Crisis

A crisis (plural: crises) is a turning point or decisive moment in events. Typically, it is the moment from which an illness may go on to death or recovery. More loosely, it is a term meaning 'a testing time' or 'emergency event'. An uncontrolled disaster or a combination of mismanaged disasters could lead to a crisis. The magnitude of a crisis could be bigger than a disaster in terms of loss expectancy. A crisis usually happens because of accumulated unattended/unresolved disasters/issue(s). It is always the goal of InfoSec to contain the disaster and never give it a chance to become a crisis. When a disaster becomes a crisis it usually out of control in some form or proportion. Every Crisis is a disaster; by the same token a Disaster need not be a crisis, because it could be controlled way before it becomes a crisis. Time is another factor that differentiates between crisis and disaster. Crisis usually has a longer lifespan as compared to Disaster because the birth of a Crisis arises from one or more unattended or uncontrolled or mismanaged Disasters. One factor might trigger a disaster (‘an emergency event’), whereas a crisis usually needs one or more factors that were either mismanaged, unattended to or unresolved in the initial stages as disasters and as a result those disaster(s) converged to form a crisis, hence the term Crisis Management. Usually it is seen that people are not able to clearly distinguish in information security between Disaster and Crisis and when one ends and the other starts.