d-4ef4b3b7ef43)
### Post-Crisis – Crisis Recovery and Post-Crisis Management at OCBC Bank
#### Purpose of This Chapter
[![\[CM\] \[BDCB\] \[E1\] \[C11\] Post Crisis - Crisis Recovery](https://no-cache.hubspot.com/cta/default/3893111/6f4529d8-d55d-4b83-b788-694b197407d4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6f4529d8-d55d-4b83-b788-694b197407d4)
This chapter explains how **Brunei Darussalam Central Bank (BDCB)** should manage the transition from an active crisis to recovery and ultimately to an appropriate business-as-usual state.
It focuses on three important dimensions of post-crisis management: **transition from crisis to recovery; psychological first aid and stakeholder support; and reputation and brand management after a crisis**.
It also explains how these activities should feed into post-crisis evaluation, learning, and continual improvement.
The approach is aligned with **ISO 22361:2022 — Security and resilience — Crisis management — Guidelines**.
ISO 22361 addresses the establishment, maintenance, review, and continual improvement of strategic Crisis Management capability, including leadership, decision-making, communication, training, validation, and learning from crises.
#### **Introduction**
The end of the acute crisis does not mean that Crisis Management responsibilities have ended.
The organisation may still be dealing with disrupted operations, exhausted employees, affected stakeholders, unresolved investigations, reputational concerns, outstanding commitments, financial consequences, and corrective actions.
BCM Institute's post-crisis framework emphasises restoring operations and confidence, returning to an appropriate normal state, evaluating the response, learning from the crisis, and upgrading the organisation's Crisis Management capability.
For BDCB, post-crisis recovery has an additional strategic dimension. Its responsibilities include conducting monetary policy, issuing Brunei currency, and regulating and supervising banks and other financial institutions.
Its statutory objectives include domestic price stability, financial-system stability, efficient payment systems, and development of a sound and progressive financial-services sector.
Recovery must therefore consider not only restoration of BDCB's internal operations but also the consequences for financial institutions, financial infrastructure, stakeholders, and confidence in the wider financial system.
The post-crisis journey can be represented as:
The objective is not simply to return to the exact conditions that existed before the crisis. Where the crisis has exposed vulnerabilities, recovery should result in a **safer, stronger and more resilient operating state**.
#### **Understanding the Post-Crisis Stage**
BCM Institute describes the post-crisis stage as one involving evaluation of effects and repair of the organisation. Its detailed post-crisis guidance emphasises accounting for and demobilising resources, initiating recovery, evaluating and documenting response effectiveness, debriefing relevant people and recommending improvements.
For BDCB, the post-crisis stage should therefore encompass:
**Restore + Return + Support + Rebuild Confidence + Learn + Upgrade**
These activities frequently overlap. Operational recovery may proceed while stakeholder support continues, investigations remain active, and reputation-repair measures are being implemented.
Post-crisis management should therefore be treated as a **managed transition**, rather than a single event marking the end of the crisis.
#### **ISO 22361 Alignment**
ISO 22361 identifies recovery and continual improvement as elements of an organisation's strategic Crisis Management capability.
It also emphasises learning from crises, while its broader framework addresses leadership, communication, and decision-making.
For BDCB, this can be translated into the following requirements:
| ISO 22361-Aligned Area | Post-Crisis Application for BDCB |
| --- | --- |
| Leadership | Provide direction through transition and recovery |
| Recovery | Restore sustainable organisational capability |
| Governance | Transfer responsibilities in a controlled manner |
| People | Address physical and psychological consequences |
| Communication | Continue providing reliable recovery information |
| Stakeholders | Fulfil commitments and rebuild confidence |
| Evaluation | Assess response and recovery performance |
| Learning | Identify lessons from the crisis |
| Improvement | Implement and verify corrective actions |
| Capability Development | Update plans, training, strategies and governance |
The essential principle is that **recovery and learning are part of Crisis Management—not activities that begin only after Crisis Management has been forgotten**.
#### **Transition from Crisis to Recovery**
##### **Purpose of the Transition**
During the acute phase, the CMT concentrates on controlling strategic consequences, maintaining situational awareness, making decisions, and coordinating the organisational response.
As the situation stabilises, the management question changes from:
**“How do we control this crisis?”**
to:
**“How do we restore BDCB sustainably while addressing the remaining consequences?”**
The transition should therefore be deliberate and formally governed.
#### **Determining Whether the Crisis Is Stabilised**
A crisis should not be declared over simply because the initiating event has stopped.
