The Smoke Before the Fire

The first sign was invisible to most people. On a humid August morning in 2016, a Samsung engineer in Suwon, South Korea, watched a smartphone battery swell like a small balloon, its casing quietly buckling under pressure that had nowhere to go. It was an anomaly—one of dozens that would surface over the following weeks—but at the time, it seemed like a routine testing failure, the kind of thing that happened in the iterative process of bringing new technology to market. The engineer logged the incident in an internal report, flagged it for review, and moved on to the next task on a very long list.

No one made the connection that morning. No one could have known that the swollen battery was the first whisper of a crisis that would eventually ground aircraft, trigger international airport bans, destroy billions in shareholder value, and permanently tarnish one of the world's most valuable brands. The smoke had already begun to rise, but the fire had not yet been seen.

This is the nature of organizational crises: they rarely announce themselves with trumpets and alarms. More often than not, they begin as faint signals—subtle departures from the expected, small cracks in the foundation, quiet murmurs of discontent that most people learn to tune out. The art of crisis management, perhaps surprisingly, begins not with the crisis itself but with the moments before anyone recognizes that something is wrong. It begins with learning to hear the whispers.

The Anatomy of Warning

In the weeks leading up to the Galaxy Note 7's catastrophic debut, Samsung's internal systems were already capturing data that, in hindsight, told a clear story. Production records showed higher-than-normal defect rates in battery testing. Customer service databases contained an unusual number of early-stage complaints about overheating devices. Quality control teams had flagged concerns about the accelerated timeline for bringing the phone to market—a timeline driven by competitive pressure from Apple and a desire to claim the title of "first with innovation."

These signals existed in isolation, scattered across different departments, buried in reports that were never synthesized into a unified picture. Each one, on its own, seemed manageable—a acceptable deviation from ideal parameters, the kind of thing that experienced professionals handle every day without crisis. But patterns require perspective, and perspective requires bringing disparate signals together into a coherent whole. Without that synthesis, the whispers remained just whispers.

The story of the Galaxy Note 7 is not a story about a company that ignored obvious danger signs. It is a story about a company that had the signals but lacked the systems, culture, and awareness to recognize what they collectively meant. And Samsung is far from alone in this. The same pattern repeats itself across industries and decades, from the Challenger space shuttle disaster to the Wells Fargo accounts scandal, from the Boeing 737 MAX tragedies to the 2008 financial crisis. In case after case, the crisis was not born in a vacuum—it was preceded by warnings that were visible to those who knew how to look.

This is both the good news and the challenge. If crises are preceded by warning signs, then the potential exists to see them coming. Organizations that develop the ability to recognize, interpret, and act on early signals can often defuse situations before they become public emergencies. They can redirect trajectories, strengthen vulnerabilities, and interrupt the chain of events that transforms a manageable problem into an organizational catastrophe. The fire can often be prevented—or at least contained—if someone notices the smoke early enough.

But noticing is not simple. Warning signs do not arrive with labels attached. They are easily mistaken for normal variation, rationalized as temporary setbacks, or dismissed as the concerns of overly cautious individuals. Understanding how to distinguish genuine warnings from background noise requires a framework—a systematic approach to identifying the types of signals that typically precede organizational crises, and the mental models that help interpret what they mean.

Three Flavors of Warning

Research into organizational crises consistently reveals three broad categories of warning signals. Understanding these categories is the first step toward building a crisis detection capability. The categories are not mutually exclusive, and in practice, most significant crises are preceded by signals in all three domains. But each category represents a distinct source of information about organizational health, and each requires different monitoring approaches.

Operational Anomalies

The first category encompasses what we might call operational anomalies—departures from normal processes, unexpected variations in performance metrics, or deviations from established quality standards. These are the signals that appear within the organization's internal systems, visible to those who track the mechanics of how work gets done.

In the case of Samsung, operational anomalies appeared in battery testing failure rates, in the compressed timeline that required shortcuts in the verification process, and in the design choices that prioritized slim form factor over adequate thermal management space. Each of these represented a departure from the company's normal development protocols, and each was visible to someone within the organization. The problem was that no single person had the full picture, and the culture of the organization rewarded speed and innovation over caution and verification.

Operational anomalies are often the easiest warnings to collect because they exist in the data that organizations already track. Production metrics, quality control reports, error rates, processing times, employee turnover—these are all measurable indicators that can be monitored over time and compared against historical baselines. When these metrics deviate significantly from expected patterns, it may indicate that something in the organization's operations has changed in ways that could have consequences.

Consider a manufacturing company that has maintained a steady defect rate of 0.5% for several years. If that rate begins creeping upward—to 0.7%, then 0.9%, then 1.2%—each individual increase might seem within the range of normal variation. But a statistical process control chart would reveal a clear upward trend, suggesting that something systematic has changed in the production process. That trend might indicate equipment degradation, a change in raw materials, new employees who need additional training, or any number of other factors. The key is not to assume that any single data point is significant, but to watch for patterns in the data that suggest change is occurring.

The challenge with operational anomalies is that organizations often lack the baseline data needed to recognize when deviation has occurred. If a company has never tracked its defect rates systematically, it has no way of knowing whether 1.2% represents a dramatic increase or business as usual. This is why the first step in crisis prevention is often establishing the measurement systems that make patterns visible—building the infrastructure for listening before there is something specific to listen for.

Stakeholder Signals

The second category of warning signs comes from stakeholders—customers, employees, suppliers, partners, investors, regulators, and the communities in which organizations operate. Stakeholder signals encompass changing attitudes, emerging complaints, shifting expectations, and evolving relationships that suggest how the organization is perceived and valued by those on whom it depends.

The Wells Fargo accounts scandal provides a powerful illustration of how stakeholder signals can precede and predict crisis. For years before the scandal became public in 2016, the bank had been opening millions of accounts