Ultimately, management should be able to answer the following questions:
What kinds of crises could your organization face?
Can your organization detect a crisis in its early stages?
How will it manage a crisis if one occurs?
How can it benefit from a crisis after it passed?