Crisis Management in Healthcare Systems Training Course

Course overview

In February 2024, a ransomware attack on a single US claims-processing vendor, Change Healthcare, froze billing and prescription systems for thousands of hospitals and pharmacies for weeks, exposing how a crisis that starts in an IT server room can shut down patient care as thoroughly as a hurricane or a mass-casualty event. Seven years earlier, the WannaCry ransomware attack forced roughly a third of NHS hospital trusts in England to cancel appointments and divert ambulances. Neither event began in an emergency department. Both were managed, well or badly, by executive teams who had to decide in real time how to keep clinical operations running with degraded information systems, anxious staff, and a public watching. That is the terrain this course occupies: crisis management as an executive and governance discipline, not a clinical protocol.

This course works through how hospital and health-system leadership plan for, command, and recover from crises that threaten an entire organization or network, covering pandemics, natural disasters, active-shooter and security incidents, cyberattacks, and supply-chain shocks such as drug or blood-product shortages. By the end, participants have a command structure suited to their own institution, a defensible method for allocating scarce resources under pressure, and a communication approach that keeps staff, boards, regulators, and the public informed without contradiction or delay.

Why a hospital's crisis performance is set by decisions made months before the crisis

Sheri Fink's account of Memorial Medical Center during Hurricane Katrina, later published as "Five Days at Memorial," is taught in health administration programs precisely because the hardest choices staff faced (who to evacuate first, how to keep ventilated patients alive without power) were shaped less by the storm itself than by planning gaps identified, and not closed, in the years before it. The Institute for Healthcare Improvement's work on organizational resilience and the US Department of Health and Human Services' Administration for Strategic Preparedness and Response both point to the same pattern across pandemics, cyber incidents, and natural disasters: institutions that treat crisis readiness as a standing governance function, with a named accountable executive, funded drills, and a tested command structure, recover faster and lose less trust than institutions that treat it as an annual compliance exercise.

Health systems now also sit inside interdependent supply chains and shared IT infrastructure, so a crisis at a single vendor, group purchasing organization, or cloud provider can cascade into dozens of facilities simultaneously. That shift is why this course frames crisis management as a system-level leadership competency that sits alongside strategy and finance, not a subset of facilities or security management.

What you will be able to do afterwards

By the end of the course, participants will be able to:

• Stand up a Hospital Incident Command System and assign roles
• Run a hazard vulnerability analysis to prioritize preparedness
• Align hospital command with the National Incident Management System
• Apply crisis standards of care to scarce resource allocation
• Sequence crisis communications across staff, board, and media
• Distinguish pandemic surge, cyberattack, and continuity crises
• Design a fatigue-management approach that protects decision quality
• Structure an after-action review with assigned corrective actions
• Brief a governing body on crisis readiness and recovery

Course outline

Unit 1: The anatomy of a healthcare crisis

• Internal-facility, community-wide, and enterprise crises
• Impact chain: 2003 SARS Toronto and 2024 Change Healthcare
• Crisis leadership: decisive action under single command
• Duty of care and licensure versus corporate crisis norms

Unit 2: Preparedness, risk assessment, and crisis teams

• Hazard vulnerability analysis for planning priorities
• Plan phases: mitigation, preparedness, response, recovery
• Tabletop exercises and functional drills: Joint Commission
• Crisis management team with named roles and deputies

Unit 3: Command structures and decision-making under uncertainty

• Hospital Incident Command System command sections
• Incident Commander thresholds for board-level escalation
• Coordinating with external stakeholders (emergency management agencies, other hospitals, public health authorities) without losing internal command clarity; participants who want the pre-hospital and field-operations side of this coordination in depth can continue with Emergency and Disaster Management in Healthcare
• Real-time resource allocation and crisis surge protocols

Unit 4: Crisis communication and stakeholder management

• CDC's Crisis and Emergency Risk Communication (CERC)
• Joint Information Center for coordinated messaging
• Internal staff trust and morale during extended crises
• Regulator and community engagement on disclosure timing

