On 1 June 2009, Air France Flight 447 vanished over the Atlantic with 228 people on board, and within hours a national airline found itself unable to account for its own passengers. Families gathered at Charles de Gaulle Airport with no information to give them, news anchors filled airtime with speculation because there was nothing official to report, and phone lines buckled under the weight of thousands of simultaneous calls from people desperate to know whether someone they loved was alive or dead. The aircraft had flown into a storm and the pilots had lost control, though the world would not learn that for nearly two years. In those first hours and days, the cause was irrelevant to the people waiting for news, because the crisis they were living through had nothing to do with aerodynamics and everything to do with the human and organisational consequences that were already overwhelming every system Air France had in place.
Five years later, Malaysia Airlines Flight MH370 disappeared over the Indian Ocean carrying 239 passengers and crew, and the same heartbreaking demands fell on another airline and another government.
Different airline, different ocean, different circumstances, and yet the same desperate families appeared at the same kind of makeshift information centres, the same call centres collapsed under the same impossible volume, and the same gap opened between what people needed to know and what anyone could tell them. The cause of MH370's disappearance remains unknown to this day, which makes the parallel all the more striking, because the response challenges it created had almost nothing to do with causation and everything to do with consequences.
When Jeju Air Flight 2216 overran the runway at Muan International Airport in December 2024, and 179 of the 181 people on board lost their lives, the same organisational challenges emerged within hours, because they always do. A different country, a different decade, a mechanical cause that bore no resemblance to either Air France or Malaysia Airlines, and yet the operational demands on the responding organisation were fundamentally the same.
Each of these tragedies is its own, defined by its own losses and its own grief. But they share something important from an organisational standpoint, and it is the central insight that most crisis management programmes miss. Organisations pour enormous resources into predicting and preventing specific events, and that investment is essential. Prevention is always preferable to response.
Yet when prevention fails, the nature of the triggering event has remarkably little bearing on whether the organisation survives the aftermath. What determines the outcome is how effectively that organization manages the consequences that follow, and those consequences turn out to be far more predictable than the events that trigger them.
The Event Is Rare, but the Consequences Are Not
Every crisis management professional has heard the word "unprecedented" used to describe a disaster, whether it was the 2004 Boxing Day Tsunami, the September 11 attacks, or the COVID-19 pandemic. Each was framed as something that could not have been foreseen, something for which no amount of preparation would have been adequate.
The events themselves were indeed rare, some of them genuinely without modern precedent. The consequences they produced, however, were anything but unprecedented, and Kenyon has seen those same consequences play out across more than 700 incidents in 170 countries over 120 years of crisis response work. A factory explosion in Texas and an earthquake in Turkey generate very different headlines, yet both create the same operational reality on the ground. Families cannot get information fast enough. Media coverage outpaces the organisation's ability to respond. Phone systems fail under volumes they were never designed to handle. Government agencies arrive with overlapping mandates and conflicting priorities. And a leadership team that was running a normal operation 12 hours ago is now expected to coordinate a humanitarian response it has never rehearsed.
What changes between incidents is the triggering event. What remains constant is the human and organisational fallout that follows it, and that consistency is what makes crisis management a disciplined, teachable practice rather than an exercise in improvisation.
The 12 Predictable Consequences
Strip any large-scale crisis down to its operational reality and you will find some combination of twelve recurring consequences. Not every incident produces all twelve, and the severity of each varies with the scale and nature of the event, yet these twelve patterns appear with such regularity that they form the basis of Kenyon's entire approach to crisis preparedness.
1. Organisational chaos. A crisis arrives without warning and overwhelms the management structures that were designed for normal operations. The people who run day-to-day business are suddenly expected to coordinate a response that cuts across every department, involves external agencies they have never worked with before, and operates under a kind of time pressure that no standard business process was built to handle. Decision-making bottlenecks emerge immediately, reporting lines become unclear, and individuals with well-defined peacetime roles find themselves doing unfamiliar work in conditions of extreme stress.
