[CM] [SIT] [E1] [PF] Crisis Management Framework

Note from Author:

A Crisis Management Framework should sit between the Crisis Management Policy and the Crisis Management and Institutional Business Continuity Plan (CM-IBCP).

Based on the existing SIT document, the framework should define the governance model, crisis management methodology, lifecycle, capability requirements, and integration with business continuity and emergency preparedness.

The current CM-IBCP would then become one of the supporting operational plans under the framework.

SINGAPORE INSTITUTE OF TECHNOLOGY (SIT)

CRISIS MANAGEMENT FRAMEWORK

Document Classification: Internal

Framework Owner: Planning, Risk and Safety Division (PRS)

Approved By: Enterprise Risk Management Steering Committee (ERMSC)

Effective Date: [To be inserted]

Review Cycle: Every three years

1. PURPOSE

The Crisis Management Framework establishes the governance, principles, processes, structures, and capabilities required to enable Singapore Institute of Technology (SIT) to effectively anticipate, prepare for, respond to, recover from, and learn from crisis events.

This Framework translates the requirements of the SIT Crisis Management Policy into a structured management system and provides the foundation for crisis preparedness, response coordination, institutional recovery, and continual improvement in resilience.

2. OBJECTIVES

The objectives of the Framework are to:

1. Protect life, safety, and well-being.
2. Preserve SIT's reputation and stakeholder confidence.
3. Maintain continuity of critical teaching, learning, research, and corporate functions.
4. Enable timely and effective crisis decision-making.
5. Ensure coordinated responses across all divisions.
6. Support regulatory and governmental obligations.
7. Strengthen institutional resilience.
8. Promote continual improvement through lessons learned.
9.  

3. SCOPE

This Framework applies to:

• All SIT divisions, schools, and departments.
• All campuses and facilities.
• Students, faculty, staff, and contractors.
• Critical third-party service providers supporting SIT operations.

The Framework applies to crises affecting:

• People
• Facilities
• Technology
• Information
• Operations
• Reputation
• Regulatory obligations
• Strategic objectives

4. CRISIS MANAGEMENT PRINCIPLES

All crisis management activities shall be guided by the following principles:

Safety First

Protection of life and well-being takes precedence over all other considerations.

Leadership

Crisis leadership shall be visible, decisive, accountable, and coordinated.

Timeliness

Decisions shall be made promptly based on the best available information.

Transparency

Communications shall be accurate, timely, and appropriate.

Collaboration

Responses shall involve coordinated efforts across internal and external stakeholders.

Preparedness

SIT shall maintain readiness through planning, training, exercising, and monitoring.

Continuous Improvement

Lessons learned shall be incorporated into future plans and capabilities.

5. CRISIS MANAGEMENT LIFECYCLE

SIT shall adopt a five-phase crisis management lifecycle.

Phase 1 – Anticipate

Activities include:

• Risk assessment
• Threat monitoring
• Environmental scanning
• Emerging risk identification
• Scenario planning

Outputs:

• Crisis scenarios
• Risk registers
• Preparedness priorities

Phase 2 – Prepare

Activities include:

• Crisis planning
• Business continuity planning
• Resource preparation
• Training and awareness
• Crisis exercises

Outputs:

• Crisis management plans
• Crisis communications playbooks
• Response procedures
• Exercise reports

Phase 3 – Respond

Activities include:

• Crisis assessment
• Crisis declaration
• Crisis activation
• Stakeholder communications
• Strategic decision-making
• Resource mobilisation

Outputs:

• Situation reports
• Crisis action plans
• Executive decisions

Phase 4 – Recover

Activities include:

• Recovery coordination
• Restoration of critical services
• Stakeholder communications
• Return-to-normal operations

Outputs:

• Recovery status reports
• Recovery action plans

Phase 5 – Learn

Activities include:

• After-action reviews
• Lessons learned workshops
• Improvement planning
• Framework review

Outputs:

• Improvement plans
• Updated plans and procedures

6. CRISIS GOVERNANCE STRUCTURE

6.1 Governance Model

Strategic Level

Enterprise Risk Management Steering Committee (ERMSC)

Responsibilities:

• Governance oversight
• Strategic direction
• Framework approval
• Resilience monitoring

Management Level

Business Continuity and Crisis Management Committee (BCCMC)

Responsibilities:

• Programme oversight
• Preparedness monitoring
• Capability review
• Exercise review

Operational Level

Planning, Risk and Safety Division (PRS)

Responsibilities:

• Framework maintenance
• Programme coordination
• Crisis readiness monitoring
• Exercise management

7. CRISIS MANAGEMENT STRUCTURE

During a crisis, SIT shall activate the Crisis Management Structure.

