Corporate Crisis Management: What the Playbook Gets Wrong

Corporate crisis management is the discipline of protecting an organisation’s reputation, operations, and stakeholder relationships when something goes seriously wrong. Done well, it compresses the damage window, controls the narrative, and preserves long-term brand equity. Done badly, it turns a manageable incident into a defining failure.

The problem is that most organisations prepare for the wrong kind of crisis. They write the playbook for the disaster they can imagine, not the one that actually arrives. And when it does arrive, it rarely looks the way anyone expected.

Why Crisis Plans Fail at the Moment They’re Needed Most

I’ve watched crisis plans fall apart in real time. Not because the documents were poorly written, but because the people holding them had never actually tested what it felt like to make a decision under pressure, with incomplete information, while a journalist is calling every thirty minutes and your CEO is asking for a statement in the next hour.

The plan assumes rational actors with full information. A real crisis gives you neither.

Years ago, we were deep into production on a major Christmas campaign for Vodafone. The creative was strong, the media plan was locked, and the timeline was already tight. Then, at the eleventh hour, a music licensing issue surfaced that made the entire campaign undeliverable. We had worked with a Sony A&R consultant throughout the process. We had done what you’re supposed to do. It didn’t matter. The rights situation was irresolvable in the time available, and we had to go back to zero: new concept, client approval, production, delivery, all compressed into a window that would have been challenging for a straightforward brief.

That experience taught me something that no crisis manual captures particularly well: the most dangerous moment isn’t when the problem lands. It’s the thirty minutes after, when the instinct is to either freeze or react too fast. Both are wrong. What you need is a clear head, a short list of decisions that actually matter right now, and the discipline to ignore everything else until those are resolved.

Crisis management, in practice, is a series of triage decisions under time pressure. The plan is just the starting framework. The real work is judgment.

The First Hour: What You Do Before You Say Anything

There is enormous pressure, particularly in the social media era, to respond immediately. Silence feels like guilt. Delay feels like incompetence. So organisations rush to say something, anything, to fill the vacuum.

This is almost always a mistake.

A statement issued before you understand what actually happened is a liability, not an asset. If the facts shift, and in the early hours of a crisis they almost always do, you are now defending a position you built on incomplete information. Walking back a statement is significantly more damaging than having taken an extra two hours to get it right.

What the first hour should look like, in practice:

Establish the facts you actually know, separately from the facts you’re assuming. These are different lists, and conflating them is where most early errors happen. Identify who has decision-making authority, because in a crisis, consensus is slow and slow is expensive. Determine what you must say, what you can say, and what you cannot say yet, and be honest about which category each piece of information falls into. Then issue a brief holding statement that acknowledges the situation without speculating, and commits to a timeline for your next update.

That last part matters. Stakeholders can tolerate uncertainty if they believe someone is in control and will tell them more when there is more to tell. What they cannot tolerate is the feeling that no one is paying attention.

If you work in PR and communications and want a broader view of how reputation management fits into the wider discipline, the resources at The Marketing Juice PR and Communications hub cover the strategic side of this in more depth.

The Internal Communications Failure Nobody Plans For

Every crisis plan I have ever reviewed spends the majority of its pages on external communications. Media handling, social media protocols, spokesperson guidance, press release templates. The internal communications section, if it exists at all, is usually two paragraphs and an org chart.

This is a serious structural error.

When a crisis breaks publicly, your employees are watching the same news feeds as everyone else. If they find out what’s happening from a journalist’s tweet before they hear from their own leadership, you have created a second crisis inside the first one. Staff who feel uninformed become anxious, then resentful, then vocal. And in the age of Glassdoor and LinkedIn, vocal employees are a reputational risk that most crisis plans simply don’t account for.

I’ve seen this happen in client organisations during difficult periods. The external comms team is executing well, the CEO is briefing media, the holding statement is out. Meanwhile, the customer service team is fielding calls from confused clients with no guidance on what to say, the sales team is losing deals because prospects are asking questions nobody has answered internally, and middle management is improvising because they haven’t been told anything either.

The internal audience is not a secondary consideration. In many crises, it is the primary one. Your people are your most credible external communicators when things go well, and your most damaging ones when they don’t. Keeping them informed, honestly and quickly, is not just good management. It is crisis containment.

Practically, this means your crisis protocol should include a parallel internal communications track with its own timeline, its own approved messaging, and a clear chain of responsibility for who tells which teams what, and when.

The Spokesperson Problem: Who Should Actually Be Talking

Most organisations default to the CEO as the crisis spokesperson. This is sometimes right and often wrong, and the distinction matters more than most people realise.

Deploying the CEO signals seriousness and accountability. It tells the world that the organisation’s leadership is personally engaged with the issue. In a genuine, high-stakes crisis involving significant harm, public trust, or systemic failure, that signal is appropriate and often necessary.

But not every crisis warrants it. And when a CEO appears on camera for an issue that turns out to be relatively contained, you have spent credibility you can’t get back. Worse, if the CEO then needs to appear again for a more serious issue six months later, the second appearance carries less weight because the first one was disproportionate.

The spokesperson decision should be matched to the severity and nature of the incident. A product recall might call for the Chief Operating Officer or Head of Product. A data breach might call for the Chief Information Security Officer alongside legal counsel. A financial irregularity almost certainly calls for the CEO, possibly alongside the board chair.