2. Masses of affected people needing information. Survivors, their families, employees, and the wider community all need to understand what has happened, who is affected, and what is being done. They need this information faster than any organisation can realistically verify and release it, and the gap between demand and availability breeds anxiety, anger, and a loss of trust that can permanently damage the relationship between an organisation and the people it serves.
3. Continuous media coverage. The modern media environment does not wait for official statements, and the first account of a crisis is almost never written by the organisation at its centre. Within minutes of a major incident, social media accounts are posting footage, news desks are dispatching crews, and a narrative is taking shape that the organisation may spend weeks trying to correct. An organisation that takes six hours to release its first statement will discover that the story has already been told without its input.
4. Overwhelming phone inquiries. When the 2004 Boxing Day Tsunami struck, UK and Swedish government call centres were overwhelmed within minutes, not hours. After Asiana Flight 214 crashed in San Francisco in 2013, the U.S. Department of Transportation fined the airline because the only phone number available to distraught families was the general reservations line. The volume and emotional intensity of inbound calls in the first hours of a major incident routinely exceeds anything organisations have planned for, and the failure to manage those calls compounds the distress of people who are already in crisis.
5. Unanswered questions about causation. Investigators, regulators, families, and journalists all want to know why the incident happened, and they want to know immediately. The reality is that establishing causation is a process that takes weeks, months, or in some cases years, and the tension between the urgent demand for answers and the genuine absence of confirmed facts creates one of the most difficult communication challenges in any crisis response.
6. Immediate financial demands. The costs begin accumulating from the first hour and escalate rapidly. Search and recovery operations require funding. Families need flights, hotels, and support at the scene. Call centres need to be stood up and staffed. Legal counsel needs to be retained. Rapid assistance payments need to reach affected families before bureaucratic processes would normally allow. Total financial exposure can move from thousands to millions within the first few days, and the mechanisms most organisations have in place for releasing funds are rarely designed to operate at that speed.
7. Information management challenges. Data arrives from multiple sources, in different formats, at a volume that quickly exceeds anyone's ability to track manually. Which families have been contacted? What have they been told? What commitments have been made, by whom, and have they been fulfilled? Without systems designed specifically for crisis data management, organisations lose visibility over their own response at precisely the moment when accurate information is most critical.
8. Multiple government agencies. Any significant incident draws involvement from transport safety investigators, law enforcement, coroners, foreign affairs departments, aviation regulators, and sometimes military agencies, each operating under its own legal mandate, its own timeline, and its own rules about what information can be shared with whom. Coordinating with all of them simultaneously while running your own response requires a level of inter-agency fluency that most organisations have never had to develop.
9. Deceased recovery and identification. In incidents involving fatalities, the recovery, documentation, and formal identification of the deceased is governed by strict legal and forensic requirements that cannot be compressed regardless of the pressure to move quickly. Disaster Victim Identification is a multi-agency process that can take weeks, months, or in extreme cases years to complete, and the families waiting for confirmation live through every day of that process in a state of unresolved grief.
10. Personal effects recovery and return. A wedding ring recovered from a crash site. A child's toy found in the wreckage. A passport that was in someone's carry-on bag. The belongings of those involved in a crisis carry emotional weight that is impossible to overstate, and the process of systematically recovering, cataloguing, cleaning, and returning those items to the people they belong to is one of the most sensitive and logistically demanding aspects of any response operation.
11. Business disruption. While the human consequences of a crisis demand immediate and sustained attention, the organisation must continue to function. Aircraft need to keep flying, ships need to keep sailing, production lines need to keep running, and the pressure to resume normal operations creates a persistent tension with the humanitarian imperative to prioritise the people who have been affected. Managing that tension without sacrificing either the response or the business requires deliberate, senior-level leadership that most crisis plans do not account for.