BDCB should assess whether:
- immediate life-safety threats are controlled;
- the initiating incident has been contained;
- critical BDCB activities are stable;
- critical technology is sufficiently reliable;
- information and transaction integrity have been established;
- payment and settlement implications are manageable;
- financial-sector consequences are stable;
- critical stakeholders have been informed;
- misinformation is controlled or manageable;
- operational recovery arrangements are functioning;
- no immediate strategic decisions require full CMT governance; and
- residual risks have identified owners.
The decision pathway is:
**Crisis Controlled → Strategic Threat Reduced → Critical Activities Stabilised → Residual Risks Assessed → Recovery Governance Confirmed → Transition Decision**
#### **Crisis De-Escalation**
De-escalation should be as structured as activation.
BDCB may move through several states:
**Active Crisis → Stabilising → Recovery Transition → Recovery Management → Business as Usual**
A premature stand-down could create a governance gap. Conversely, keeping the full CMT activated unnecessarily may consume resources and impede the transition to normal management.
The Crisis Leader should therefore recommend de-escalation based on agreed criteria and current risk.
#### **Formal Stand-Down**
Formal CMT stand-down should identify:
- date and time;
- authorising person;
- current situation;
- rationale for stand-down;
- outstanding issues;
- residual risks;
- recovery priorities;
- transferred responsibilities;
- accountable owners;
- outstanding stakeholder commitments;
- continuing communications;
- investigations underway;
- reporting requirements; and
- post-crisis review arrangements.
The transition should be recorded in the Crisis Log and communicated to relevant stakeholders.
#### **Recovery Governance**
The end of CMT activation should not create a leadership vacuum.
BDCB should establish appropriate **recovery governance**, potentially through a Recovery Management Team, existing management structure, or designated recovery leadership, depending on the scale of the event.
The governance transfer can be represented as:
**Crisis Management Team → Recovery Governance → Business and Specialist Recovery Teams → Normal Management**
Recovery governance should coordinate:
- operational restoration;
- technology recovery;
- facilities recovery;
- workforce issues;
- financial consequences;
- stakeholder support;
- legal and regulatory issues;
- investigations;
- communications;
- reputation recovery;
- corrective actions; and
- management reporting.
#### **Recovery Objectives**
BDCB should define recovery objectives appropriate to the crisis.
These may include:
1. Protect the continuing safety and well-being of people.
2. Restore critical BDCB capabilities sustainably.
3. Normalise payment and settlement activities.
4. Resolve residual financial-sector consequences.
5. Restore reliable information and technology services.
6. Address legal, regulatory, and investigative requirements.
7. Support affected stakeholders.
8. Rebuild confidence.
9. Resolve outstanding crisis commitments.
10. Capture lessons.
11. Implement improvements.
12. return governance to an appropriate normal state.
Recovery success should therefore be assessed across **people, operations, systems, stakeholders, confidence, and resilience**.
#### **Operational Restoration**
Operational recovery should avoid the temptation to restore everything simultaneously.
A prioritised process is preferable:
**Assess Recovery Requirements → Prioritise Critical Activities → Restore Required Resources → Validate Capability → Resume Activities → Monitor Stability → Normalise Operations**
The objective is not merely system availability.
For example, following a cyber incident, technology may technically be available while BDCB still needs to confirm:
- data integrity;
- transaction integrity;
- identity and access security;
- system stability;
- cyber containment;
- dependency restoration; and
- operational confidence.
#### **Example — Recovery from a Major RTGS Crisis**
Consider a serious RTGS disruption that has been stabilised.
The recovery pathway might be:
**RTGS Restored → Technical Stability Confirmed → Transaction Integrity Verified → Outstanding Settlement Addressed → Participants Informed → Financial-Sector Consequences Monitored → Normal Processing Resumed → Recovery Review**
The recovery team should ask:
- Is the system stable?
- Is transaction integrity confirmed?
- Have delayed transactions been processed correctly?
- Are financial institutions operating normally?
- Are liquidity effects resolved?
- Are ACH or other dependent activities normalised?
- Have participant enquiries been addressed?
- Are temporary workarounds still required?
- Have all promised communications been issued?
- Are there residual technology risks?
- What corrective actions are required?
This demonstrates that **technical restoration is only one component of strategic recovery**.
#### **Recovery from a Cyber Crisis**
Cyber recovery may require a longer transition because technical restoration and strategic recovery can proceed at different speeds.
