Crisis Management for Companies in Saudi Arabia: A Practical Plan

Crisis management for a company rests on three things you can prepare now: a small crisis team with one clear decision maker, a short written plan for the first hours and days, and the habit of telling employees, customers, suppliers, your bank and government bodies the truth early. Set them up before anything goes wrong, because a real crisis leaves no time to argue about who is in charge. This guide covers what a crisis is, who sits on the team, what to do first, how to keep a decision log, how to communicate, and how to learn from it afterward.

What counts as a crisis, and how it differs from risk and continuity

A crisis is an event that has happened, or is unfolding now, and threatens something the company cannot afford to lose: its people’s safety, its ability to pay wages and obligations, a critical activity, a key customer, its license or its reputation. It forces fast decisions on incomplete information. A late shipment is a problem; a late shipment from the only supplier of your best-selling product, with no stock left, is a crisis.

Crisis management vs risk management

Risk management looks ahead: it lists what could go wrong, judges how likely and serious each risk is, and decides in advance whether to reduce, insure, accept or avoid it. Crisis management starts when a risk has turned into an event, or when something happens that was on nobody’s list. Every crisis exposes a risk you underrated. If you have no structured way to do the first part, a risk management framework sized for your business is the place to start.

Crisis management vs business continuity

Business continuity keeps critical activities running, or restores them quickly, after a disruption: a backup site, a second supplier, a manual way to issue invoices. Crisis management is the leadership layer above it: who decides, what is said to whom, how cash and people are protected, and when to switch the continuity arrangements on. Our guide on how to prepare a business continuity plan covers that side step by step.

When an incident becomes a crisis

Agree in advance on the triggers that hand an incident to the crisis team:

• Someone’s safety is at risk.
• A critical activity has stopped longer than your continuity plan can tolerate.
• Cash may not cover the next payroll, contributions to the General Organization for Social Insurance (GOSI) or tax payments.
• A government body has suspended a service, license or registration the business depends on.
• A key customer, supplier or financier is affected, or the issue is going public.

Write down who can declare a crisis, usually the general manager or owner plus a named deputy, so nobody waits for permission.

Common crises for Saudi companies and the first move for each

Every business has its own weak points, but a handful of situations recur for small and mid-sized companies in the Kingdom.

A critical supplier fails

Confirm the facts with the supplier directly, count your stock and open orders, and contact the alternative suppliers named in your continuity plan. Tell affected customers early, with realistic dates, rather than after the delivery is already late.

A key client stops paying

With government and semi-government clients, approval and payment cycles can be long even when nothing is wrong, so a delay is not always a dispute. Find out where the invoice is stuck and who must approve it, check the contract’s payment and notice terms, and update your cash forecast at once to see how long you can carry the gap.

A regulatory suspension

A government platform may stop some of your services because a registration has lapsed, a document has expired or an obligation is outstanding, which can block hiring, visas or tenders. Identify exactly which service is stopped and why through the body’s official channels, fix the cause, and keep evidence of each step. Whoever handles Qiwa, GOSI and Ministry of Commerce matters owns this.

A system outage or cyber incident

If the accounting system, point of sale or e-invoicing solution goes down, isolate the affected systems, call your IT provider and switch to the manual procedures in your continuity plan. Check with your system provider and the published guidance of the Zakat, Tax and Customs Authority (ZATCA) before issuing invoices any other way. If personal data may have leaked, take legal advice promptly.

Regional disruption

Regional crises can lengthen shipping routes, raise freight costs and insurance premiums, delay suppliers, push prices up, shift demand and create payment or currency risks with foreign partners. List the exposed suppliers, routes, customers and staff, ask your forwarders and insurers what is changing, and check on employees who are traveling. Our guide on how regional crises affect Saudi businesses covers shipping, insurance, supply and prices in detail.

Others worth preparing for

The sudden absence of a key person, a serious workplace accident, a fire that closes a warehouse, a complaint that spreads on social media, internal fraud, and a dispute between partners or family shareholders that freezes decisions.

The crisis team: who sits on it and who decides

The crisis team is a small group that sets normal work aside when a crisis is declared and runs the response together. Name it now, with a deputy for every role, and keep its contact details outside the company’s systems, because those systems may be what failed.

