CybantageGet the set
Trigger event catalog

What are the events that cause business issues?

A business crisis can begin in almost any function. The triggering event may be technical, financial, legal, operational, human, reputational, or external. What makes it a crisis is that the consequences exceed the originating department's authority or ability to contain them.

The catalog below is not exhaustive — it is representative. It shows where incidents actually start, so leaders, managers, HR, and administrators can recognize an escalation before it becomes a headline.

Enterprise-wide
Industry-specific
Enterprise-wide

Enterprise-wide business units

These functions exist in nearly every organization. A trigger event in any of them can cross into an enterprise incident once it exceeds the department's authority or ability to contain it.

Enterprise leadership & governance

Board of Directors
Failure of oversight; delayed escalation; undisclosed conflicts; governance disputes; failure to act on known risks; director misconduct; inadequate succession planning; breakdown between the board and management; inaccurate regulatory or investor disclosures.
CEO / Executive Leadership
Leadership misconduct; poor crisis decisions; unclear authority; delayed action; executive incapacity or death; succession failure; public statements that increase liability; strategic failure; loss of stakeholder confidence; internal leadership conflict.
Corporate Strategy
Failed acquisition; unsuccessful market entry; excessive concentration in one product, customer, supplier, or region; flawed restructuring; major investment failure; failure to respond to market change; strategic misrepresentation.
Chief of Staff / Executive Office
Poor executive coordination; conflicting instructions; incomplete briefing materials; failure to escalate critical information; breakdown in decision tracking; unauthorized commitments; sensitive information leakage.

Finance & accounting

Finance Leadership
Liquidity shortfall; covenant breach; inability to fund operations; inaccurate forecasts; unexpected loss; inadequate reserves; capital access failure; uncontrolled emergency spending.
Accounting
Financial misstatement; improper revenue recognition; delayed close; fraudulent entries; material weakness; audit failure; inaccurate cost reporting; restatement.
Accounts Payable
Fraudulent payment instructions; vendor payment interruption; duplicate or unauthorized payments; compromised banking information; failure to pay critical suppliers.
Accounts Receivable
Billing failure; customer payment diversion; collections breakdown; inaccurate invoices; customer disputes; loss of receivables data; major bad-debt exposure.
Treasury
Bank account compromise; wire fraud; loss of banking access; cash concentration failure; foreign exchange losses; inability to move funds; counterparty bank failure.
Payroll
Payroll interruption; incorrect payroll; tax withholding errors; payroll fraud; compromised employee banking data; inability to pay employees.
FP&A
Failure to identify declining cash position; unreliable forecasts; incomplete incident-cost tracking; poor scenario planning; incorrect assumptions used for major decisions.
Tax
Missed filings; inaccurate tax reporting; unexpected tax liability; loss of tax status; transfer-pricing disputes; government investigation.
Internal Audit
Failure to identify control breakdowns; ignored findings; audit independence concerns; incomplete evidence; false assurance to leadership or the board.

Human resources & workforce

Human Resources
Workplace violence; harassment; discrimination; retaliation; executive misconduct; wrongful termination; widespread employee complaints; labor-law violations; employee data breach.
Talent Acquisition
Fraudulent hiring; negligent screening; discriminatory hiring practices; critical staffing shortages; compromised applicant data; executive recruitment failure.
Employee Relations
Union action; strike; walkout; whistleblower complaint; internal protest; workplace investigation; cultural breakdown.
Compensation and Benefits
Benefit interruption; pension or retirement-plan failure; compensation inequity claims; payroll-benefit mismatch; fiduciary breach.
Learning and Development
Failure to train employees for regulated or safety-critical work; inaccurate training records; inadequate crisis-role training; expired certifications.
Workforce Management
Mass absenteeism; loss of key personnel; inadequate staffing; unauthorized work stoppage; contractor dependency; succession gaps.
Health and Safety
Employee death or serious injury; unsafe workplace; occupational exposure; regulatory citation; facility evacuation; pandemic or infectious-disease event.