A useful progression is:
**Contain Cyber Threat → Restore Systems → Verify Security → Validate Data Integrity → Resume Critical Activities → Monitor for Recurrence → Rebuild Stakeholder Confidence**
Important post-crisis issues may include:
- forensic investigation;
- data integrity;
- compromised credentials;
- residual vulnerabilities;
- regulatory obligations;
- affected stakeholders;
- third-party involvement;
- evidence preservation;
- insurance where applicable;
- public communication; and
- long-term cyber remediation.
The CMT may stand down while some of these activities continue under specialist recovery governance.
#### **Recovery from a Financial-System Crisis**
Where the crisis involves a financial institution or wider financial-system concern, recovery may continue long after the acute event has stabilised.
The progression may be:
**Financial Stress → Strategic Intervention → Stabilisation → Market/Customer Confidence Monitoring → Residual Risk Management → Normalisation → Long-Term Remediation**
BDCB should continue monitoring:
- liquidity conditions;
- financial-institution stability;
- depositor or customer behaviour;
- payment activity;
- potential contagion;
- stakeholder sentiment;
- misinformation;
- media narratives; and
- confidence indicators.
Recovery should not be declared complete merely because immediate intervention is no longer required.
#### **Demobilising Crisis Resources**
BCM Institute's post-crisis guidance specifically identifies accounting for and demobilising resources as a post-crisis responsibility.
BDCB should systematically demobilise:
- CMT members;
- specialist advisers;
- alternate facilities;
- temporary technology;
- additional security;
- emergency suppliers;
- temporary communication channels;
- additional staffing;
- external consultants; and
- other crisis resources.
The process should ensure that important recovery activities are not inadvertently terminated.
**Identify Resources → Determine Continuing Need → Transfer or Release → Account for Resources → Record Demobilisation**
#### **Psychological First Aid and Stakeholder Support**
##### **Human Consequences of Crisis**
Recovery is not purely operational.
A serious crisis may affect employees, contractors, visitors, families, financial-sector participants, and other stakeholders emotionally as well as practically.
Potential reactions can include:
- distress;
- anxiety;
- fatigue;
- confusion;
- anger;
- grief;
- fear;
- reduced concentration;
- uncertainty; and
- concerns about future safety.
The organisation should respond supportively without assuming that every affected individual will experience the same reaction.
#### **Psychological First Aid**
Psychological First Aid (PFA) should be understood as **practical, humane, and supportive assistance following a distressing event**, rather than as clinical psychological treatment.
For BDCB, a practical support model is:
**Ensure Safety → Listen and Understand Needs → Provide Practical Support → Connect People with Appropriate Assistance → Communicate Clearly → Follow Up**
BDCB should use appropriately qualified internal or external professionals where specialised mental-health assessment or treatment is required.
#### **Immediate People Support**
Immediate post-crisis support may include:
- confirming safety;
- accounting for personnel;
- providing clear information;
- arranging rest;
- providing food, transport, or accommodation where necessary;
- facilitating family contact;
- offering confidential employee assistance;
- arranging professional support;
- allowing appropriate time away from crisis duties;
- monitoring fatigue; and
- providing practical information about what happens next.
Support should be proportionate to the nature of the event.
#### **Supporting Crisis Responders**
CMT members and specialist response teams can themselves be significantly affected.
They may have worked for extended periods under high pressure while making consequential decisions.
BDCB should consider:
**Crisis Duty → Structured Handover → Rest and Recovery → Welfare Check → Debrief → Return to Normal Duties**
A debrief should not be designed to force participants to disclose emotional reactions publicly. Operational learning and individual welfare support should be handled appropriately and, where needed, separately.
#### **Supporting Employees**
Employees who were not directly involved in the response may still be affected by:
- uncertainty;
- disruption to work;
- concern for colleagues;
- media coverage;
- misinformation;
- changed working arrangements;
- fear of recurrence; or
- uncertainty regarding organisational consequences.
Internal communication should therefore continue after the acute crisis.
Employees should understand:
- what has happened;
- whether conditions are safe;
- what has been restored;
- what remains disrupted;
- what support is available;
- what temporary arrangements remain;
- what is expected of them; and
- when further information will be provided.
#### **Supporting External Stakeholders**
Stakeholder support should be tailored to the crisis.
Potential stakeholders include:
- banks and other financial institutions;
- payment-system participants;
- government agencies;
- critical suppliers;
- businesses;
- consumers;
- international counterparts;
- media; and
- the public.
The process is:
**Identify Affected Stakeholders → Understand Continuing Needs → Provide Support or Information → Resolve Outstanding Commitments → Monitor Concerns → Close Responsibly**
#### **Stakeholder Commitments**
During the crisis, BDCB may have promised to provide further information.