12. Leadership vacuum. A crisis demands visible, decisive, and compassionate leadership at the exact moment when senior leaders are least prepared to provide it. Most CEOs have never managed a mass casualty event, have never stood in front of grieving families to deliver information that no one wants to hear, and have never faced a press conference where every word will be parsed for legal liability and emotional sincerity at the same time. The gap between what is expected of leadership in a crisis and what most leaders have actually been trained to do represents one of the most dangerous vulnerabilities an organisation can carry into a major incident.
Why Consequence-Based Planning Works
The conventional approach to crisis planning is event-driven. Organisations develop an earthquake plan, a hijacking plan, a pandemic plan, and a cyber attack plan, each with its own set of assumptions, its own procedures, and its own exercise programme. The logic seems sound: if you can anticipate the event, you can pre-build the response.
The flaw in this logic reveals itself the moment something happens that does not match a rehearsed scenario. When the crisis that actually arrives bears no resemblance to the crisis that was planned for, the organisation finds itself without a playbook, and it stalls at the very moment it most needs to move. This remains the single most common failure mode in crisis response, and it explains why organisations that have invested heavily in scenario planning can still be caught flat-footed when reality departs from the script.
Consequence-based planning begins from a fundamentally different starting point. Rather than asking "What event might happen?", it asks "What consequences will we need to manage when something does happen?" And because the answer to that second question is the same twelve consequences regardless of the triggering event, the organisation ends up building a response capability that transfers across every type of incident it could face.
This gives consequence-based organisations three significant advantages. The first is scalability, because the same humanitarian assistance framework that supports 50 affected families can expand to support 500 without being redesigned; the structure and processes remain the same and only the resources need to increase. The second is transferability, because a team trained to manage the twelve consequences can deploy effectively whether the incident is a crash, a cyber attack, a natural disaster, or a terrorist event, since the operational demands in each case are fundamentally similar even when the headlines are not. The third is speed, because when an organisation already has standing teams, pre-built checklists, and pre-identified facilities for each consequence area, there is no time wasted debating which plan applies or assembling an ad hoc response team from scratch. The framework activates and people step into roles they have already trained for.
Building a Consequence Management Framework
Effective consequence management rests on four foundations, and weakness in any one of them undermines the other three.
Structure
Organise the crisis response around functional areas that correspond to the twelve consequences, with each area led by a designated individual who has a deputy, a checklist of immediate actions, and clear reporting lines to the crisis management team. The structure should be horizontal rather than hierarchical, because a humanitarian assistance lead who has to wait for sign-off through three layers of management before taking action is not going to be able to serve families at the speed and with the sensitivity the situation demands.
People
A crisis management organisation only works when the people assigned to it understand their roles, have practised performing them under realistic conditions, and have both the tools and the authority to act when the situation demands it. This extends well beyond internal personnel. Insurers, legal counsel, family assistance specialists, communications advisors, and crisis response providers like Kenyon need to be embedded in the plan from the outset rather than contacted for the first time once the crisis is already underway.
Facilities
Every major response requires physical and virtual spaces that are ready to activate at short notice, including a crisis management centre, a call centre, a family assistance centre, a media briefing location, and staging areas for response teams. Know where each of these will be established, what technology and infrastructure they require, and how quickly they can be made operational. An organisation that discovers after an incident that it has no suitable location for a family assistance centre has failed at the most fundamental level of preparedness, and the people who pay the price for that failure are the families who needed that centre most.
Rehearsal
Exercise the plan regularly, and do it under conditions that reflect the reality of how crises actually occur rather than the convenience of how training is typically scheduled. A full activation exercise run at 2:00 AM on a Saturday with minimal advance notice will reveal weaknesses that a scheduled Tuesday afternoon tabletop discussion never could, because the stress, fatigue, and confusion of a real crisis cannot be simulated in a conference room during business hours. Test whether call-out procedures actually reach people at odd hours, whether communications channels function under load, whether facilities can be opened and equipped on short notice, and whether the leadership team can make sound decisions when they are tired and under-informed. Every exercise should generate specific, documented findings, and those findings should drive concrete changes to the plan before the next one takes place.
