Most boards spend their time on budgets, programs, and strategy. Then one morning a reporter calls, a donor forwards an alarming email, or a staff member files a complaint that lands on social media. Suddenly the board is in a place it never rehearsed: managing a public crisis in real time.
Crises are rare, but they are not unpredictable. Nearly every nonprofit will face at least one reputational threat in its lifetime. The organizations that come through intact are rarely the ones that got lucky. They are the ones that prepared, kept their heads, and understood exactly what the board should and should not do.
What Counts as a Crisis
Not every problem is a crisis. A late audit, a program that underperforms, or a difficult budget year are management challenges. A crisis is different: it threatens the organization's reputation, finances, or public trust, and it usually arrives with urgency and an audience.
Common triggers include:
- Financial misconduct or the appearance of it (misused funds, a missing deposit, a questionable expense)
- A data breach exposing donor or client information
- Allegations against a leader or board member (harassment, fraud, abuse)
- A safety incident involving clients, volunteers, or staff
- A public controversy tied to a partner, funder, or political stance
- A sudden leadership departure under a cloud
The common thread is that outsiders are watching, and the story will be told with or without you.
Know Your Lane Before the Phone Rings
In a crisis, role confusion is the enemy. The board governs; the staff manages. That line does not disappear under pressure, though it does shift.
- The executive director typically leads operational response and day-to-day communication, unless the ED is the subject of the crisis.
- The board chair is usually the board's public voice and the point of contact for the ED. The chair does not become a second executive director.
- The full board sets tone, exercises oversight, and makes only the decisions that genuinely belong to it: personnel action involving the ED, major financial commitments, engaging outside counsel.
A frequent failure is the opposite of neglect: individual board members freelancing. One director talks to a reporter, another posts on Facebook, a third emails donors with a personal reassurance. The result is a chorus of conflicting messages that makes the organization look chaotic. Agree in advance that all external communication flows through one or two designated people.
When the ED Is the Problem
The hardest crises are the ones where the executive director is the subject. Here the board cannot rely on the usual channel, because that channel is compromised.
In these situations the board must:
- Move quickly to an executive session without the ED present.
- Consider whether administrative leave is appropriate while facts are gathered.
- Retain independent counsel or an outside investigator rather than relying on internal judgment.
- Resist the urge to protect a leader they like. Loyalty to a person cannot override the duty to the mission and the people it serves.
This is the moment the board's fiduciary duty becomes concrete. Acting slowly to spare a colleague's feelings can turn a manageable problem into an existential one.
The First 24 Hours
Speed matters, but so does accuracy. The goal is not to say everything immediately; it is to say something honest quickly and to avoid saying anything you will have to retract.
A practical sequence:
- Convene the right small group. The chair, the ED (if not implicated), and perhaps the treasurer or a legal-minded member. You do not always need the full board in the first hour.
- Establish the facts you actually know. Separate confirmed information from rumor. Write it down.
- Assess legal and reporting obligations. Data breaches, abuse allegations, and financial fraud often carry mandatory reporting duties with tight deadlines. Get counsel involved early.
- Draft a holding statement. Something true, brief, and human: acknowledge the situation, state that you take it seriously, and describe your next step. "We are aware of the report and are gathering the facts. We will share more as soon as we responsibly can."
- Decide who speaks and who does not. Brief every board member on the message and the boundaries.
Say What You Can, Honestly
The instinct to minimize or spin almost always backfires. Stakeholders forgive organizations that are candid and accountable far more readily than those that appear to hide. A few principles hold up under pressure:
- Do not lie or guess. "We do not yet know" is a legitimate answer and far safer than a wrong one.
- Lead with the people affected, not with the organization's reputation. Concern for clients and donors should be visible and genuine.
- Own what is yours. If a mistake was made, acknowledging it early is a strength, not a confession of weakness.
- Say what you are doing about it. A clear next step reassures people more than reassurance itself.
- Do not disparage the individuals involved, especially in personnel matters where privacy and legal exposure are real.
Prepare While the Sky Is Clear
The best crisis response is built long before the crisis. A board that has done the following will move with confidence instead of panic:
- A short crisis communications policy naming who speaks, how the board is notified, and how decisions get made under time pressure.
- A current contact tree so every board member can be reached within hours, not days.
- A relationship with legal counsel you can call, not a name you have to find in an emergency.
- Adequate insurance, including directors and officers (D&O) coverage, reviewed so the board knows what it protects.
- Clear board minutes and records, because a crisis often turns into scrutiny of how decisions were made. Well-kept governance records are your best evidence of good faith.
Doing a tabletop exercise once a year, walking through a hypothetical scenario for thirty minutes at a board meeting, does more to prepare a board than any binder. It reveals gaps in your plan while the stakes are imaginary.
After the Storm
When the immediate danger passes, the board's work is not finished. Debrief honestly: What happened, what did we do well, and what would we change? Communicate closure to your stakeholders so the last thing they hear is not the alarm but the resolution. And update your policies with what you learned, because the next crisis will not look exactly like the last one.
The Takeaway
A crisis tests governance more sharply than any board retreat ever will. You cannot prevent every emergency, but you can decide in advance who speaks, how you will act, and what you stand for under pressure. Spend thirty minutes at your next meeting agreeing on a one-page crisis plan and confirming who holds the phone when the reporter calls. That small investment is the difference between a board that steadies the ship and one that adds to the storm.