These commitments should be logged and fulfilled.
BCM Institute specifically highlights the importance of delivering information promised to stakeholders and providing updates about recovery, corrective actions, and investigations.
Failure to fulfil those commitments can undermine trust during recovery.
A simple register could contain:
| Commitment | Stakeholder | Owner | Due Date | Status | Evidence |
| --- | --- | --- | --- | --- | --- |
| Recovery update | Financial institutions | Assigned owner | Agreed date | Open/Closed | Communication record |
| Investigation update | Relevant authority | Assigned owner | Agreed date | Open/Closed | Report |
| Service restoration notice | Participants | Assigned owner | On restoration | Open/Closed | Notice |
| Follow-up information | Public/media | Communications | Agreed date | Open/Closed | Published statement |
#### **Psychological Recovery and Organisational Culture**
How leaders behave after a crisis can influence future organisational culture.
Employees should feel able to:
- report concerns;
- identify weaknesses;
- challenge assumptions;
- discuss mistakes appropriately;
- contribute lessons;
- recommend improvements; and
- raise unresolved risks.
A purely blame-oriented review can discourage future escalation and reporting.
At the same time, a learning culture does not mean ignoring misconduct, negligence or deliberate control breaches.
Accountability and organisational learning should be handled fairly and distinctly.
#### **Reputation and Brand Management After a Crisis**
##### **Reputation Recovery**
Reputation recovery should begin with **credible action**, not promotional messaging.
The organisation must first demonstrate that it is:
- managing the consequences;
- supporting affected stakeholders;
- investigating appropriately;
- correcting identified weaknesses;
- fulfilling commitments;
- communicating accurately; and
- strengthening its resilience.
Communication then explains those actions.
The relationship is:
**Corrective Action → Evidence of Progress → Transparent Communication → Stakeholder Understanding → Confidence Recovery**
#### **Why Reputation Matters to BDCB**
For a central bank, reputation has strategic importance because credibility and confidence affect relationships with financial institutions, government, market participants, businesses, and the public.
BDCB's statutory objectives include financial system stability and efficient payment systems. Consequently, post-crisis reputation management should focus not merely on protecting the BDCB name but on maintaining confidence in its ability to fulfil its responsibilities.
The objective should therefore be:
**Restore Trust in BDCB's Capability, Integrity, Leadership and Resilience**
#### **Post-Crisis Communication**
Communication should continue after the immediate crisis.
BCM Institute's post-crisis guidance notes that organisations should continue providing promised information and updates about recovery efforts, corrective measures, and investigations. Reputation repair may continue or begin during this stage.
BDCB's post-crisis communication should therefore address, where appropriate:
- current status;
- services restored;
- remaining issues;
- stakeholder actions required;
- investigations underway;
- corrective actions;
- support available;
- lessons identified when appropriate;
- resilience improvements; and
- future updates.
#### **Principles for Post-Crisis Communication**
Communication should remain:
- accurate;
- timely;
- consistent;
- authoritative;
- proportionate;
- appropriately transparent;
- respectful of affected parties;
- sensitive to legal and confidentiality requirements; and
- supported by evidence.
The communication sequence is:
**Understand Stakeholder Concerns → Establish Verified Facts → Determine Communication Objective → Develop Message → Approve → Communicate → Monitor Reaction → Update**
#### **Avoiding Premature Claims**
BDCB should avoid declaring success before sufficient evidence exists.
Statements such as:
- “everything is back to normal”;
- “there was no impact”;
- “the issue is fully resolved”; or
- “this cannot happen again”
should not be made unless they can be supported.
Credibility is better protected through accurate acknowledgement of uncertainty than through excessive reassurance.
#### **Reputation Recovery by Stakeholder Group**
Different stakeholders may require different evidence of recovery.
| Stakeholder | Primary Recovery Concern |
| --- | --- |
| Employees | Safety, stability, leadership, and organisational future |
| Financial Institutions | Operational reliability, regulatory clarity, and financial-system stability |
| Payment Participants | System integrity, availability, and settlement reliability |
| Government | Stability, accountability, and national implications |
| Suppliers | Recovery priorities and contractual requirements |
| Businesses/Consumers | Availability of financial services and confidence |
| Media | Verified facts, accountability, and recovery progress |
| Public | Confidence, transparency, and stability |
| International Counterparts | Institutional reliability and financial-system resilience |
One generic message will rarely address all stakeholder needs.
#### **Managing Post-Crisis Misinformation**
Misinformation may persist after operational recovery.