Whoever speaks needs three things: genuine authority over the subject matter, media training that has been tested under pressure, and the ability to say “I don’t know yet, and here’s when we’ll have an answer” without it sounding like evasion. That last skill is rarer than it should be. Most executives are trained to project certainty. In a crisis, performed certainty about things you don’t actually know is one of the fastest ways to lose credibility.

Social Media During a Crisis: Discipline Over Velocity

The pressure to be active on social media during a crisis is real and largely counterproductive. The logic goes: if you’re not shaping the conversation, someone else will. True. But the alternative is not to post anything and everything, it is to post the right things with deliberate timing.

Social media during a crisis serves specific functions. It distributes your holding statement to audiences who won’t see a press release. It allows you to correct misinformation quickly and directly. It gives you a channel to update stakeholders as the situation develops. What it is not is a place for real-time commentary, emotional responses to criticism, or extended back-and-forth with hostile accounts.

I have watched brands make significant errors by engaging with critics on Twitter in the early hours of a crisis. Every reply extends the thread, surfaces the original criticism to a wider audience, and creates new material for journalists to screenshot. The discipline required is to say what needs to be said, once, clearly, and then not be drawn into a running argument on a public platform.

Tools that help you monitor what’s being said in real time are useful, but only if you have a clear protocol for how to act on what you see. Monitoring without a decision framework just creates anxiety. You need to know in advance: what triggers a response, who approves it, and what the response categories are.

The Recovery Phase: Where Most Organisations Give Up Too Early

Crisis management has a recovery phase that receives almost no attention in most playbooks. The assumption is that once the immediate incident is resolved and media coverage has subsided, the crisis is over. It isn’t.

Reputation damage from a crisis has a long tail. Prospective employees Google you. Potential clients read old coverage. Investors check the timeline. The way an organisation behaves in the six to twelve months after a crisis is often more defining than how it behaved in the first week.

Recovery is built on three things: demonstrable change, visible accountability, and consistent follow-through. Not a press release saying you’ve changed. Not an apology that isn’t accompanied by action. Actual, verifiable changes to how the organisation operates, communicated consistently over time.

When I was running agencies through difficult periods, including a turnaround situation where the business had been loss-making and trust with clients had eroded, the recovery wasn’t built on a single narrative moment. It was built on a sequence of smaller proof points: a client who came back, a campaign that performed well, a team that grew. Each one was a piece of evidence. Collectively, they rebuilt the story. That’s how reputational recovery actually works. It’s cumulative, not dramatic.

The organisations that recover fastest from a crisis are the ones that treat the recovery phase with the same rigour as the acute response. They have a plan. They have milestones. They have someone accountable for executing it. And they resist the temptation to declare victory before the evidence supports it.

Rehearsal: The Investment Most Organisations Skip

Crisis response is a perishable skill. Reading the playbook is not the same as having practised it. And yet most organisations treat crisis preparedness as a document exercise rather than a capability exercise.

The organisations that perform best under pressure are the ones that have run tabletop exercises, stress-tested their decision trees, and put their spokespeople in front of a camera with a hostile interviewer before the real thing happens. These exercises feel uncomfortable, which is exactly why they’re valuable. Discomfort in a simulation is productive. Discomfort in a live crisis, when you’re discovering for the first time that your CEO freezes under pressure or that your approval chain has four bottlenecks, is very expensive.

A well-structured crisis simulation should test at least three things: the speed and quality of your internal decision-making, the coherence of your external messaging across channels, and the resilience of your communications infrastructure when normal channels are compromised or overloaded.

It should also surface the gaps in your plan, because there will be gaps. Every simulation I’ve seen or been involved in reveals something the plan didn’t account for. That’s not a failure of the simulation. That’s the point of it.

The goal is not a perfect plan. The goal is a team that knows how to think clearly when the plan stops being useful, which it will, at some point, in every real crisis.

What Good Crisis Management Actually Looks Like From the Inside

Having been on both sides of crisis situations, as an agency partner supporting clients through difficult moments and as an agency leader managing our own, the clearest pattern I’ve observed is this: the organisations that handle crises well are not the ones with the most elaborate plans. They are the ones with the clearest leadership, the most honest internal culture, and the fastest decision-making structures.

When a crisis hits an organisation where leadership is trusted internally, where people feel they can surface bad news quickly without it being punished, and where decisions can be made without three layers of approval, the response is measurably faster and more coherent. Not because they had a better playbook, but because the organisational conditions for good crisis management already existed.

Conversely, the organisations that struggle most are often the ones where internal communication is already poor, where there’s political friction between departments, and where the instinct in difficult moments is to protect individual positions rather than make collective decisions. A crisis doesn’t create those problems. It exposes them.

This is why crisis preparedness is really a question about organisational health. You can’t bolt good crisis management onto a dysfunctional organisation and expect it to work. The plan is only as good as the culture it sits inside.

For more on how communications strategy connects to broader commercial and brand decisions, the PR and Communications section of The Marketing Juice is worth spending time with. The discipline is broader than most people treat it.

About the Author

Keith Lacy is a marketing strategist and former agency CEO with 20+ years of experience across agency leadership, performance marketing, and commercial strategy. He writes The Marketing Juice to cut through the noise and share what works.

Frequently Asked Questions