If it's a "Board Crisis Management & Communication Plan" that seems to imply it addresses board actions and therefore should be board-approved (as opposed to a corporate-level plan, which wouldn't necessarily require board approval).