For example:
**Crisis Event → Incomplete Information → Rumours → Persistent Online Narrative → Stakeholder Concern → Reputation Consequences**
BDCB should continue monitoring:
- inaccurate claims;
- outdated information;
- impersonation;
- false recovery information;
- speculation;
- manipulated content; and
- recurring stakeholder concerns.
Where appropriate, BDCB should correct material inaccuracies through authoritative channels.
#### **Rebuilding Confidence Through Evidence**
Reputation recovery should be supported by observable actions.
These may include:
- completion of corrective actions;
- strengthened controls;
- improved technology resilience;
- updated Crisis Management arrangements;
- enhanced stakeholder coordination;
- revised procedures;
- additional training;
- improved monitoring;
- strengthened supplier arrangements; and
- successful exercises validating improvements.
The sequence is:
**Identify Weakness → Correct Weakness → Validate Improvement → Communicate Evidence → Rebuild Confidence**
#### **Documenting and Reviewing the Crisis**
Post-crisis review is a fundamental component of recovery.
BCM Institute recommends prompt recording, stakeholder and witness feedback, analysis of the cause of the crisis, and distribution of relevant reports and findings.
BDCB should preserve and consolidate:
- Crisis Logs;
- SitReps;
- Decision Logs;
- Action Logs;
- Communication Logs;
- operational reports;
- system records;
- technical evidence;
- stakeholder communications;
- media records;
- financial information;
- exercise or response observations; and
- recovery records.
These provide the evidence base for learning.
#### **Post-Crisis Debrief**
Debriefs should be conducted while relevant information remains fresh.
Different sessions may be appropriate for:
**Crisis Management Team**
Focus on strategic leadership, decisions, coordination, and communication.
**Operational Teams**
Focus on incident control, procedures, and resources.
**Specialist Teams**
Focus on technology, cyber, security, facilities, or other technical areas.
**Communications Team**
Focus on stakeholder communication, media, and misinformation.
**Recovery Teams**
Focus on restoration and transition.
**External Stakeholders**
Where appropriate, obtain observations from key organisations that participated in or were materially affected by the response.
#### **Post-Incident Review**
The Post-Incident Review should determine:
- what happened;
- why it happened;
- how it was detected;
- how the organisation responded;
- what worked well;
- what did not work;
- whether escalation occurred appropriately;
- whether the CMT was effective;
- whether decisions were timely;
- whether information was reliable;
- whether communications were effective;
- whether resources were adequate;
- whether recovery objectives were achieved;
- what stakeholders experienced;
- what residual risks remain; and
- what should change.
The objective is not merely to produce a report.
It is to produce **actionable improvement**.
#### **Independent Crisis Evaluation**
For major crises, BDCB should consider whether the review would benefit from an evaluation team sufficiently independent from those directly responsible for managing the crisis.
BCM Institute's post-crisis framework recommends appointing a crisis evaluation team to assess how the crisis was handled and recommend changes, noting that its members should differ from the Crisis Management Team.
This can strengthen objectivity for significant events.
#### **From Lessons Identified to Lessons Learned**
A lesson has not been learned simply because it appears in a report.
The process should be:
**Observation → Lesson Identified → Corrective Action → Accountable Owner → Target Date → Implementation → Validation → Closure**
This distinction is critical.
Without implementation and verification, organisations repeatedly “learn” the same lesson after successive incidents.
#### **Corrective Action Management**
Corrective actions should specify:
| Field | Requirement |
| --- | --- |
| Finding | What weakness was identified? |
| Root Cause | Why did it occur? |
| Action | What will change? |
| Owner | Who is accountable? |
| Priority | How urgent is it? |
| Target Date | When should it be completed? |
| Evidence | How will completion be demonstrated? |
| Validation | How will effectiveness be tested? |
| Status | Open, in progress, closed |
| Residual Risk | What remains after the action? |
Senior management should receive visibility of overdue or high-priority corrective actions.
#### **Updating Crisis Management Capability**
Lessons may require updates to:
- Crisis Management Policy;
- crisis governance;
- activation criteria;
- CMT membership;
- roles and responsibilities;
- escalation procedures;
- Crisis Management Plans;
- scenario playbooks;
- contact information;
- SitRep templates;
- decision-making processes;
- crisis communication arrangements;
- technology;
- alternate facilities;
- supplier arrangements;
- BCM plans;
- DR plans;
- cyber-response procedures;
- training programmes; and
- exercise scenarios.
Thus:
**Crisis Experience → Evaluation → Lessons → Corrective Actions → Capability Update → Training and Exercising → Improved Preparedness**
This directly supports ISO 22361's emphasis on review, validation, learning, and continual improvement.