Unit 5: Patient safety and continuity of care under pressure

• Crisis standards of care per National Academy of Medicine
• Triage ethics for scarce resource allocation decisions
• Medication reconciliation and infection control amid surge
• Educational scope, not a legal or clinical substitute

Unit 6: Resilience and adaptive capacity

• Operational versus psychological resilience in leadership
• Flexible reporting and staffing for evolving incidents
• Fatigue and moral distress management across rotations
• Plan-Do-Study-Act cycles across an extended response

Unit 7: Recovery, reform, and preparing for what comes next

• After-action review with root cause analysis
• Deliberate trust repair as a planned work stream
• After-action findings update the emergency operations plan
• Cyberattacks and IT outages on the routine crisis register

How the course is delivered

Expect structured case discussion built around documented incidents, pandemic surges, hospital cyberattack recoveries, natural-disaster evacuations, that let participants see how real command teams sequenced decisions, not just what a textbook framework recommends in the abstract. Technical exercises walk through resource allocation and communication planning step by step, and guided walkthroughs of incident command structures let participants map the framework onto their own organization's staffing and reporting lines. Throughout, the course is presented as educational content: it does not replace an organization's own emergency-management plan, its legal counsel, or the clinical protocols that apply during an actual event.

Who should attend

The audience for this course carries system-wide accountability when a crisis hits, not responsibility for a single department's response.

• Hospital and health-system executives, including chief executive and chief operating officers
• Emergency preparedness and business continuity managers
• Chief nursing officers and chief medical officers
• Business continuity and enterprise risk leads
• Healthcare board members and governance committee chairs

About EuroQuest International Training

EuroQuest International Training was founded in 2015 and has since trained more than 15,000 professionals across a course catalog that has grown past 1000 titles, run from a Bratislava headquarters with classrooms in Dubai, London, Barcelona, Vienna, Istanbul, Geneva, and Paris. Faculty leading this course have worked inside real hospital command centers during pandemic surges and cyberattack recoveries, so the incident-command material reflects decisions made under actual pressure, not tabletop theory.

Frequently asked questions

What certificate or document is provided after the course?

Attendees receive a signed EuroQuest International Training certificate of completion listing the course and the units covered. It records that you attended and studied the material; it is not a credential from an external certifying body and carries no regulatory authority on its own.

Is this course only useful for large hospital systems, or is it relevant to smaller clinics and facilities with fewer resources?

The command, communication, and preparedness principles taught in this course scale down as well as up: a small clinic still benefits from a named incident commander, a hazard vulnerability assessment, and a communication plan. What changes at smaller scale is implementation, not the logic behind it. A facility with a handful of staff will typically combine several HICS roles under one person, rely more heavily on mutual-aid agreements with neighboring providers, and prioritize a shorter list of highest-probability hazards instead of running the full range of drills a large health system can resource.

Does the course treat cyberattacks and IT outages as a genuine healthcare crisis category, or does it focus only on physical and clinical emergencies?

Cyberattacks and system-continuity failures are treated as a full crisis category throughout the course, not a side note. Incidents such as the 2017 WannaCry attack on NHS trusts and the 2024 disruption to US claims processing through Change Healthcare showed that an IT-originated event can halt scheduling, billing, prescription fulfillment, and even diagnostic imaging just as effectively as a physical disaster. The command structure, resource-allocation logic, and communication planning covered in this course apply to those events alongside pandemics, mass-casualty incidents, and natural disasters.

Related courses

These related courses go deeper on the field-operations, risk-assessment, workforce, and enterprise-risk dimensions that sit alongside system-wide crisis leadership.

• Emergency Medical Services (EMS) Coordination
• Healthcare Risk Assessment and Crisis Response
• Workforce Resilience and Mental Health Support
• Risk Management in Healthcare Organizations

Register for this course

Command clarity before the next crisis hits is the practical payoff of this course. Telephone +421 911 803 183, or send a note to info@euroqst.com naming your organization's size and preferred host city, and the next available dates will follow.