Crisis Communication Management: Build the Plan Before You Need It

Crisis communication management is the process of preparing for, responding to, and recovering from events that threaten an organisation’s reputation, operations, or stakeholder trust. Done well, it limits damage and preserves credibility. Done poorly, it turns a manageable problem into a defining failure.

Most organisations treat crisis communication as something to figure out when the crisis arrives. That assumption is where the real damage begins.

There is a broader conversation about PR and communications strategy worth reading alongside this. The PR & Communications hub covers the full spectrum, from reputation management to media relations, and gives useful context for where crisis communication fits within a wider communications function.

Why Crisis Plans Fail Before the Crisis Starts

I spent a significant part of my agency career working on large-scale campaigns for major brands, and one of the clearest lessons I took from that period was this: the moments that test you most are rarely the ones you planned for. They’re the ones that arrive sideways, at the worst possible time, with no obvious playbook.

We were deep into production on a Christmas campaign for Vodafone. The creative was strong. The timeline was tight but manageable. Then, at the eleventh hour, a music licensing issue surfaced that made the entire campaign unusable. We’d been working with a Sony A&R consultant throughout the process, so this wasn’t a case of cutting corners. The rights landscape is simply that complicated, and even experienced people operating in good faith can find themselves exposed. We had to abandon the campaign entirely, go back to the drawing board, develop a new concept, get client approval, and deliver on a compressed timeline.

That experience wasn’t a communications crisis in the traditional sense, but it had all the structural features of one: a sudden loss of the assumed plan, a compressed window to respond, a client relationship under pressure, and a team that needed to stay focused rather than spiral. What got us through it wasn’t a formal crisis protocol. It was the fact that we’d built enough trust, clarity, and operational discipline in normal conditions that we could function effectively when things went wrong.

That’s the real point about crisis plans. They don’t work because they contain the right template. They work because the organisation behind them has already done the hard work of alignment, accountability, and honest communication in everyday situations.

Most crisis plans fail for one of three reasons. First, they’re written by communications teams in isolation, without input from legal, operations, or senior leadership. Second, they’re too prescriptive, full of pre-approved statements that don’t map to real scenarios. Third, they’re filed away and never tested, so when a crisis hits, nobody knows where the document is, let alone what it says.

What a Functional Crisis Communication Framework Actually Contains

A crisis communication framework is not a script. It’s a decision-making architecture. It tells people who has authority to speak, what information needs to be gathered before any statement is made, which stakeholders need to be contacted first, and what the approval chain looks like when time is short.

The components that matter most are these.

A clear command structure

In a crisis, the most dangerous thing an organisation can do is have multiple people authorising different messages. You need a single decision-maker for external communications, a defined support team, and a process for escalating decisions that exceed that person’s authority. This sounds obvious. It almost never exists in practice.

When I was running agencies, one of the first things I’d establish with new clients was who could approve creative and copy under time pressure. Not the ideal approver. The person who was actually available and empowered to make a call at 7pm on a Thursday. Crisis communication requires the same conversation, held in advance, not in the moment.

Scenario mapping

You cannot write a statement for every possible crisis, but you can map the categories of crisis your organisation is realistically exposed to. A financial services company faces different scenarios than a food manufacturer. A technology platform has different vulnerabilities than a professional services firm. The mapping exercise forces honest conversations about where the real risks sit, and that conversation is valuable independent of whether a crisis ever occurs.

Scenario mapping should include the trigger event, the likely stakeholder groups affected, the first 24-hour response window, and the longer-term reputation management considerations. It should also include internal scenarios, because some of the most damaging crises originate inside the organisation rather than outside it.

Holding statements and message principles

A holding statement is not a full response. It’s an acknowledgement that something has happened, that the organisation is aware of it, and that more information will follow. Its purpose is to occupy the space before you have enough information to say something substantive, without saying something that will later prove to be wrong or misleading.

The message principles are the guardrails for everything that follows. They define the tone, the level of detail, the commitments the organisation is willing to make, and the things it will not say under any circumstances. These need legal input, not just communications input.

A stakeholder contact map

Different stakeholders need to hear from you in different ways and in a specific order. Employees should almost always hear before the public. Key clients or partners should hear before the media. Regulators may need to be notified before any public statement is made. The contact map sets out who gets contacted, by whom, through which channel, and in what sequence. Getting this order wrong can compound the original problem significantly.

The First 24 Hours: Where Reputations Are Won or Lost

The first 24 hours of a crisis are disproportionately important. Not because the situation is resolved in that window, but because the narrative frame gets established. If your organisation is seen to be transparent, responsive, and in control, that perception carries forward. If it’s seen to be evasive, slow, or defensive, that perception is extremely difficult to shift.