#### **Returning to an Improved Normal**
“Return to normal” should not necessarily mean recreating the pre-crisis environment.
If the crisis exposed a weakness, returning unchanged would preserve that weakness.
A better objective is:
**Pre-Crisis State → Crisis → Recovery → Lessons → Improvement → More Resilient Operating State**
This is particularly important for BDCB, where improvements can affect not only internal resilience but also the reliability of financial infrastructure and confidence among financial-sector stakeholders.
#### **Measuring Recovery Success**
Recovery should be assessed through multiple dimensions.
| Dimension | Example Questions |
| --- | --- |
| People | Are affected people safe and appropriately supported? |
| Operations | Are critical activities stable? |
| Technology | Are systems reliable and secure? |
| Information | Is integrity assured? |
| Payment Systems | Are settlement activities normalised? |
| Financial Sector | Are material consequences stabilised? |
| Stakeholders | Have commitments been fulfilled? |
| Reputation | Is confidence recovering? |
| Governance | Have responsibilities transitioned appropriately? |
| Learning | Have lessons been identified? |
| Improvement | Have corrective actions been implemented and validated? |
Recovery is complete only when the organisation reaches an agreed **sustainable state**, rather than merely when the immediate incident ends.
#### **Post-Crisis Recovery Dashboard**
For a major crisis, senior management may benefit from a concise recovery dashboard covering:
**Operational Recovery + People and Welfare + Technology and Information + Financial-System Impact + Stakeholder Commitments + Reputation + Investigations + Corrective Actions**
Each area could be classified as:
**Red — Significant unresolved issue**
**Amber — Recovery underway**
**Green — Sustainable recovery achieved**
This provides visibility without requiring the CMT to remain permanently activated.
#### **Relationship with BCM**
Post-crisis Crisis Management and BCM recovery may overlap substantially, but have different objectives.
**BCM Recovery** focuses on restoring priority business functions and required resources.
**Crisis Recovery** focuses on restoring the organisation's strategic position, governance, stakeholders, confidence, and resilience.
The relationship can be represented as:
**Crisis Stabilised → BCM/Operational Recovery + Strategic Crisis Recovery → Critical Activities Restored + Stakeholder Confidence Rebuilt → Sustainable Organisational Recovery**
Both may proceed simultaneously.
#### **Relationship with Crisis Communication**
Crisis communication continues throughout recovery.
The communication lifecycle can be expressed as:
**Crisis Communication → Recovery Updates → Corrective-Action Communication → Stakeholder Follow-Up → Confidence Rebuilding → Normal Communication**
BCM Institute emphasises that promised information should be delivered and stakeholders should continue receiving appropriate information on recovery and corrective measures.
Post-crisis silence can undermine confidence that was successfully maintained during the acute response.
#### **Post-Crisis Governance Questions**
Senior management should ask:
| Question | Governance Purpose |
| --- | --- |
| Is the crisis genuinely stabilised? | Avoid premature stand-down |
| Who owns recovery? | Maintain accountability |
| What residual risks remain? | Prevent recurrence/escalation |
| Are critical activities sustainable? | Confirm operational recovery |
| Are people appropriately supported? | Protect workforce |
| Have stakeholder commitments been fulfilled? | Maintain trust |
| What investigations remain? | Ensure accountability |
| Is confidence recovering? | Assess reputation |
| What worked? | Preserve effective practices |
| What failed? | Identify improvement |
| Why did it fail? | Understand root causes |
| Who owns corrective actions? | Ensure implementation |
| How will effectiveness be verified? | Confirm real improvement |
| What must be exercised again? | Validate capability |
#### **Example — End-to-End Post-Crisis Recovery**
For a major technology and payment-system crisis, the end-to-end journey could be:
**Technology/Cyber Event → Payment-System Disruption → CMT Activation → Crisis Stabilisation → Technology Recovery → Transaction Integrity Verification → Financial-Sector Stabilisation → CMT Stand-Down → Recovery Governance → Stakeholder Follow-Up → Post-Incident Review → Corrective Actions → Validation → Improved Crisis Capability**
This demonstrates that recovery extends far beyond restoration of the affected technology.
#### **Key Implementation Principle**
The central post-crisis principle for BDCB is:
**A crisis is not complete when the immediate event ends. It is complete only when the organisation has recovered sufficiently, affected stakeholders have been appropriately supported, confidence is being restored, lessons have been converted into improvements, and residual risks are under accountable management.**
The overall post-crisis process is therefore:
**Restore → Return → Support → Rebuild → Review → Learn → Improve**
BCM Institute's framework similarly treats the post-crisis stage as an opportunity to restore operations and confidence, return the organisation to an appropriate state, evaluate performance, learn from the event and upgrade Crisis Management capability.
