The crisis management team is a pre-defined group that takes strategic command during severe security incidents or emergencies. It typically includes members of executive management, the information security officer, legal counsel, and the communications lead. While the incident response team works operationally, the crisis management team makes strategic decisions: escalation to authorities, external communication, resource allocation, and business continuity. In your ISMS, document the team’s composition, activation criteria, and communication channels. Regular crisis exercises ensure the team is ready to act when needed.