3 min read

The Skill Most Leaders Ignore Until It's Too Late

white and black braille machine

There's a particular kind of clarity that arrives only when things fall apart.

I've seen it in leaders who navigate breaches, product failures, regulatory blowups, and public disasters. When the pressure peaks, you find out very quickly who has built the muscle to lead through chaos — and who has been coasting on the assumption that things will mostly be fine.

Most leaders invest heavily in strategy, vision, and execution. Crisis management barely makes the list. It feels hypothetical. Something to address when it becomes relevant.

That's exactly the problem.

Crises Don't Announce Themselves

By definition, crises arrive at the worst possible time, compress your decision window, and expose every gap in your communication, your team structure, and your own emotional regulation. You can't prepare in the moment. The only preparation that works is the kind you do long before anything goes wrong.

This is why crisis management isn't just an operational skill — it's a leadership competency. And like most competencies, it atrophies when you don't practise it.

Nobody Feels This More Than a CISO

If there's one leadership role where crisis management isn't optional, it's the Chief Information Security Officer.

Think about what a CISO is responsible for: protecting the organisation's most critical assets against adversaries who are constantly improving. A breach can happen at 2am on a public holiday. A ransomware attack doesn't pause for a board meeting. When it hits, every executive, every customer, every regulator is watching — and the CISO is expected to lead with clarity and calm.

The data reflects this pressure. In 2026, 82% of CISOs now report directly to the CEO — up from 47% just three years ago. The role has moved from technical gatekeeper to operational executive. That shift brings visibility. It also brings accountability that very few other roles carry.

And yet, many CISOs still underinvest in the human side of crisis management: the communication, the composure, the ability to make consequential decisions with incomplete information and minimal sleep.

What Crisis Management Actually Develops

Practised leaders who invest in crisis management build a few things that don't come from any other kind of training:

Decision-making under pressure. Crises force you to act with imperfect information. Leaders who've rehearsed this learn to distinguish the decisions that need to be made now from the ones that can wait.

Stakeholder communication. What you say in a crisis — to your board, your team, your customers — matters as much as what you do. The wrong message can amplify the damage. The right one can preserve trust even in the hardest moments.

Composure as a leadership tool. When you're calm, your team can be calm. Panic is contagious, but so is steadiness. Leaders who've built this muscle can hold the room when everything else is unstable.

The Honest Investment Case

Here's what I think about when leaders ask whether crisis management is worth their time and budget:

Every organisation will eventually face a significant crisis. That's not pessimism — it's probability. The question isn't whether you'll need the skill. It's whether you'll have it when you do.

The leaders and teams who prepare — through tabletop exercises, incident simulations, and honest post-mortems — don't just respond better. They recover faster, retain more trust, and often emerge with stronger organisations than the ones they started with.

That's an extraordinary return on an investment that most people keep deferring.

If you're a CISO, or any leader who carries real accountability, crisis management deserves a permanent place in your development plan — not because something is about to go wrong, but because you owe it to the people who are counting on you when it does.

References

📷 Photo by Markus Winkler on Unsplash

Be the first to like this

Comments

Leave a comment