The First Hours of a Crisis: A Leader's Checklist

A practical order of operations for the first hours of a workplace crisis: life safety, clear command, a decision log, the first message and reporting deadlines.

Leader Chaos · Last reviewed October 23, 2026 · 6 min read

A crisis rarely arrives at a convenient moment. A fire alarm during a client visit, a serious injury on the shop floor, a flood that closes the building overnight: the first hours are confusing, loud and full of people looking to you for answers you do not have yet.

Ready.gov, the federal preparedness site, puts it plainly: "The actions taken in the initial minutes of an emergency are critical." What you do early shapes everything that follows, from whether everyone is accounted for to whether your people trust what you tell them next week.

This checklist is for leaders who are not emergency professionals. It is general information, not legal advice, and it does not replace your emergency plan, your legal advisers or instructions from responders on scene. Think of it as the order of operations to hold in your head when the plan meets reality.

First: protect life safety

Before anything else, make sure people are safe. If anyone is hurt or in danger, call 911. Then carry out the protective action your plan calls for. Ready.gov lists the main life-safety options as evacuation, shelter, shelter-in-place and lockdown, and the right one depends on the hazard.

Once fire, police or medical crews arrive, your role changes. According to OSHA's guidance on emergency action plans, responding officials "will assume responsibility for the safety of building occupants," and the highest-ranking responder takes the incident command role, working with your onsite emergency coordinator. Your job becomes supporting them: answering questions about the building, the people inside and any hazards.

Next, account for everyone. OSHA recommends a head count after an evacuation, with the names and last known locations of anyone missing passed to the official in charge. Don't forget visitors and contractors. OSHA notes that some employers have them sign in on arrival and use that list when accounting for everyone at the assembly area.

Decide who is in charge, and say it out loud

Confusion about authority wastes time when you have none to spare. The National Incident Management System (NIMS), FEMA's national framework for managing incidents, says command should be clearly established at the beginning of an incident. When command passes to someone else, the handoff includes a briefing and notice to everyone involved.

For a business, that means naming one person to lead your organization's response, even if it is temporary. NIMS also describes unity of command: each person reports to only one person. If three executives are each giving the front-line team different instructions, pick one channel and stick to it.

The same framework warns against spontaneous deployment, meaning resources that show up without being requested and add to the burden on scene. Well-meaning colleagues who rush to the site can get in the way. Give them a clear task or ask them to stand by until they are needed.

Start a simple log

Write things down from the start. NIMS expects incident teams to document results against their objectives and to collect, record and safeguard incident documents. You do not need special software. A shared document or a notebook with four columns works: time, what happened, what was decided, and who decided it.

For example, imagine a 40-person manufacturer whose packaging line catches fire on a Tuesday afternoon. A log entry might read: "3:42 p.m. Fire department cleared Building B. Plant manager decided second shift will not report; HR to call shift leads by 5:00 p.m." That record will help you brief the next person, answer questions from insurers and regulators, and run an honest review afterward.

Get the first message out quickly

People will fill a silence with guesses. The CDC's Crisis and Emergency Risk Communication (CERC) manual advises releasing lifesaving information as soon as it is confirmed, even if you do not have all of the details. It also warns that if you do not communicate about your response, "as far as the public knows, you are not responding."

Your first message does not need every detail. CERC advises stating what you know, what you don't know, and what you are doing to find out more, without speculating. In the initial phase, the manual recommends expressing empathy, explaining risks, promoting action and describing response efforts.

A first message to employees might sound like this hypothetical example: "At about 3:30 this afternoon there was a fire in Building B. Everyone has been accounted for, and two employees were taken to the hospital as a precaution. Building B is closed. Do not come to the site tonight. We will send an update by 7:00 p.m." Then keep the promise about the next update. Our guide to crisis communication covers the principles behind messages like this in more depth.

Know your reporting deadlines

Some obligations start the moment an incident happens. Under OSHA's rule at 29 CFR 1904.39, employers must report a work-related fatality within 8 hours. An in-patient hospitalization, amputation or loss of an eye must be reported within 24 hours. Reports can be made to the nearest OSHA Area Office, through OSHA's 24-hour line at 1-800-321-6742, or online.

Other duties, such as notifying your insurer or an industry regulator, depend on your business and location. Your emergency plan should list them, and the first hours are the time to check who is responsible for each one.

Look after people, including yourself

People need information and reassurance as much as they need instructions. The U.S. Office of Personnel Management's handbook for managers on traumatic events observes that particularly in the first few hours after a tragedy, "information will be scarce and much in demand." It advises sharing information as soon as you have it, not being afraid to say "I don't know," staying visible and contacting your Employee Assistance Program (EAP) if you have one.

Take care of yourself as well. Crisis leadership is exhausting, and decisions get worse when you have not eaten, rested or handed anything off. If anyone, including you, is in emotional crisis, call or text 988 to reach the 988 Suicide & Crisis Lifeline in the U.S., which is free, confidential and available 24/7. If someone is in immediate danger, call 911. This checklist is not a substitute for professional care.

Plan the next stretch of time

Once the immediate danger has passed, shift from reacting to planning. NIMS notes that every incident should have an action plan, though not every incident needs a written one. If a situation is likely to continue beyond the first operational period or becomes more complex, a written plan becomes increasingly important.

In practice, set two or three objectives for the next several hours, assign an owner to each, and schedule your next check-in and your next update to staff. If the situation is large enough to need defined roles, our guide to the Incident Command System for businesses explains how to organize them.

Key takeaways

Life safety comes first: call 911, take protective action and account for everyone, including visitors.
Name one person in charge, keep one reporting line, and brief anyone who takes over.
Start a simple time-stamped log of events and decisions right away.
Send a fast, honest first message that says what you know, what you don't, and when the next update will come.
Check reporting deadlines early, such as OSHA's 8-hour rule for work-related fatalities.

Sources

Spotted something out of date? Let us know.