A 20-person AI agency in Atlanta experienced three crises in a single year. In March, a senior engineer accidentally exposed a client's customer database to the public internet for 14 hours before it was discovered. In July, their largest client — 28% of revenue — terminated their contract with 30 days' notice after a leadership change. In October, four team members resigned within two weeks of each other, including the head of delivery. Each crisis threatened the agency's survival. The agency survived all three, but not because they had plans in place — they survived through frantic improvisation that consumed leadership bandwidth, damaged morale, and cost far more than preparation would have.
A crisis is any event that threatens the agency's ability to operate normally, serve clients, or maintain financial health. Crises are inevitable — every agency will face them. What separates the agencies that emerge stronger from those that do not is the quality of their preparation and their ability to respond systematically under pressure.
Types of Agency Crises
Financial Crises
- Major client loss (especially a concentrated client)
- Extended cash flow shortfall
- Significant unexpected expense (legal action, regulatory penalty)
- Economic downturn reducing client spending
Operational Crises
- Data breach or security incident
- Critical system failure
- Major project failure or delivery crisis
- Loss of key team members
- Mass resignation
Reputational Crises
- Public failure of an AI system you built
- Negative media coverage
- Client complaint going public
- Legal action with public visibility
- Social media incident
External Crises
- Economic recession
- Pandemic or public health emergency
- Natural disaster affecting operations
- Major regulatory change
- Key vendor failure or outage
The Crisis Management Framework
Phase 1: Detection and Assessment
Detection: Crises are detected through:
- Monitoring systems (security alerts, financial alerts)
- Client communication (complaint, termination notice)
- Employee reports (resignation, concerns)
- External sources (media, regulatory notice, legal correspondence)
Initial assessment (within 1 hour of detection):
- What happened?
- How severe is the impact?
- Who is affected?
- Is the crisis ongoing or contained?
- What is the immediate risk?
Severity classification:
Level 1 — Critical: Threatens agency survival. Immediate executive involvement required. Examples: data breach involving multiple clients, loss of client representing 30%+ of revenue, regulatory enforcement action.
Level 2 — Major: Significant impact on operations or finances but not existential. Senior leadership involvement required. Examples: loss of client representing 15-30% of revenue, resignation of 3+ team members, major project failure.
Level 3 — Moderate: Disruptive but manageable through normal management. Department leader involvement. Examples: loss of smaller client, single key person departure, minor security incident.
Phase 2: Activation
Crisis team: Depending on severity, activate the appropriate crisis response:
Level 1 crisis team:
- CEO / Managing Director (overall leadership)
- COO / Head of Operations (operational coordination)
- Communications lead (internal and external messaging)
- Legal counsel (legal guidance and risk management)
- Subject matter expert (relevant to the crisis type — CTO for tech crises, CFO for financial crises)
Level 2 crisis team:
- Department head (issue owner)
- Operations support
- Communications support
First steps upon activation:
- Convene crisis team (within 2 hours for Level 1, within 24 hours for Level 2)
- Establish a communication channel for the crisis team (dedicated Slack channel, group text)
- Gather all available information
- Identify immediate actions needed to contain the crisis
- Begin documenting everything — decisions, actions, timeline
Phase 3: Containment
The goal of containment is to prevent the crisis from expanding while you develop a full response plan.
For a data breach:
- Isolate affected systems
- Determine the scope of data exposure
- Engage forensic investigation
- Prepare for notification requirements
For a major client loss:
- Determine the financial impact and timeline
- Assess whether the decision is reversible
- Identify affected projects and team members
- Begin financial impact planning
For key person departures:
- Assess knowledge and relationship gaps
- Identify immediate coverage for critical responsibilities
- Begin knowledge transfer
- Communicate to affected teams and clients
For a project crisis:
- Assess the situation with the delivery team
- Determine what can be salvaged
- Develop client communication strategy
- Assign senior leadership to the project
Phase 4: Communication
Principle: Communicate early, honestly, and consistently.