Information technology

IT Leadership
Prolonged system outage; poor recovery decisions; inadequate redundancy; failed modernization; unsupported systems; technology concentration; unclear recovery priorities.
Infrastructure
Data-center outage; cloud disruption; power loss; storage failure; network failure; hardware failure; capacity exhaustion.
Service Desk
Failure to detect widespread issues; fraudulent password-reset requests; escalation breakdown; high-volume service interruption.
Enterprise Applications
ERP, CRM, payroll, billing, clinical, manufacturing, or logistics application outage; failed upgrade; corrupted transactions; integration failure.
Database Administration
Data corruption; accidental deletion; backup failure; replication failure; unauthorized access; database performance collapse.
Network Engineering
Connectivity loss; routing error; telecommunications outage; firewall misconfiguration; denial-of-service event.
Endpoint Management
Malicious software spread; failed patch deployment; mass device failure; lost devices; unauthorized software installation.
Cloud Operations
Cloud account compromise; service-provider outage; incorrect configuration; deleted environments; unexpected cost spike; region failure.
IT Asset Management
Unknown systems; unlicensed software; unsupported hardware; lost assets; inability to identify affected technology during an incident.

Information security

Security Leadership
Failure to escalate; inaccurate risk representations; ineffective controls; unclear incident authority; inability to support executive decisions.
Security Operations Center
Missed intrusion; alert backlog; false closure of incidents; monitoring outage; inadequate detection coverage.
Incident Response
Delayed containment; destruction of evidence; unauthorized system changes; poor coordination with counsel, insurers, or law enforcement; incomplete incident records.
Identity and Access Management
Privileged-account compromise; unauthorized access; excessive permissions; failed authentication services; inability to revoke access.
Security Engineering
Control failure; faulty security deployment; blocked business operations; exposed systems; failed encryption or key management.
Governance, Risk and Compliance
Misstated compliance; overdue remediation; inadequate risk acceptance; regulatory control failure; unsupported certifications.
Third-Party Cyber Risk
Vendor breach; software supply-chain compromise; unmanaged remote access; dependency on an insecure service provider.
Privacy
Unauthorized disclosure of personal information; unlawful data use; invalid consent; excessive retention; failure to honor individual rights.
Threat Intelligence
Failure to identify credible threats; inaccurate threat reporting; missed targeting of executives, products, or facilities.

Operations

Chief Operating Officer
Enterprise operational breakdown; inability to prioritize recovery; conflicting business-unit demands; inadequate contingency planning.
Business Operations
Failure of core workflow; processing backlog; transaction errors; service interruption; inability to meet customer commitments.
Facilities
Fire; flood; structural damage; loss of access; power failure; HVAC failure; contamination; security breach; building closure.
Physical Security
Unauthorized access; theft; sabotage; active assailant; executive threat; protest; civil disturbance.
Asset Management
Loss or destruction of critical equipment; inaccurate asset records; inadequate maintenance; unauthorized disposal.
Operational Excellence
Process changes that create control failures; excessive efficiency measures that remove redundancy; undocumented workflows.
Business Continuity
Plans that do not work; outdated contact information; incorrect recovery priorities; unavailable alternate sites; failed exercises.
Disaster Recovery
Failed backups; unrecoverable systems; recovery delays; incomplete restoration; dependencies overlooked during recovery.

Communications, marketing & reputation

Corporate Communications
Delayed or inaccurate statement; contradictory messaging; unauthorized disclosure; failure to respond to media; loss of narrative control.
Public Relations
Viral negative coverage; hostile media campaign; mishandled interview; reputational attack; misinformation.
Internal Communications
Employees learning about an incident externally; conflicting instructions; rumor spread; disclosure of confidential information.
Crisis Communications
Statements that create legal, regulatory, or insurance exposure; failure to coordinate with leadership and counsel; inconsistent stakeholder updates.
Investor Relations
Misleading disclosure; missed material-event reporting; investor confidence loss; analyst downgrade; shareholder litigation.
Marketing
Offensive or misleading campaign; false claim; brand infringement; advertising-law violation; campaign launched during a sensitive event.
Social Media
Account takeover; employee misconduct; viral complaint; accidental disclosure; impersonation; coordinated reputational attack.
Brand Management
Product controversy; executive misconduct associated with the brand; unauthorized brand use; customer trust collapse.