### [](https://cta-redirect.hubspot.com/cta/redirect/3893111/31ea7cf7-af68-4c62-adbd-9750ccd40bad)
The post-crisis stage for BDCB is a **strategic transition from crisis control to sustainable recovery, organisational learning, and improved resilience**.
Formal de-escalation should occur only when immediate strategic threats have been controlled, critical activities are sufficiently stable, and residual issues have been transferred to accountable recovery governance.
Operational restoration should be accompanied by attention to people, technology, information integrity, financial-sector consequences, stakeholder commitments, and continuing communication.
Recovery must also address the human consequences of the crisis.
Appropriate psychological first aid and stakeholder support should focus on safety, practical assistance, clear information, connection to suitable professional resources where required, and ongoing follow-up.
Employees and crisis responders should receive appropriate welfare support, while financial institutions, payment participants, government stakeholders, and other affected parties should continue receiving relevant information and assistance.
Reputation recovery should be built on **evidence of responsible action**.
BDCB should demonstrate that it has stabilised the situation, supported affected parties, investigated appropriately, corrected weaknesses, and strengthened resilience.
Post-crisis communication should fulfil promises made during the crisis and provide appropriate updates on recovery, investigations, and corrective actions. This is consistent with BCM Institute's post-crisis guidance.
Finally, recovery must lead to learning. ISO 22361 explicitly includes training, validation, and learning from crises within strategic Crisis Management capability.
BDCB should therefore convert observations into lessons, lessons into corrective actions, and corrective actions into demonstrably improved capability.
The complete Chapter 11 implementation pathway is:
**Crisis Stabilisation → De-Escalation → Recovery Governance → Operational and Strategic Recovery → People and Stakeholder Support → Confidence and Reputation Recovery → Post-Crisis Evaluation → Lessons Identified → Corrective Actions → Validation → Continual Improvement**
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/3aefb2d2-3110-47c1-ad4f-d3e6e5381066)
[![\[CM\] \[BDCB\] \[3/4 Banner\] Crisis Management in Action\_ A Practical Implementation Guide for BDCB](https://no-cache.hubspot.com/cta/default/3893111/b3d8c34f-d579-45e8-aba7-c04de5f90bb2.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3d8c34f-d579-45e8-aba7-c04de5f90bb2)
| **eBook 1: Understanding Your Organisation** | | | | | | |
| --- | --- | --- | --- | --- | --- | --- |
| **C1** | **C2** | **C3** | **C4** | **C5** | **C5A** | **C6** |
| [![\[CM\] \[BDCB\] \[E1\] \[C1\] Overview of Case Study](https://no-cache.hubspot.com/cta/default/3893111/c6dfd532-71c7-42be-a2d2-57ee143d6a90.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/c6dfd532-71c7-42be-a2d2-57ee143d6a90) | [![\[CM\] \[BDCB\] \[E1\] \[C2\] Understanding Your Organisation](https://no-cache.hubspot.com/cta/default/3893111/8901e543-d6be-4099-b44c-38a231ad93c9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/8901e543-d6be-4099-b44c-38a231ad93c9) | [![\[CM\] \[BDCB\] \[E1\] \[C3\] Establishing CM Goals](https://no-cache.hubspot.com/cta/default/3893111/0c84af12-bdfb-4390-aaa3-982304dd50e5.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/0c84af12-bdfb-4390-aaa3-982304dd50e5) | [![\[CM\] \[BDCB\] \[E1\] \[C4\] CM Vs BCM](https://no-cache.hubspot.com/cta/default/3893111/2f5b3e5c-a85c-4d21-be23-0d1bb9002cdb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/2f5b3e5c-a85c-4d21-be23-0d1bb9002cdb) | [![\[CM\] \[BDCB\] \[E1\] \[C5\] Identifying the Types of Crisis Scenarios](https://no-cache.hubspot.com/cta/default/3893111/20721361-3ba5-4e4f-8b95-393ae1f11cec.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/20721361-3ba5-4e4f-8b95-393ae1f11cec) | [![\[CM\] \[BDCB\] \[E1\] \[C5A\] Technological Crisis Scenarios](https://no-cache.hubspot.com/cta/default/3893111/3889a50b-7ef7-4fc9-abba-b240819bbca9.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3889a50b-7ef7-4fc9-abba-b240819bbca9) | [![\[CM\] \[BDCB\] \[E1\] \[C6\] Assessing Risks and Threats](https://no-cache.hubspot.com/cta/default/3893111/29a8e079-9de4-4c23-8bae-327e1b68a4a0.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/29a8e079-9de4-4c23-8bae-327e1b68a4a0) |
