Potential Crisis Scenarios

What potential crises or challenges could our team/organization face?

A data breach compromising sensitive customer information could severely damage our reputation and lead to legal consequences.
A natural disaster like an earthquake or hurricane could disrupt our supply chain and halt production for an extended period.
A sudden change in regulations or trade policies could significantly impact our business model and revenue streams.
Impact Assessment

What would be the potential impact of each crisis scenario?

A data breach could result in significant fines, legal battles, and a loss of customer trust that takes years to rebuild.
A natural disaster could lead to extended downtime, lost revenue, and potential layoffs if operations cannot resume quickly.
Regulatory changes could force us to overhaul our entire business model, requiring substantial investments and potentially making our current offerings obsolete.
Mitigation Strategies

What proactive measures can we take to mitigate or prevent each crisis scenario?

Implement strict data security protocols, regular security audits, and employee training to prevent data breaches.
Develop a full disaster recovery plan, including backup facilities and redundant systems, to ensure business continuity.
Actively monitor regulatory changes and maintain close relationships with policymakers to anticipate and adapt to them.
Response Protocols

How should we respond and communicate during each crisis scenario?

Establish a dedicated crisis response team with clear roles and decision-making authority to coordinate efforts during a data breach.
Develop a clear communication plan to keep employees, customers, and stakeholders informed during a natural disaster or operational disruption.
Identify legal counsel and regulatory experts to guide our response and ensure compliance during regulatory changes or investigations.

What is a Crisis Management Futurespective?

A Crisis Management Futurespective is a planning session where your team imagines the crises it could face and works out what to do about them while there's still time. A data breach, a supplier going under, a sudden change in regulations: it's far easier to decide who does what in a calm meeting than in the middle of an incident. The board has four columns, worked in order. Potential Crisis Scenarios gathers the risks, and nothing is dismissed as too unlikely at this stage. Impact Assessment looks at what each one would cost in money, operations, reputation and legal exposure, so you can rank them. Mitigation Strategies covers what would make the most serious crises less likely or less damaging. Response Protocols sets out roles, decision-making authority and who needs to hear what if a crisis does hit. Run it as part of business continuity planning, before a major launch, during a restructure or after a near-miss. Repeat it as circumstances change, and test the response protocols with a tabletop exercise so they work when you need them.

Crisis Management Futurespective Format

Potential Crisis Scenarios

What potential crises or challenges could our team/organization face?

Ask the team to think broadly about events that could disrupt operations, reputation or stakeholders: natural disasters, cyber attacks, financial trouble, regulatory change, supply chain failures or a public relations crisis. Don't dismiss any scenario as too unlikely at this stage.

Impact Assessment

What would be the potential impact of each crisis scenario?

For each scenario, discuss the likely impact on finances, operations, reputation and legal standing. Consider how severe it would be, how long it would last and which teams or stakeholders it would reach, then rank the scenarios so the most serious get attention first.

Mitigation Strategies

What proactive measures can we take to mitigate or prevent each crisis scenario?

For each high-priority scenario, look for measures that make it less likely or less damaging, such as stronger security, backup suppliers, contingency plans, cross-training or redundant systems.

Response Protocols

How should we respond and communicate during each crisis scenario?

For each scenario, agree who does what: roles, decision-making authority and communication channels. Identify the stakeholders who need to be told and roughly what you'd say, so the response is fast and open.

When to use this retrospective

  • When your team or organization works in a high-risk environment where crises are more likely.
  • After a significant crisis or near-miss, to find where you were underprepared.
  • As part of regular risk management and business continuity planning.
  • Before launching new products, services or operations that bring new risks.
  • During organizational change or restructuring, when uncertainty is high.

Suggested icebreaker questions

  • If you could have any superpower to help manage a crisis, what would it be and why?
  • Share a personal experience where you had to handle a challenging or unexpected situation. What did you learn from that experience?

Want a warm-up your team plays, not just answers out loud? Browse free icebreakers →

Ideas and tips for your retrospective meeting

  • Make it safe to raise uncomfortable risks without fear of repercussions.
  • Involve people from different departments, levels and areas of expertise so you see the full range of risks.
  • Review and update your crisis plans as circumstances change so they stay current.
  • Test your response protocols with simulations or tabletop exercises, and fix what they reveal.
  • Keep preparedness visible with regular reminders and training, so the plan doesn't sit unread in a shared drive.
  • Agree on clear lines of communication and decision-making authority so the response is fast and coordinated.

Frequently asked questions

What is a Crisis Management Futurespective?
It's a forward-looking session where your team imagines possible crises, assesses their impact, and plans prevention and response before anything happens.
When should a team run this template?
Run it during planning cycles, before major launches or after an incident elsewhere in your industry, whenever you'd rather prepare for a risk than react to it.
How is a futurespective different from a regular retrospective?
A retrospective looks back at what already happened. A futurespective looks forward: your team imagines scenarios like a data breach or a supply disruption and prepares its response now.
How often should you run a Crisis Management Futurespective?
Once or twice a year suits most teams, plus whenever something big changes, such as a new product, a new market or a restructure. Risks shift, and an old plan may name people who have since left.
Who should take part in a Crisis Management Futurespective?
People from each area a crisis would touch, such as operations, IT, communications, legal and leadership. Each sees risks and dependencies the others miss.
Ready to run this retrospective?Try this retrospective live