Sales, customers & revenue

Sales
Major customer loss; fraudulent commitments; unauthorized pricing; bribery; misrepresentation; pipeline collapse.
Sales Operations
CRM failure; inaccurate forecasting; commission dispute; pricing errors; lost sales data.
Business Development
Failed partnership; channel conflict; improper inducements; dependency on one strategic partner.
Account Management
Failure to communicate a customer-impacting event; renewal loss; unresolved contractual dispute; customer escalation.
Customer Success
Widespread service failure; adoption breakdown; inaccurate customer guidance; inability to support affected customers.
Customer Service
Contact-center outage; excessive complaints; mishandling of vulnerable customers; inaccurate statements; long response delays.
Technical Support
Incorrect remediation advice; failure to identify a systemic defect; support-tool outage; unauthorized access to customer systems.
Revenue Operations
Billing interruption; pricing failure; revenue leakage; sales-compensation failure; inaccurate revenue reporting.

Procurement, vendors & supply chain

Procurement
Failure to obtain critical goods or services; unauthorized vendor; inadequate due diligence; emergency purchasing breakdown.
Strategic Sourcing
Overdependence on one supplier; concentration in one country or region; commodity shortage; sudden price increase.
Vendor Management
Vendor failure; breach; insolvency; service degradation; contract nonperformance; inability to replace a critical vendor.
Contract Administration
Expired agreements; missed renewals; incorrect obligations; missing insurance certificates; undocumented amendments.
Supply Chain
Port disruption; transportation failure; material shortage; geopolitical restriction; supplier shutdown; counterfeit components.
Logistics
Shipment loss; route disruption; customs delay; fleet outage; warehouse interruption.
Inventory Management
Inventory shortage; excess inventory; inaccurate counts; spoilage; theft; system-data mismatch.

Risk, insurance & assurance

Enterprise Risk Management
Known risks not escalated; poor risk aggregation; inaccurate risk reporting; accepted risks exceeding tolerance.
Insurance / Risk Transfer
Late notice; failure to obtain insurer consent; excluded event; insufficient limits; inaccurate application statements; unsupported claim.
Compliance Assurance
Certification withdrawal; failed audit; inability to demonstrate controls; unsupported management assertions.
Quality Management
Defective product or service; uncontrolled change; falsified records; failure to investigate complaints.
Fraud Management
Internal theft; customer fraud; payment fraud; identity fraud; collusion; delayed detection.

Product, engineering & innovation

Product Management
Unsafe product decision; failed launch; undisclosed limitation; market rejection; roadmap failure; feature causing legal or customer harm.
Software Engineering
Critical software defect; insecure code; failed deployment; source-code loss; unauthorized change.
Hardware Engineering
Product defect; component failure; overheating; electrical hazard; design flaw.
Quality Assurance
Defect not detected; falsified testing; inadequate validation; release approved despite known risk.
Research and Development
Failed research program; unsafe experimentation; intellectual-property loss; regulatory violation.
AI / Data Science
Biased decision; false output relied upon; model drift; unauthorized data use; inability to explain a decision; confidential data leakage.
Project Management Office
Major project failure; cost overrun; missed regulatory deadline; dependency failure; inaccurate status reporting.
Industry-specific

Industry-specific business units

On top of the enterprise-wide functions, most industries carry specialized units that can each set off a crisis on their own — often with regulators, patients, customers, or the public in the room from the first hour.