Who sits on the team

• Crisis lead: usually the general manager or owner. Makes the final call and speaks to the board, partners or family.
• Finance: daily cash, payments, the bank and insurance claims.
• Operations: workarounds and the continuity plan.
• Human resources: staff safety and communication, payroll on Mudad, contract matters on Qiwa and with GOSI.
• Government relations: ministries, platforms and official announcements.
• Key accounts: the main customer relationships, including government clients.
• IT: systems, data, access and backups.
• Communications: one spokesperson, who also approves every message.
• Legal advisor: often an outside lawyer, on call for contracts, notices and anything affecting employees.
• Note-taker: keeps the decision log and action list. This is a real role, not a favor.

The core is the lead, finance, operations, human resources and communications; the others join as needed.

Who decides

The team advises; the crisis lead decides. Agree in writing on:

• What the lead can approve alone, such as emergency spending up to a set limit, and what needs the board, partners or owners. The Companies Law and your articles of association set some of these limits, so review them with your lawyer in calm times.
• Who replaces the lead if they are traveling, unwell or part of the problem.
• More than one authorized signatory for bank payments, so payroll never depends on one person.

Family businesses and small companies

In a family business, decide in advance which family member holds authority in a crisis and how the rest of the family is kept informed; a crisis is the worst moment to learn that two siblings each think the final word is theirs. In a small company the team may be three or four people, with an outside lawyer and accountant on call, each covering several roles.

The plan on paper

Keep the written plan short enough to use under pressure:

1. What counts as a crisis, and the triggers for declaring one.
2. The team: names, roles, deputies and personal mobile numbers.
3. Decision rights and spending authority.
4. The first-hours checklist below.
5. Outside contacts: bank relationship managers, insurer and broker, lawyer, IT provider, key customers and suppliers, landlord and government contacts.
6. Message templates and a short public statement.
7. A blank decision log, and references to the continuity plan and risk register.

Every team member keeps a printed and an offline copy.

The first hours: stabilize, then decide

The first hours are not for solving the crisis. They are for protecting people, stopping the damage from spreading, getting the facts straight and taking control of communication. Work through this list in order:

1. Make sure people are safe. Account for staff at the premises, in the field and traveling.
2. Establish the facts. What happened, what is affected, and what is still unknown. Keep confirmed facts apart from rumors.
3. Declare the crisis and convene the team by phone, not only a group chat, and fix the next meeting time before this one ends.
4. Contain the damage. Isolate a compromised system, stop shipments of a faulty product, freeze non-essential payments, secure documents.
5. Open the decision log and record the first decisions with the time and the decision maker’s name.
6. Send a first message to employees: what we know, what we are doing, what we need from you, and when you will hear from us again.
7. Decide who must hear from you today: usually the most affected customers, the bank if payments are at risk, and the insurer, since many policies require prompt notice. Read your policy’s notice clause.
8. Preserve evidence: emails, system logs, photos, delivery notes and contracts.

Resist two temptations: waiting for the full picture before acting, and announcing a solution before you have one.

The first days: assess, plan and keep a steady rhythm

Once the situation is stable, the team moves from reacting to managing:

• Assess the impact on operations, customers, cash, people, compliance and reputation, one at a time.
• Build three scenarios, from most likely to worst case, and agree on the signs that show which one you are in.
• Write an action plan with an owner and due date for every action.
• Set a daily rhythm: a short morning meeting on priorities and a short evening update, with one shared action list.
• Switch on the continuity arrangements: alternative suppliers, remote work where the job allows, manual procedures.
• Review contracts with your lawyer: notice requirements, force majeure clauses and late-delivery penalties. Send required notices in writing and on time.
• Document losses and extra costs as they happen, for the insurance claim.
• Rotate people so the crisis does not burn out the few who know the most.

A worked example

Take a hypothetical food distributor in the Eastern Province whose main overseas supplier says shipments will be delayed, with no firm date, because of regional disruption. In the first hours, the general manager declares a crisis, operations finds that stock covers only a few weeks of the best-selling lines, promotions on them are paused, and the sales lead calls the largest customers before rumors reach them. In the first days, procurement asks two or three alternative suppliers for prices and delivery times, forwarders are asked about other routes, and the bank is briefed in case stock must be bought early. When the new prices turn out higher, the log already holds what the team needs to decide which products to keep.

The decision log

The decision log is a running record of what the crisis team decided, when and why. A shared spreadsheet or a notebook works, as long as one person keeps it and the whole team can read it. Each entry records:

• The date and time, and the situation as known at that moment, including what was uncertain.
• The options considered.
• The decision, who took it, who carries it out and by when.
• When the decision will be reviewed.

The log stops the same question from being reopened at every meeting, lets a deputy take over without losing the thread, and supports insurance claims. It also shows what you knew when you decided, which is fairer than judging with hindsight.