Internal communication:
- Inform the full leadership team immediately for Level 1 and 2 crises
- Inform affected team members as soon as a communication plan is in place
- Provide regular updates (daily for active crises)
- Be honest about the situation while maintaining calm and confidence
- Share the plan and the team's role in it
Client communication:
- Inform affected clients proactively — they should never learn about a crisis from someone other than you
- Be transparent about what happened, what you are doing about it, and what they should expect
- Assign a single point of contact for each affected client
- Provide regular updates until the crisis is resolved
External communication (if needed):
- Designate one spokesperson for any external communication
- Coordinate with legal counsel before making public statements
- Be factual, brief, and empathetic
- Do not speculate, blame, or minimize
Phase 5: Resolution
Develop and execute the resolution plan:
- Define specific actions needed to resolve the crisis
- Assign owners and deadlines for each action
- Track progress daily
- Adjust the plan as new information emerges
- Continue communication throughout
Financial stabilization (for financial crises):
- Freeze discretionary spending immediately
- Accelerate collections on outstanding receivables
- Engage lenders about credit availability
- Model financial scenarios (best case, expected, worst case)
- Develop a cost reduction plan with triggers at defined revenue levels
- Identify revenue acceleration opportunities (upsell existing clients, accelerate pipeline)
Operational stabilization (for operational crises):
- Redistribute responsibilities to cover gaps
- Engage contractors or partners for temporary support
- Adjust project timelines and communicate to clients
- Prioritize critical work and defer non-essential activities
Phase 6: Recovery
After the immediate crisis is contained and resolved:
Post-crisis review (within 2 weeks of resolution):
- Detailed timeline of events
- What worked well in the response
- What could have been done better
- Root cause analysis: why did this crisis happen?
- What changes will prevent recurrence?
Recovery actions:
- Implement changes identified in the post-crisis review
- Rebuild relationships affected by the crisis (clients, team members, partners)
- Restore normal operations
- Address any morale or cultural impacts
- Update risk register and crisis plans based on lessons learned
Financial recovery plan:
- Revenue rebuild timeline and targets
- Hiring plan (if headcount was reduced)
- Investment recovery timeline
- Cash reserve rebuild plan
Crisis Playbooks
Pre-built playbooks for the most common crisis scenarios accelerate response time and reduce errors.
Playbook: Major Client Loss
Day 1:
- Confirm the termination and understand the timeline
- Calculate immediate financial impact (monthly and annual revenue loss)
- Assess which team members are affected
- Brief the leadership team
Week 1:
- Attempt to salvage (if appropriate and the decision seems reversible)
- Develop a financial plan covering the gap
- Communicate to affected team members with honesty and a plan
- Activate sales team to accelerate pipeline
- Review all other clients for expansion opportunities
Month 1:
- Execute revenue replacement plan
- Manage any necessary cost adjustments
- Complete client transition professionally
- Support team members through the change
Playbook: Security Breach
Hour 1:
- Activate incident response team
- Contain the breach (isolate affected systems)
- Preserve evidence
Day 1:
- Determine scope of data exposed
- Engage forensic investigators
- Brief legal counsel
- Begin notification planning
Week 1:
- Notify affected clients and regulatory authorities per legal requirements
- Provide affected individuals with support (credit monitoring, etc.)
- Implement immediate security improvements
- Communicate transparently with all stakeholders
Month 1:
- Complete investigation
- Implement comprehensive security improvements
- Client relationship recovery
- Post-incident review and lessons learned
Playbook: Mass Resignation
Day 1:
- Understand the scope and reasons
- Identify critical knowledge and relationship gaps
- Begin knowledge transfer for departing individuals
- Brief leadership team
Week 1:
- Communicate to the full team with transparency and a plan
- Redistribute responsibilities
- Engage contractors for temporary coverage
- Activate recruiting for replacement positions
- Communicate to affected clients
Month 1:
- Stabilize operations with interim coverage
- Address root causes of the resignations
- Accelerate hiring
- Rebuild team morale and confidence
Crisis Prevention
The best crisis management is prevention:
- Risk management: Maintain a risk register and actively mitigate top risks
- Financial reserves: Keep 2-3 months of operating expenses in cash
- Client diversification: No single client should exceed 25% of revenue
- Knowledge distribution: No single person should hold critical, undocumented knowledge
- Security hygiene: Maintain strong security practices, training, and monitoring
- Relationship maintenance: Proactive client and employee relationship management to detect issues early
- Insurance: Adequate coverage for the risks you face
Your Next Step
This week:
- Identify the three most likely crises your agency could face in the next 12 months.
- Check whether you have a current emergency contact list and communication tree.
- Verify that your cash reserve covers at least 2 months of operating expenses.
This month:
- Build a crisis management framework including crisis team composition, severity levels, and activation procedures.
- Develop playbooks for your 2-3 most likely crisis scenarios.
- Review your insurance coverage with your broker.
This quarter:
- Conduct a tabletop crisis exercise — walk through a crisis scenario with your leadership team.
- Build or update your business continuity plan.
- Review and strengthen crisis prevention measures (risk mitigation, financial reserves, knowledge distribution).
- Train all managers on crisis communication principles.
Crisis management is not about preventing all bad things from happening. It is about ensuring that when they do happen, your agency responds quickly, decisively, and systematically rather than with panic and improvisation. The investment in preparation is small compared to the cost of unmanaged crises.