ISO 22361 Crisis Command: Bronze, Silver & Gold

ISO 22361 establishes a tiered model for crisis leadership using Bronze, Silver, and Gold command levels, mapped to Green, Yellow, and Red severity. Bronze manages the operational response at the site. Silver coordinates across functions and resources. Gold owns strategic decisions and interfaces with the board and external stakeholders. This structure prevents the most common crisis failure: the wrong people making the wrong decisions at the wrong level.

The Problem: Crisis Response Without a Command Structure

Most organizations have a crisis plan. Very few have a command structure. The difference matters more than any other variable in a live response.

When a crisis activates, the first casualty is clarity. Who is in charge? Who escalates to whom? Who makes the call to involve the CEO? Who decides whether to contact regulators, or the media, or the board?

In the absence of a defined command structure, these questions get answered by whoever is loudest, most senior by title, or most physically present. That is not crisis management. That is improvisation under pressure.

ISO 22361, the international standard for crisis management published in 2022, provides a direct answer to this problem. It establishes a three-tier command model that gives every person in a crisis response a clear role, a clear level of authority, and a clear escalation path.

Why Getting the Command Level Wrong Is So Costly

The most common failure mode in crisis response is not a lack of planning. It is command contamination: a senior leader stepping into operational decisions that should be handled at the Bronze level, or an operational team making strategic calls that belong at Gold.

"When the CEO is deciding which buses to hire for evacuation, the strategic picture is going unmanaged. When the site supervisor is deciding whether to notify regulators, they are operating beyond their authority and outside their competence. Both errors compound the crisis."

The cost of poor command structure shows up in several ways:

• Decision bottlenecks, because everything escalates to the most senior person available, who is already overwhelmed

• Accountability gaps, because nobody is certain who approved what or when

• Communication failures, because there is no defined channel between operational teams and executive leadership

• Stakeholder mismanagement, because the person dealing with the board is also trying to manage the incident on the ground

• Post-incident liability, because there is no clear record of who made which decisions and on what basis

A structured command model eliminates most of these failures before they happen. The Bronze, Silver, Gold framework is the clearest and most widely adopted approach.

The Bronze, Silver, Gold Model Explained

The three tiers map directly to three severity levels: Green, Yellow, and Red. The higher the severity, the higher the command tier that is activated. Lower tiers remain active; upper tiers add authority and strategic direction above them.

Bronze (Operational) — Severity: Green — Trigger: Single-site or functional incident

Bronze is where the incident is happening. It is the operational tier: the people physically managing the response on the ground, or the function that owns the affected process.

Bronze responsibilities include:

• Contain and manage the immediate incident

• Protect life, assets, and operations within their span of control

• Report situation status upward to Silver at defined intervals

• Implement tactical decisions within approved parameters

• Log all actions, decisions, and communications

Bronze commanders are typically department heads, site managers, or function leads. They do not make strategic decisions. They execute the response within defined bounds and escalate when the incident exceeds those bounds.

Silver (Tactical / Coordination) — Severity: Yellow — Trigger: Multi-function or multi-site impact

Silver activates when an incident crosses functional boundaries, draws on shared resources, or has meaningful reputational, regulatory, or stakeholder implications. Silver coordinates between Bronze teams and ensures the overall response is coherent.

Silver responsibilities include:

• Coordinate resources and support across Bronze teams

• Prioritize competing demands when resources are constrained

• Interface with internal functions not represented at Bronze level (HR, Legal, Communications, Finance)

• Receive situation reports from Bronze and consolidate into a common operating picture

• Escalate to Gold when the incident exceeds Yellow severity criteria

• Maintain the incident log at the coordination level

Silver is typically chaired by the Crisis Management Manager or a designated deputy. It is an active coordination role, not a passive oversight one.

Gold (Strategic) — Severity: Red — Trigger: Organization-level or existential threat

Gold activates when the crisis threatens organizational continuity, triggers regulatory notification requirements, involves significant public or media attention, or requires decisions that can only be authorized at executive or board level.

Gold responsibilities include:

• Set strategic direction and authorize major decisions (evacuation, production halt, regulatory notification, media engagement)

• Protect organizational reputation and manage stakeholder relationships at the highest level

• Interface with the board, regulators, government, and major clients

• Allocate resources without constraint within organizational policy

• Receive consolidated situation reports from Silver

• Commission post-incident review and organizational learning

Gold is chaired by the CEO or a designated C-suite lead. It is not an operational role. Gold should never be managing Bronze-level tasks. If Gold is deciding which buses to hire, something has gone wrong.

"The key discipline of the Bronze, Silver, Gold model is boundary management. Each tier resolves what it can at its own level. It escalates only what genuinely requires a higher level of authority or resource. Escalation is not a sign of failure; it is the model working as designed."

Mapping Severity Levels to Command Activation

What the Model Requires to Work

The Bronze, Silver, Gold structure is only as strong as the infrastructure behind it. Several things must be in place before you can rely on it under live conditions.

Pre-appointed commanders at each tier

Every tier must have a named commander and at least one alternate. Waiting to assign command during the crisis is too late. The assignments must be documented, communicated, and rehearsed.

Escalation criteria, not escalation instinct

Define explicitly what triggers escalation from Green to Yellow, and from Yellow to Red. Use observable criteria: a production line has stopped, a data breach has been confirmed, a media inquiry has been received. Vague criteria produce inconsistent escalation.

A common operating picture

All tiers need access to the same situation status. A shared log, a crisis management platform, or a simple structured sitrep format sent at defined intervals accomplishes this. The goal is to prevent each tier from operating on a different version of reality.

Exercises that test the boundaries

Most tabletop exercises test within a single tier. The exercises that build real competence are the ones that force escalation decisions. Run a scenario that starts at Bronze and deliberately escalates to Silver, then to Gold. The handover moments are where most command failures occur.

Post-incident command review

After every activation, review the command structure specifically: did the right decisions happen at the right tier, were escalation triggers applied correctly, were the Silver and Gold tiers managing or overriding? The lessons live in those questions.