Crisis Communication Planning: The Decisions That Happen Before the Crisis
Crisis communication planning is the process of preparing your organisation to respond clearly, quickly, and consistently when something goes wrong. Done properly, it means the hard decisions about who speaks, what gets said, and when to escalate are made in advance, not under pressure.
Most organisations treat it as a compliance exercise. They build a document, file it somewhere, and assume the existence of a plan is the same as being prepared. It is not. The gap between having a crisis communication plan and being able to execute one under real conditions is where most brands get into trouble.
Key Takeaways
- A crisis plan only works if the people who need to execute it have rehearsed it. A document no one has read is not a plan.
- The most damaging decisions in a crisis are made in the first hour, before the full picture is clear. Pre-agreed protocols protect you from those decisions.
- Scenario planning is not about predicting every crisis. It is about training your team to think clearly under pressure using familiar frameworks.
- Third-party partners, agencies, and platforms can amplify or contradict your response. They need to be inside your planning process, not outside it.
- The quality of your crisis response is largely determined by the quality of your internal communication, not your external messaging.
In This Article
- What Does a Crisis Communication Plan Actually Need to Contain?
- How Do You Identify Your Real Crisis Scenarios?
- Who Should Own Crisis Communication Planning?
- What Is the Role of Pre-Approved Messaging?
- How Do You Keep a Crisis Plan Operational Over Time?
- How Should You Think About Social Media Within Your Crisis Plan?
- What Separates Organisations That Recover Well from Those That Do Not?
What Does a Crisis Communication Plan Actually Need to Contain?
The word “plan” does a lot of heavy lifting in this space. I have seen crisis plans that run to forty pages and are functionally useless because they describe what should happen in the abstract rather than what specific people will do in practice. I have also seen one-page protocols that genuinely worked because they gave the right people clear authority and a decision tree they had actually walked through.
The essentials are fewer than most people think. You need a clear definition of what constitutes a crisis versus an issue, because not everything that feels urgent is a crisis. You need a named spokesperson and at least one backup, with both having received media training. You need an escalation path that defines who has authority to approve statements, pause campaigns, or engage legal. And you need pre-approved holding statements for your most plausible scenarios, because drafting from scratch under pressure produces poor copy and slow approvals.
What most plans omit is the internal communication layer. When something goes wrong, your employees will hear about it before most of your customers do. If your customer service team, your sales team, and your social media manager are all receiving different information and making independent decisions about what to say, you do not have a crisis communication plan. You have a crisis.
How Do You Identify Your Real Crisis Scenarios?
Scenario planning is where most organisations either do good work or waste an afternoon. The goal is not to imagine every possible disaster. It is to identify the scenarios that are both plausible and high-impact for your specific business, and then use those scenarios to stress-test your decision-making process.
I would split scenarios into three categories. The first is operational: a product recall, a data breach, a service outage, a supplier failure. The second is reputational: a senior figure under public scrutiny, a campaign that lands badly, a social media flashpoint. The third is external: a sector-wide regulatory action, a major news event that intersects with your brand, a partner organisation in crisis that pulls you into the story.
Early in my agency career, we were running a Christmas campaign for Vodafone that we were genuinely proud of. At the eleventh hour, a music licensing issue emerged that none of us had seen coming, despite having a Sony A&R consultant involved in the process. The campaign had to be abandoned entirely. We had less than two weeks to concept, approve, and deliver something new. What saved us was not a formal crisis plan. It was the fact that we had a clear internal chain of command, a client relationship built on trust, and a team that knew exactly who was making decisions. The lesson I took from that was not about music licensing. It was about what happens when the scaffolding you assumed was solid turns out not to be, and whether your team can operate without it.
That kind of scenario, a third-party dependency creating a last-minute collapse, is exactly what most crisis plans do not account for because it does not fit neatly into the “reputational” or “operational” boxes. Build your scenario list from your actual dependencies, not from a generic template.
Who Should Own Crisis Communication Planning?
This is a more contested question than it appears. In large organisations, crisis communication sits at the intersection of PR, legal, HR, operations, and the C-suite, and each function has a legitimate claim on it. The problem is that joint ownership often means diffuse ownership, and diffuse ownership means slow decisions when speed matters most.
The practical answer is that someone in communications or PR should own the plan and the process, but the plan must be built with legal, HR, and operations in the room. The communications lead owns the messaging. Legal owns the liability boundaries. HR owns the employee communication track. Operations owns the factual accuracy of what is being communicated about the incident itself. These are distinct roles that need to be agreed in advance, not negotiated in real time.
If you work with external agencies, they need to be part of this conversation. Not as an afterthought, but as active participants in scenario planning. An agency running your paid media needs to know who to call if a campaign needs to be paused immediately. An agency running your social channels needs to know what the holding position is before they start fielding comments. The failure mode I have seen repeatedly is brands that have an internal crisis plan and agencies that are operating on instinct because no one thought to include them. The Marketing Juice PR and Communications hub covers the broader discipline of managing external communication with the rigour it deserves.
What Is the Role of Pre-Approved Messaging?