Healthcare

Clinical Operations
Patient harm; care interruption; unsafe treatment; inability to access records; clinical staffing failure.
Nursing
Medication errors; staffing shortages; patient abandonment allegations; unsafe ratios; strike.
Medical Staff
Physician misconduct; credentialing failure; impaired practitioner; loss of critical specialists.
Pharmacy
Medication shortage; dispensing error; controlled-substance theft; refrigeration failure; prescribing-system outage.
Laboratory
Incorrect results; specimen loss; contamination; testing backlog; regulatory failure.
Radiology
Diagnostic outage; imaging error; equipment failure; delayed interpretation.
Emergency Services
Diversion; mass-casualty surge; staffing failure; ambulance disruption; emergency-room closure.
Health Information Management
Missing records; inaccurate records; improper disclosure; coding failure; release-of-information error.
Revenue Cycle
Claims rejection; billing interruption; coding fraud; payer dispute; cash-flow collapse.
Biomedical Engineering
Medical-device failure; unsafe calibration; unsupported equipment; networked-device compromise.
Patient Safety and Quality
Sentinel event; failure to report adverse events; accreditation risk; repeated preventable harm.
Infection Prevention
Outbreak; contaminated facility; failure to isolate; public-health reporting failure.
Clinical Research
Participant harm; protocol deviation; consent failure; falsified data; trial suspension.

Banking & financial services

Retail Banking
Account-access outage; unauthorized withdrawals; branch disruption; customer run concerns.
Commercial Banking
Credit losses; fraudulent lending; client concentration; payment disruption.
Loan Operations
Incorrect loan servicing; lost documentation; unlawful foreclosure; processing backlog.
Credit Administration
Poor underwriting; concentration risk; inaccurate credit grading; collateral deficiency.
Payments
Payment-network outage; duplicate transactions; settlement failure; card fraud; payment diversion.
Fraud Operations
Failure to stop fraud; excessive false positives; customer-account lockout; insider fraud.
BSA / AML
Sanctions violation; suspicious activity reporting failure; money-laundering investigation.
Trading and Capital Markets
Unauthorized trading; market manipulation; algorithm failure; settlement failure; liquidity event.
Wealth Management
Unsuitable advice; fiduciary breach; client asset loss; advisor misconduct.
Trust Services
Mismanagement of fiduciary assets; beneficiary dispute; unauthorized transaction.
Mortgage Services
Escrow failure; servicing errors; foreclosure irregularities; document fraud.

Insurance

Underwriting
Systematic mispricing; undisclosed accumulation risk; inadequate risk selection; discriminatory underwriting.
Claims
Claims backlog; wrongful denial; inconsistent handling; catastrophe surge; claims fraud.
Actuarial
Inadequate reserves; pricing model failure; erroneous assumptions; regulatory capital impact.
Policy Administration
Incorrect policy terms; lapse errors; billing failure; inability to confirm coverage.
Reinsurance
Reinsurance dispute; counterparty failure; insufficient recoverability; treaty interpretation conflict.
Producer Relations
Broker misconduct; licensing failure; misrepresentation; commission dispute.
Loss Control
Failure to identify or report material hazards; inaccurate inspection; client reliance on faulty advice.

Manufacturing

Plant Operations
Production shutdown; explosion; fire; equipment failure; contamination; labor stoppage.
Production
Defective output; capacity loss; process deviation; unauthorized material substitution.
Industrial Control Systems
Control-system compromise; unsafe equipment commands; loss of monitoring; production damage.
Maintenance
Preventive-maintenance failure; unsafe repair; unavailable spare parts; equipment breakdown.
Quality Control
Defective product release; falsified inspection; missed contamination; recall.
Engineering
Design flaw; process failure; inaccurate specifications; unsafe change.
Environmental Health and Safety
Fatality; toxic release; environmental contamination; regulatory shutdown.
Warehouse
Fire; theft; inventory loss; refrigeration failure; hazardous-material incident.
Product Safety
Injury or death; recall; regulator action; class-action litigation.

