Emergency management is the work of preparing for, responding to, and recovering from emergencies that threaten people, property, and operations. It has three goals: reduce loss of life, minimize property and environmental damage, and protect a facility against the threats and hazards it faces. The Federal Emergency Management Agency (FEMA) organizes this work into four phases, mitigation, preparedness, response, and recovery, and that four-phase model is the framework this guide follows.

Treat the four phases as one continuous cycle, not a checklist you complete once and file away. Recovery from one event feeds the mitigation you do before the next, so a well-run program keeps moving through the loop as conditions and hazards change. The model is built on an all-hazards approach, meaning you plan for any type of emergency rather than a single named threat, whether that turns out to be a fire, a chemical spill, a storm, or a power loss. This guide pairs a plain definition of each phase with a practical checklist you can run against your own site.

What are the four phases of emergency management?

The four phases describe what you do before, during, and after an emergency:

• Mitigation: the work done before an emergency to remove hazards or reduce their impact.
• Preparedness: the planning, training, and drills that ready people to act.
• Response: the actions taken during an emergency to protect people and limit damage.
• Recovery: the work of restoring operations and reducing long-term impact afterward.

FEMA defines these four as a cyclical model, and the cycle repeats: what you learn recovering from one emergency shapes how you mitigate and prepare for the next.

Phase 1: Mitigation

Mitigation is the work done before an emergency to remove hazards or reduce their impact. It is the most cost-effective phase and the single most effective way to limit what a disaster does to your facility, because a hazard you remove or reduce cannot cost you later. FEMA estimates that around 40% of businesses never reopen after a disaster, and another 25% of those that do reopen fail within a year, which is the price of walking into an emergency you did nothing to blunt.

At a facility, mitigation looks concrete: inspecting the site for hazards, upgrading buildings and equipment, storing and labeling hazardous materials safely, and stocking emergency supplies before you need them. The checklist below groups the core mitigation work into three areas you can audit today.

Mitigation is also where a plain risk assessment earns its place: you cannot reduce a hazard you have not named. Working through the site this way turns the phases from an idea into a set of actions a competent facility already takes.

Phase 2: Preparedness

Preparedness is the planning, training, and drills that ready people to act before an emergency hits. Mitigation removes or reduces the hazard; preparedness makes sure that when something still goes wrong, your people know exactly what to do. That distinction matters, because the two phases call for different work and both are needed.

Preparedness at a facility means a written emergency plan, assigned roles, trained employees, mapped evacuation routes and safe zones, regular drills, and mutual aid arrangements. Reviewing the practical steps to take before one hits keeps that list from staying theoretical. A mutual aid agreement is a pre-arranged deal for outside organizations to lend help during an emergency, and it belongs in the plan long before you need to call on it.

To decide what to prepare for first, use a Hazard Vulnerability Analysis (HVA), a ranked review of which hazards are most likely to hit your site and how hard they would hit. Ranking your hazards this way keeps preparedness focused on the events that would disrupt your operation most rather than spreading effort evenly across threats that are not equally likely.

Phase 3: Response

Response is the set of actions taken during an emergency to protect people and limit damage. This is the highest-stakes phase, and it runs on one rule: life safety comes first, then property, then operations. Everything in a good response plan serves that order.

At a facility, response means accounting for your people, establishing safe zones, activating the plan, and coordinating the actions that keep an incident from getting worse. Large sites often run this from an emergency operations center (EOC), a central location where staff coordinate the response, using an Incident Command System (ICS), the standard command structure that assigns roles and a clear chain of command during a response. The checklist below groups responses into the three things that have to happen at once.

How is emergency management different from crisis management?

Emergency management is the structured, all-hazards cycle for physical emergencies that threaten people and facilities. Crisis management is broader and usually centers on business continuity, leadership decisions, and reputation during any major event that disrupts the business, including ones with no physical hazard at all. The two overlap during response, but they are not the same discipline: emergency management handles the site, crisis management handles the wider business.

Phase 4: Recovery

Recovery is the work of restoring operations and reducing long-term impact after an emergency. It starts once people are safe and the immediate danger has passed, and it runs until the facility is back to normal, or to a new normal shaped by what happened. Recovery also closes the loop: the lessons you capture here become the mitigation you do before the next event, which is why a plan is never finished.

At a facility, recovery covers repairing or replacing damaged assets, tracking the longer-term effects on people and operations, and updating the plan so the same failure does not repeat. Two ideas belong here. Business continuity is keeping critical operations running, or restoring them fast, during and after a disruption. An After-Action Report (AAR) is a written review after a drill or a real event that captures what to improve.

What is the difference between emergency management and disaster recovery?

Recovery is one phase of the emergency management cycle: restoring people, property, and operations after any emergency. Disaster recovery, in common business use, is narrower and usually means restoring Information Technology (IT) systems and data after a disruption. Emergency management is the wider, all-hazards program; disaster recovery is one component of getting a business back to normal, often the technology piece of it.

Four phases of emergency management or five?

You will see the model described as four phases in some places and five in others, and both are valid. The four-phase model folds prevention into mitigation. The five-phase model breaks prevention out as its own phase. The two differ in a narrow but meaningful way: mitigation reduces the impact of hazards you cannot stop, while prevention aims to stop an incident from happening at all.

The five-phase version gained standing when the 2007 edition of National Fire Protection Association (NFPA) 1600 added prevention as an accepted phase. This guide uses the four-phase model and covers prevention inside mitigation, which is where most facility-level prevention work already lives. Whichever count you prefer, the actual work at your site does not change: you still reduce hazards, ready your people, respond, and recover.

Which phase of emergency management matters most?

No single phase stands alone, because the four work as a cycle and each one feeds the next. That said, mitigation and preparedness carry the most weight, because work done before an emergency reduces the cost and severity of everything downstream. Spending on the front of the cycle is what keeps the back of the cycle small.

The numbers support putting money early. A 2018 National Institute of Building Sciences study found that every $1 invested in disaster mitigation saves society about $6 in future costs (https://www.nibs.org/projects/natural-hazard-mitigation-saves-2019-report). Response and recovery are not optional, and you will always need both, but they are the more expensive way to deal with a hazard you could have reduced for less beforehand. For a facilities buyer watching a budget, funding the early work is the cheaper path.

What is an emergency management plan?

An emergency management plan is the written program that documents how a facility prepares for, responds to, and recovers from emergencies across all four phases. It is the artifact that proves a site is ready rather than hoping to be, and it is a living program, reviewed and updated after every drill or real event. Its core components map directly onto the phases:

The four phases are the backbone of this document: each phase maps to a part of the plan, and the plan holds them together as one program rather than four disconnected efforts. Because it is reviewed after every event, the plan is where the cycle keeps improving instead of resetting.

How CenterPoint helps facilities stock and source emergency supplies

Two of the phases come down to having the right supplies on hand before you need them: the emergency supplies and hazardous-materials safety stock in mitigation, and the readiness gear behind preparedness. That is where this guide meets what CenterPoint does. We help facilities source and stock the emergency supplies, safety products, and personal protective equipment (PPE) the four phases call for, so the items on your checklists are the ones stocked on your shelves.

If you're building out your mitigation and preparedness supplies, talk to us about sourcing everything your plan requires. Explore our Safety & Personal Protective Equipment (PPE) range to find the right solutions for your organization.