| **C7** | **C8** | **C9** | **C10** | **C11** | **C12** | **C13** |
| [![\[CM\] \[BDCB\] \[E1\] \[C7\] Composing the CM Team](https://no-cache.hubspot.com/cta/default/3893111/b582100d-8c8c-45a2-9e80-664d3960913f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b582100d-8c8c-45a2-9e80-664d3960913f) | [![\[CM\] \[BDCB\] \[E1\] \[C8\] Implementing the CM Planning Methodology](https://no-cache.hubspot.com/cta/default/3893111/7a2fd2b6-08ab-450c-93f1-85aaa8bfddd3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/7a2fd2b6-08ab-450c-93f1-85aaa8bfddd3) | [![\[CM\] \[BDCB\] \[E1\] \[C9\] Pre-Crisis - Risk Identification and Crisis Preparedness](https://no-cache.hubspot.com/cta/default/3893111/6ebafa39-8b98-4f27-946f-5c04561346f3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6ebafa39-8b98-4f27-946f-5c04561346f3) | [![\[CM\] \[BDCB\] \[E1\] \[C10\] During Crisis - Crisis Response and Decision-Making](https://no-cache.hubspot.com/cta/default/3893111/a0d99bef-6420-47d2-b185-cafad05f89d8.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/a0d99bef-6420-47d2-b185-cafad05f89d8) | [![\[CM\] \[BDCB\] \[E1\] \[C11\] Post Crisis - Crisis Recovery](https://no-cache.hubspot.com/cta/default/3893111/6f4529d8-d55d-4b83-b788-694b197407d4.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6f4529d8-d55d-4b83-b788-694b197407d4) | [![\[CM\] \[BDCB\] E1\] \[C12\] Summary and Strategic Outlook](https://no-cache.hubspot.com/cta/default/3893111/24bcf380-f7b1-48d0-b5cb-b2bd308adafb.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/24bcf380-f7b1-48d0-b5cb-b2bd308adafb) | [![\[CM\] \[BDCB\] \[E1\] \[C13\] \[Back Cover\] CM eBook 1](https://no-cache.hubspot.com/cta/default/3893111/03a018f8-e311-43d0-b4af-41449a9756bf.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/03a018f8-e311-43d0-b4af-41449a9756bf) |
| | | | | | | |
#### More Information About Crisis Management Blended/ Hybrid Learning Courses
To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer \[CM-3\] and the CM-5000 Crisis Management Expert Implementer \[CM-5\].
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/5ffecd2d-8000-4805-b5e3-e9ead2e259cc) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c3546220-6c76-4a10-8c76-4040b94e09e5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/03294547-1df3-435c-9243-971c3d9bb6ce) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/b29594fe-d44a-4ff8-8160-03f7ce454385) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/dd120e7f-9fe2-49ed-ad24-489b81c06739) | [![\[BL-CM\] \[5\] Register](https://no-cache.hubspot.com/cta/default/3893111/82024308-16f4-4491-98be-818a882c6286.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/82024308-16f4-4491-98be-818a882c6286) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/c8aaf76b-4c0b-402a-ad12-c8aff24eb911) | Please feel free to send us a note if you have any questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/30bcbbbf-c8ea-48d8-8643-da2638f3f0f8) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/83d00c12-c51c-4476-9902-69f9b7667a91) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/672d2949-6233-4b26-ad42-ae0dd0a1a3ac) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/3ca6f50d-a3c5-41b8-8da2-26feb8a7613e) |
### Your Comments Here:
---
---
---
---
All rights reserved. Copyright 2026
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Moh Heng Goh",
"url" : "https://blog.bcm-institute.org/en/ebook-cm/author/moh-heng-goh"
},
"dateModified" : "2026-10-09T06:53:21.345Z",
"datePublished" : "2026-10-09T06:53:12.000Z",
"headline" : "[CM] [BDCB] [E1] [C11] Post Crisis - Crisis Recovery",
"mainEntityOfPage" : {
"@id" : "https://blog.bcm-institute.org/en/ebook-cm/cm-bdcb-e1-c11-post-crisis-crisis-recovery",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
},
"name" : "BCMI Pte Ltd"
}
}
```