Retail & e-commerce

Store Operations
Store closure; employee or customer violence; point-of-sale outage; unsafe premises.
Merchandising
Unsafe or offensive product; counterfeit goods; pricing error; supplier controversy.
E-commerce
Website outage; checkout failure; account takeover; incorrect pricing; fulfillment collapse.
Loss Prevention
Organized retail theft; employee theft; excessive force; surveillance misuse.
Distribution Centers
Labor stoppage; automation failure; fire; inventory disruption.
Pricing
System-wide pricing error; deceptive pricing allegation; unauthorized discounts.
Food Safety
Contaminated food; allergen error; refrigeration failure; illness outbreak.

SaaS & technology companies

Site Reliability Engineering
Widespread service outage; repeated availability failure; uncontrolled failover.
DevOps / Platform Engineering
Failed deployment; infrastructure deletion; secrets exposure; pipeline compromise.
Product Security
Vulnerability affecting customers; insecure default settings; delayed disclosure.
Customer Trust / Assurance
Inability to answer customer-security inquiries; failed audit; inaccurate security representation.
Data Operations
Customer data corruption; data loss; cross-customer exposure; processing failure.
Developer Relations
Harmful documentation; exposed API keys; ecosystem controversy; unsupported integrations.
Trust and Safety
Abuse of platform; illegal content; harassment; fraud; child-safety concerns.
Content Moderation
Inconsistent enforcement; illegal material; political controversy; regulator action.

Government & public sector

Public Safety
Emergency-response failure; loss of dispatch; civil disorder; officer misconduct.
Emergency Management
Failed disaster coordination; inadequate warning; resource-allocation failure.
Constituent Services
Benefits interruption; citizen-data disclosure; call-center collapse.
Grants Administration
Misuse of funds; fraud; missed reporting; federal funding suspension.
Records and Transparency
Lost records; public-records noncompliance; unauthorized deletion; delayed disclosure.
Election Administration
Registration failure; ballot-processing issue; misinformation; loss of public confidence.
Legislative Affairs
Unauthorized commitment; policy misrepresentation; breakdown with oversight bodies.
Inspector General
Failure to investigate misconduct; compromised independence; suppressed findings.

Education

Academic Affairs
Accreditation risk; academic-integrity failure; widespread instructional disruption.
Student Affairs
Student death; hazing; sexual misconduct; protest; housing crisis.
Admissions
Fraud; discriminatory practices; incorrect offers; applicant-data breach.
Registrar
Transcript errors; enrollment failure; lost academic records.
Financial Aid
Aid interruption; fraud; regulatory violation; student hardship.
Campus Safety
Active threat; protest; missing student; crime; emergency-notification failure.
Athletics
Abuse; athlete injury; recruiting violation; coach misconduct.
Research Administration
Grant fraud; research misconduct; export-control violation; laboratory incident.
Institutional Research
Incorrect reporting; manipulated outcomes; loss of government funding.

Energy & utilities

Generation
Plant shutdown; fuel shortage; equipment failure; safety event.
Transmission
Grid instability; line failure; cascading outage.
Distribution
Widespread outage; equipment fire; service restoration delay.
Grid Control
Loss of operational visibility; control-system failure; unauthorized switching.
Field Services
Worker injury; inability to access damaged areas; unsafe restoration.
Outage Management
Incorrect outage estimates; dispatch failure; communication breakdown.
Regulatory Affairs
Rate-case failure; operating restriction; environmental or reliability penalty.
Environmental Compliance
Spill; emissions violation; contamination; permit suspension.
Energy Trading
Unauthorized position; pricing manipulation; settlement failure.

Transportation & logistics

Fleet Operations
Vehicle grounding; fatal accident; maintenance failure; fuel disruption.
Dispatch
Routing outage; lost communications; unsafe scheduling.
Terminal Operations
Facility closure; hazardous-material incident; labor disruption.
Customs and Trade Compliance
Shipment seizure; sanctions violation; import/export restriction.
Freight Management
Lost freight; cargo theft; dangerous-goods mishandling.
Aviation Operations
Aircraft grounding; safety incident; crew scheduling failure.
Maritime Operations
Port closure; vessel accident; environmental spill.
Rail Operations
Derailment; signaling failure; hazardous-material release.

