After immediate response, there’s a recovery phase: restoring normal operations, rebuilding brand reputation, reviewing what happened (lessons learnt), updating plans and strengthening resilience for future crises.