The Human Dimension
Behind every one of the twelve consequences is a human being whose life has been disrupted or destroyed, and the entire purpose of a consequence management framework is to serve those people well at the worst moment of their lives. The operational structures, the checklists, the logistics plans, and the call centre procedures are not ends in themselves. They exist so that when a family member arrives at an assistance centre looking for news of someone they love, there is a trained person ready to meet them, a process in place to get them accurate information, and a system that ensures they are not forgotten once the initial response winds down.
When organisations get this right, they guide affected individuals through the phases of crisis and recovery toward what Kenyon calls the "new normal," which is a recognition that life after a major incident will never look the same as life before it, and that the goal of response is not to restore what was lost but to help people find their footing in a reality that has permanently changed. Getting it right means providing honest information when people are desperate for answers, treating personal belongings with the reverence they deserve, and maintaining contact with families long after the media has moved on to the next story.
When organisations get it wrong, when they retreat behind legal caution and corporate positioning instead of engaging directly with the people affected, the damage extends far beyond the immediate crisis. Families who feel abandoned by the organisation responsible for their loss become adversaries rather than partners in recovery. Employees who watch their company fail to show basic human decency lose faith in the institution they work for. And public trust, once lost in the crucible of a crisis, is extraordinarily difficult to rebuild.
Consequence-based planning exists to prevent that outcome. Not by forcing a choice between compassion and operational competence, but by building a framework robust enough to deliver both, even under the most extreme pressure an organisation will ever face.
If you’d like to discuss how we can support your organization in supporting with consequence management in crisis response, please get in touch.
Frequently Asked Questions
What is consequence management in crisis response?
Consequence management is an approach to crisis planning and response that focuses on managing the predictable aftermath of a crisis rather than attempting to anticipate every possible triggering event. It is grounded in the observation that while specific incidents are rare, the operational and human consequences they produce follow consistent patterns across all types of crises, and by organising response capabilities around those patterns, organisations build a framework that works regardless of what caused the incident.
How many consequences does a typical crisis produce?
Kenyon's framework identifies twelve predictable consequences that occur in varying combinations during any large-scale crisis, ranging from organisational chaos and media pressure through to personal effects management and leadership challenges. Not every incident produces all twelve, but every significant incident produces several of them, and the response methodology for each individual consequence remains consistent regardless of the triggering event.
Why is consequence-based planning more effective than scenario-based planning?
Scenario-based planning builds specific responses for anticipated events, which means the organisation is prepared only for the scenarios it has actually rehearsed. When reality departs from the script, teams find themselves without a playbook and the response stalls. Consequence-based planning trains teams to manage outcomes rather than events, which creates a transferable capability that scales with the severity of the incident and applies across any type of crisis the organisation might face.
What is the first step in building a consequence management framework?
Start by mapping the twelve consequence areas to your own organisation and assigning a designated lead for each one, then build checklists of immediate actions, identify the facilities you will need, and assign trained personnel to each functional role. Once the framework is in place, begin exercising it under realistic conditions that include scenarios run outside of business hours and with minimal advance notice, because the only way to know whether the structure holds under pressure is to test it under conditions that approximate real pressure.
How does consequence management apply outside aviation?
The twelve-consequence framework is not aviation-specific, even though aviation incidents have provided many of the case studies that shaped its development. Maritime operators, energy companies, hospitality groups, event organisers, and government agencies all face the same fundamental consequences when a major incident occurs, and while the operational details vary from one industry to the next, the management framework is universal because the human and organisational consequences of a crisis are universal.
What role does Kenyon play in consequence management?
Kenyon is TrustFlight's crisis management and response capability, bringing more than 120 years of operational experience across 700+ incidents in 170 countries. Kenyon works with organisations to build consequence-based crisis management plans, trains their teams through realistic exercises that test every element of the framework, and provides 24/7 response capability across all twelve consequence areas when an incident occurs.