7.1 Crisis Management Leadership (CML)

Role:

• Strategic oversight
• Executive decision-making
• Resource allocation
• Stakeholder engagement

7.2 Crisis Commander

Role:

• Operational leadership
• Crisis coordination
• Situation management
• Implementation of CML decisions

7.3 Crisis Secretariat

Role:

• Administrative support
• Information management
• Documentation
• Coordination support

7.4 Lead Division

Role:

• Subject matter leadership
• Incident expertise
• Operational coordination

7.5 Supporting Divisions

Role:

• Resource support
• Specialist advice
• Functional recovery support

8. CRISIS CLASSIFICATION MODEL

SIT shall classify crises according to impact and complexity.

The escalation criteria and activation thresholds shall be detailed within supporting Crisis Management Plans.

9. CRISIS DECISION-MAKING MODEL

Crisis decisions shall consider:

People

Impact on students, staff, faculty, and visitors.

Operations

Impact on critical services and institutional priorities.

Reputation

Impact on stakeholder confidence and public trust.

Legal and Regulatory

Compliance obligations and reporting requirements.

Financial

Institutional financial consequences.

Strategic

Impact on SIT's long-term objectives.

10. CRISIS COMMUNICATIONS FRAMEWORK

SIT shall maintain coordinated internal and external communication arrangements.

Communication objectives include:

• Protecting stakeholder confidence.
• Supporting operational response.
• Managing public perception.
• Meeting regulatory obligations.
• Countering misinformation.

Communication protocols shall be detailed within the Crisis Communications Playbook.

11. BUSINESS CONTINUITY INTEGRATION

The Crisis Management Framework shall operate in conjunction with the Business Continuity Management Programme.

The relationship is illustrated below:

Emergency Management

Focus:
Immediate life safety and incident stabilisation.

Crisis Management

Focus:
Strategic leadership and institutional coordination.

Business Continuity Management

Focus:
Recovery and continuity of prioritised activities.

Disaster Recovery

Focus:
Restoration of technology services.

12. CRITICAL CAPABILITIES

SIT shall maintain the following crisis management capabilities:

Governance Capability

Defined structures, roles, and accountability.

Communications Capability

Internal and external communication arrangements.

Decision-Making Capability

Executive leadership and crisis governance.

Resource Management Capability

Emergency procurement and resource mobilisation.

Information Management Capability

Situation reporting and intelligence gathering.

Recovery Capability

Business continuity and restoration planning.

Learning Capability

Lessons learned and continual improvement.

13. TRAINING AND EXERCISING FRAMEWORK

SIT shall maintain a structured annual exercise programme.

Exercises shall include:

Tabletop Exercises

Strategic decision-making validation.

Functional Exercises

Testing of specific response functions.

Simulation Exercises

Testing institutional crisis response.

Integrated Exercises

Testing crisis management, business continuity, communications, and recovery arrangements.

Exercise outcomes shall be reviewed by BCCMC.

14. PERFORMANCE MEASUREMENT

The effectiveness of the Framework shall be monitored through:

• Exercise performance results.
• Crisis response reviews.
• Recovery performance.
• Audit findings.
• Closure of improvement actions.
• Crisis management maturity assessments.

Annual reports shall be submitted to ERMSC.

15. CONTINUAL IMPROVEMENT

SIT shall maintain a continual improvement process that includes:

• Crisis reviews.
• Lessons learned.
• Framework updates.
• Plan updates.
• Training enhancements.
• Capability maturity assessments.

Improvement actions shall be monitored through BCCMC governance processes.

16. SUPPORTING DOCUMENTS

The following documents support this Framework:

Governance Documents

• Crisis Management Policy
• Business Continuity Management Policy
• Enterprise Risk Management Policy

Operational Plans

• Crisis Management and Institutional Business Continuity Plan
• Campus Closure Crisis Response Plan
• Major IT Disruption Crisis Response Plan
• Mass Casualty Crisis Response Plan
• Division Business Continuity Plans
• IT Disaster Recovery Plans

Supporting Procedures

• Crisis Communications Playbook
• Emergency Preparedness Framework
• Emergency Procurement Procedures
• Exercise and Testing Procedures
•  

17. FRAMEWORK REVIEW

This Framework shall be reviewed:

• Every three years;
• Following a major crisis event;
• Following significant organisational changes;
• Following changes in regulatory or government requirements.

The Planning, Risk and Safety Division shall coordinate the review process.

Note from Author:

This framework structure is aligned with ISO 22361:2022 Crisis Management, ISO 22301:2019 Business Continuity Management Systems, and modern university-sector resilience practices. It creates a clear hierarchy:

Level 1: Crisis Management Policy
Level 2: Crisis Management Framework
Level 3: Crisis Management and Institutional Business Continuity Plan (current SIT document)
Level 4: Scenario-Specific Plans (Campus Closure, Major IT Disruption, Mass Casualty, etc.)

More Information About Crisis Management Blended/ Hybrid Learning Courses

To learn more about the course and schedule, click the buttons below for the  CM-300 Crisis Management Implementer [CM-3] and the CM-5000 Crisis Management Expert Implementer [CM-5].

	Please feel free to send us a note if you have any questions.