Pre-approved messaging is one of the most underused tools in crisis communication, and the resistance to it is usually philosophical rather than practical. Some communications professionals feel that pre-written statements are inauthentic, that they make a brand sound like it is reading from a script. That concern is legitimate in theory and largely irrelevant in practice.
When something goes wrong at 6pm on a Friday, the choice is not between a pre-approved holding statement and a carefully crafted, authentic response. The choice is between a pre-approved holding statement and something written in twenty minutes by someone who is stressed, under-informed, and waiting on legal sign-off. The holding statement wins that comparison almost every time.
Pre-approved messaging should cover three things: an acknowledgement that you are aware of the situation, a commitment to keeping stakeholders informed as you understand more, and a clear indication of where people can go for updates. That is it. It does not need to say more than that at the outset, and saying more than that before you have the full picture is where brands make their most damaging mistakes.
The approval process for these templates matters as much as the content. If your holding statements require sign-off from five people, they will not be used when they need to be used. Agree in advance who has authority to release a holding statement, and make that a single person or a maximum of two.
How Do You Keep a Crisis Plan Operational Over Time?
A crisis plan written in 2022 that has never been reviewed is not a current crisis plan. It is a historical document. The people named in it may have left. The channels it references may have changed. The scenarios it covers may no longer reflect your business model. This is the maintenance problem that most organisations handle badly.
The minimum viable maintenance schedule is a quarterly review of the contact list and escalation path, and an annual review of the scenarios and messaging. Neither of these needs to be a lengthy exercise. The contact list review takes thirty minutes. The scenario review takes a half-day workshop with the right people in the room.
More valuable than the review cycle is the practice cycle. Running a tabletop exercise once a year, where you walk a simulated crisis through your actual plan, will surface gaps that no document review will find. I have run these exercises with client teams and the consistent finding is not that the plan is wrong. It is that the people executing it have not internalised it. They know it exists. They do not know what they are supposed to do in the first fifteen minutes.
Tabletop exercises also surface the interpersonal dynamics that plans never capture. Who defers to whom under pressure? Who goes quiet when they should be escalating? Who makes decisions without checking? These are not character flaws. They are predictable human behaviours under stress, and you want to see them in a simulation, not in a live crisis.
How Should You Think About Social Media Within Your Crisis Plan?
Social media has not fundamentally changed what good crisis communication looks like. It has compressed the timeline in which you need to execute it. The principles, acknowledge quickly, communicate clearly, update consistently, remain the same. The window in which those principles need to be applied has shrunk considerably.
What social media has changed is the information environment around a crisis. Your stakeholders are not waiting for your press release. They are reading posts from employees, customers, journalists, and commentators in real time, and they are forming views based on that information before you have issued a single statement. Your crisis communication plan needs to account for this, not by trying to control the conversation, but by ensuring your own voice is in it early and clearly.
The monitoring function matters here. If you do not have a system for tracking what is being said about your brand across social channels, you are operating blind. This does not require expensive tooling. It requires a named person, a clear brief, and an escalation path when something significant is detected. The Forrester B2B revenue engine framework is not specifically about crisis communication, but its emphasis on alignment between functions applies directly here. The social media manager who spots a crisis forming needs a direct line to the person with authority to act, not a ticket in a queue.
Paid media deserves specific attention. Running brand advertising while a crisis is unfolding can significantly amplify the reputational damage, particularly if the creative is tone-deaf to the current situation. Your crisis plan should include a clear protocol for pausing paid activity, who can authorise it, and how quickly it can be executed. If your media is managed by an agency, this protocol needs to be agreed with them in writing, not assumed.
What Separates Organisations That Recover Well from Those That Do Not?
Having spent time on the other side of the table, evaluating campaigns and communication strategies, the pattern I have seen in organisations that recover well from crises is not that they communicated perfectly. It is that they communicated honestly and consistently, even when the honest answer was “we do not yet know the full picture.”
The organisations that struggle are typically those that treat crisis communication as a reputation management exercise rather than a stakeholder communication exercise. The distinction matters. Reputation management is about controlling perception. Stakeholder communication is about keeping the people affected, employees, customers, partners, regulators, informed with accurate information as it becomes available. The second approach tends to produce better reputational outcomes than the first, because it is grounded in something real.
I have also noticed that the quality of internal communication during a crisis is a strong predictor of the quality of external communication. Organisations where the CEO is communicating clearly and frequently with their own leadership team tend to produce more coherent external messaging. Organisations where information is being hoarded, filtered, or managed internally tend to produce fragmented, inconsistent external communication that erodes trust faster than the original incident would have.
The commercial dimension is worth naming directly. A well-handled crisis can genuinely strengthen stakeholder confidence in an organisation. It demonstrates competence, transparency, and values in a way that normal operations rarely do. This is not a reason to welcome crises. It is a reason to take the preparation seriously, because the investment has a real return.
If you want to build a more rigorous communications capability across your organisation, the PR and Communications section of The Marketing Juice covers the strategic and operational dimensions of the discipline in depth.
About the Author
Keith Lacy is a marketing strategist and former agency CEO with 20+ years of experience across agency leadership, performance marketing, and commercial strategy. He writes The Marketing Juice to cut through the noise and share what works.
