John F. Kennedy’s quote about crisis is absolutely true – it can bring both danger as well as opportunity. In our hometown of Dallas – ground zero for the Ebola crisis in the U.S. – we are finding the truth in this sage advice as well as experiencing it firsthand.
Nonprofits are not immune from crises. However, they are less likely to experience the kinds you read about in the paper. According to Melanie Lockwood Herman of the Nonprofit Risk Management Center, the top 10 risks for the social sector are:
- Lack of cash flow
- Ineffective fiscal oversight
- Reputation risk
- Lack of succession planning
- Ineffective staff exits
- Lack of crisis policies
- Dissatisfied donors
- Unmanaged conflict on board
- Lack of good governance practices
Herein lies the opportunity of crises. By preparing for any and all of these crises through an effective risk management response, nonprofits can develop plans to protect themselves from the worst-case scenario. The Ebola crisis in Dallas is a wake-up call for all of us to be more prepared and ensure that we manage risk appropriately before, during and after a crisis. As we reviewed best practices, here is what we found:
Risk management is attempting to identify and then manage crises or threats that could severely impact or bring down your organization. We were shocked to learn in a recent report that while upper-level nonprofit managers listed “risk management and legal issues” of high importance, lower-level managers listed it much lower in importance. We encourage leaders to re-evaluate risk management as a fundamental aspect of all leaders. In addition, it is important to conduct a customized risk assessment, possibly coupled with your organization’s strategic plan. This will ensure that your personnel policies, insurance, contracts and audits are all up-to-date. Regular trainings and simulations will help build readiness for appropriate responses to crises. We all conduct regular fire drills – why not simulate what you would do if someone hacked into your IT system or your organization received a questionable audit?
Crisis management skills should not be learned during a crisis. It is critical to know what to do and how to communicate appropriately, especially under the pressure of a crisis situation. In his article, “Best Practices in Crisis Communication” in the Journal of Applied Communication Research, Matthew W. Seeger supports developing a crisis communications plan, including release procedures, media contact list and designated spokespersons. Seeger also suggests that it is important to communicate with the public (including your staff and board). Be open and transparent, meet the needs of the media (if applicable) and collaborate with credible sources. He also encourages us to acknowledge uncertainty and accept that we cannot wait until all the facts are available.
Once the crisis is over, it is easy to put it behind you and not collect the wisdom learned. We highly encourage an after-action review. If your organization’s credibility is undermined by a crisis, leaders need to acknowledge this result and work proactively to explain the situation, acknowledge any mistakes and show what your organization has learned to earn back the trust of partners. This re-building effort may take time, but will be worth the effort.
We hope you will take this opportunity to rethink your own risk assessment process. We welcome your feedback on what you have done in your organization. Tune in next week for our blog on interviewing for cultural fit.