Hospitality & travel

Property Operations
Fire; water failure; evacuation; building closure; guest injury.
Reservations
Booking outage; overbooking; widespread cancellation errors.
Guest Services
Guest safety incident; discrimination allegation; high-profile complaint.
Food and Beverage
Foodborne illness; allergen exposure; alcohol-related incident.
Housekeeping
Sanitation failure; theft allegation; hazardous exposure.
Revenue Management
Systemic pricing error; demand forecast failure; unfair-pricing controversy.
Events and Banquets
Crowd incident; vendor failure; cancellation; security threat.

Pharmaceutical & life sciences

Drug Manufacturing
Contamination; batch failure; production shutdown; falsified records.
Quality Systems
Data-integrity failure; good-manufacturing-practice violation; warning letter.
Regulatory Affairs
Submission error; approval delay; product suspension; labeling violation.
Pharmacovigilance
Failure to identify or report adverse events; unexpected safety signal.
Clinical Trials
Participant injury; protocol violation; consent failure; trial data compromise.
Medical Affairs
Off-label promotion; inaccurate scientific statements; physician conflict.
Cold Chain
Temperature excursion; spoiled product; transportation failure.
Product Recall
Inability to trace product; delayed notification; ineffective recall.

Construction & real estate

Project Delivery
Major delay; cost overrun; structural failure; contractor collapse.
Site Safety
Fatality; serious injury; unsafe conditions; regulatory shutdown.
Property Management
Tenant safety event; building-system failure; access disruption.
Leasing
Misrepresentation; discriminatory practices; occupancy collapse.
Development
Permit failure; financing loss; environmental discovery; community opposition.
Building Engineering
Elevator failure; fire-system failure; structural or mechanical defect.

Professional services

Client Delivery
Material error; missed deadline; incorrect advice; project failure.
Engagement Management
Scope dispute; fee conflict; independence violation; poor documentation.
Professional Standards
Malpractice; licensing violation; ethical breach.
Knowledge Management
Loss of client work product; use of outdated guidance; unauthorized reuse.
Client Conflicts
Conflict of interest; confidentiality breach; adverse representation.

Media & entertainment

Editorial
False reporting; defamation; source exposure; manipulated content.
Production
Injury; production shutdown; talent dispute; cost overrun.
Rights and Licensing
Copyright infringement; rights expiration; unauthorized distribution.
Talent Management
Misconduct allegations; contract dispute; public controversy.
Content Distribution
Streaming outage; unauthorized release; piracy; censorship dispute.
A practical BIM classification

Ten enterprise crisis families

Every trigger event above ultimately lands in one of these ten families. Business Impact Management uses this classification to decide when a departmental problem becomes an enterprise incident.

  1. 1Leadership and governance failure
  2. 2Operational interruption
  3. 3Financial and liquidity event
  4. 4Technology or cyber disruption
  5. 5Legal, regulatory, or contractual exposure
  6. 6Workforce and safety event
  7. 7Customer, patient, or public harm
  8. 8Product or service failure
  9. 9Supply-chain or third-party failure
  10. 10Reputation and stakeholder-confidence event

The department is the origin, not the owner

The originating department does not stay the sole owner once the event crosses defined thresholds. A payroll failure may begin in HR or finance, but quickly becomes an employee-relations, communications, legal, operational, and liquidity event. A product defect may begin in engineering, but become a customer-safety, regulatory, insurance, litigation, revenue, and board-governance event.

That is the role of Executive Incident Governance within Business Impact Management: establish when a departmental problem becomes an enterprise incident, who assumes decision authority, which business units activate, what evidence must be retained, and how leadership manages the consequences through resolution and long-tail recovery.

Get the BIM Complete SetBack to overview