An example entry: one morning in the first week, after the client’s finance department confirmed that the invoice was awaiting a second approval, the crisis lead postponed a non-urgent equipment purchase, asked finance to discuss short-term bridging options with the bank that day, and kept supplier payments on schedule, with a review at the next morning meeting.

How to communicate with each group

Silence and mixed messages make most crises worse. Use one structure for every message: what happened, what we are doing, what it means for you, what we need from you, and when you will hear from us next. In a workforce of several nationalities, send staff messages in Arabic and English, and other languages where needed.

Employees

• Tell employees before they hear it from outside, brief managers first, and keep to the update times you promise.
• Paying wages on time and keeping wage files on Mudad current builds more trust than any statement.
• Any change to an employee’s pay, hours or contract needs the employee’s written agreement and must follow the Labor Law. Have a lawyer review it first, and never cut pay, impose unpaid leave or end contracts unilaterally.
• During regional disruption, check on staff who are traveling or worried about family abroad, and point them to official travel guidance.

Customers

• Have a senior person call the most affected and most important customers personally.
• Give realistic dates and options. A later date that holds beats a broken promise.
• Follow every call in writing, and send any notice the contract requires. With government clients, use the formal channels in the contract and keep copies.

Suppliers

• Tell critical suppliers early if payments will be late, and propose a payment plan you can keep.
• Ask about their situation too: a supplier in trouble is your next crisis.

Banks and financiers

• Call your relationship manager before you miss an installment or breach a facility condition, not after.
• Bring your cash forecast and plan; banks respond to figures, not reassurance.
• Ask about options such as rescheduling or a temporary facility, and get any agreement in writing.

Government bodies

• Obligations continue in a crisis: wages through Mudad, GOSI contributions, VAT and Zakat with ZATCA, contracts and work permits on Qiwa, and a current commercial registration with the Ministry of Commerce.
• If you cannot meet an obligation on time, contact the body early through its official channels and ask what options exist. Do not simply stop paying or filing.
• Rely only on official announcements for any relief, and have one person track them.
• Staffing decisions affect your Saudization standing on Qiwa, and with it the services available to you.

Owners, partners and the public

Brief owners and partners regularly with the same facts the team uses, and bring decisions that need their approval with a clear recommendation. For the public, prepare a short holding statement, speak through one spokesperson, and do not speculate, blame or argue online.

Protecting cash and people

In almost every crisis, two things decide whether a company comes through: its people and its cash.

People

• Safety first, then clear roles, so everyone knows what is expected.
• Keep paying wages on time; if that is at risk, it tops the crisis agenda.
• Name a backup for every key person, so passwords, bank access and supplier relationships never sit with one individual.

Cash

• Know the cash position every day: balances, what is coming in, what is going out.
• Set payment priorities in advance: wages and GOSI contributions first, then tax and other government obligations, critical suppliers and the bank.
• Pause spending that can wait, and speed up collections with prompt invoicing and follow-up.
• The VAT you collected belongs to ZATCA; do not treat it as spare cash.
• Notify the insurer early. If a claim stalls, use the insurer’s complaints process; the Insurance Authority supervises insurers in the Kingdom.
• Small and medium enterprises can check whether Monsha’at has current programs that fit their situation.

For a full method, including a rolling cash forecast and how to discuss financing with your bank, see our guide on managing cash flow in a crisis.

After the crisis: review, repair and prepare

The crisis lead declares the end when operations are back at an acceptable level, cash is under control and no new escalation is expected. Within a few weeks, hold a review with the team: walk through the decision log and ask what you expected, what happened, what worked and what you would change. Keep it about systems, not blame, or people will hide problems next time. Then act on the lessons:

• Update the risk register with the risk the crisis exposed. A structured risk assessment helps you decide what to fix first.
• Update the continuity plan, contact lists and message templates.
• Thank the customers, suppliers, staff and bank that stood by you.
• Work out the full cost of the crisis, so the next decision about prevention rests on real figures.
• Run a short tabletop exercise on a regular schedule to see where the plan breaks.

Common mistakes

• Waiting for complete information before acting.
• Too many decision makers, or an owner trying to do everything alone.
• Silence toward employees, customers or the bank.
• Promising dates the company does not control.
• Cutting costs that protect the business, such as compliance, key people or customer service.
• Changing staff pay or terms without agreement and legal review.
• Declaring victory early and skipping the review.

If you want an outside view, Innovant’s risk advisory team can help you set up the crisis team, write the plan and run the first exercise.

Frequently asked questions

Book a free consultation with an Innovant advisor.