There are a few specific things that determine how the first 24 hours go.

The first is whether you find out about the crisis before your stakeholders do. Organisations that are monitoring their environment properly, whether that’s social media, media coverage, internal reporting channels, or customer feedback, have a response window that others don’t. That window is the difference between getting ahead of a story and spending the next week playing catch-up.

The second is whether your internal team is aligned before you communicate externally. I’ve seen situations where a company’s PR team issued a statement that directly contradicted what the customer service team was telling callers. That kind of misalignment doesn’t just look disorganised. It looks dishonest, even when it isn’t. Internal briefing is not optional. It’s the foundation of credible external communication.

The third is whether the person speaking publicly is the right person. There are situations where a CEO statement is appropriate and situations where it’s an overreaction that elevates the story. There are situations where a technical spokesperson is more credible than a communications professional. The decision about who speaks should be made on the basis of what will best serve the organisation’s credibility, not on the basis of who is most senior or most available.

Digital Channels Have Changed the Crisis Timeline

The mechanics of crisis communication have shifted substantially with the growth of social media and always-on news cycles. What used to be a 24-hour response window is now, in some cases, a 24-minute one. This creates a genuine tension between speed and accuracy that organisations need to think through in advance rather than resolve under pressure.

Social media monitoring is no longer optional for any organisation with meaningful public exposure. The ability to detect an emerging issue before it reaches critical mass gives you options that you simply don’t have once a story is trending. There are a range of tools that support this, and while I won’t advocate for any specific platform here, the capability needs to exist and needs to be connected to someone with the authority to act on what they see.

The channel question also matters. A crisis that originates on social media may need to be addressed on social media first, not via a press release. A crisis involving a specific client or partner may need a direct conversation before any public statement. Matching the response channel to the crisis context is a judgment call, and it’s one that benefits from having thought through the scenarios in advance.

One thing I’d push back on is the assumption that digital channels require a fundamentally different communication approach. The principles don’t change. Clarity, honesty, and appropriate speed matter whether you’re posting on a social platform or briefing a journalist. What changes is the format and the pace, not the underlying logic.

For organisations thinking about their broader marketing and communications tactics in a digital environment, it’s worth noting that the same discipline that makes a content strategy effective, consistency, clarity, and audience awareness, also makes crisis communication more manageable. These aren’t separate skill sets.

The Stakeholder Hierarchy Most Organisations Get Wrong

One of the most consistent mistakes I’ve seen organisations make in crisis situations is getting the stakeholder sequence wrong. The instinct is to manage the public narrative first, usually because that’s where the pressure is most visible. But the organisations that handle crises well almost always prioritise their internal audiences and close external relationships before they address the broader public.

Employees are your most important communications channel in a crisis, and they’re also the most frequently neglected one. If your team doesn’t know what’s happening and what the organisation’s position is, they will fill that vacuum with speculation. That speculation reaches customers, partners, and journalists. The damage done by unmanaged internal communication is often greater than the damage done by the original event.

When I was growing an agency from 20 to 100 people, one of the things I learned quickly was that internal communication at scale requires the same intentionality as external communication. People don’t assume the best when they’re uncertain. They assume the worst. Getting ahead of that with honest, timely internal communication isn’t just good crisis management. It’s basic organisational respect.

Key clients and partners come next. They have a reasonable expectation of being informed before they read about something in the press. Failing to contact them directly is a relationship decision as much as a communications one, and the relationship cost of getting this wrong often outlasts the crisis itself.

Regulators and statutory bodies may need to be notified in parallel with, or even before, internal communication, depending on the nature of the crisis and the regulatory environment. This is where legal counsel becomes essential. Communications professionals shouldn’t be making regulatory notification decisions independently.

What Effective Crisis Messaging Looks Like

Effective crisis messaging has three qualities: it’s accurate, it’s appropriate to what is known at the time of issue, and it doesn’t overcommit the organisation to positions it may not be able to sustain as more information emerges.

The temptation in a crisis is to say too much too fast. To reassure, to explain, to demonstrate that the organisation is on top of things. That temptation should be resisted. Statements that go beyond what is currently known create hostages to fortune. When the fuller picture emerges and it contradicts what was said earlier, the credibility damage from the contradiction is often worse than the original issue would have been.

There is also a tendency to default to corporate language under pressure. The instinct is to reach for formal, legalistic phrasing because it feels safer. In practice, it reads as evasive. Plain language, written at a level that any stakeholder can understand, is almost always more effective than carefully hedged corporate prose.

Acknowledging what you don’t yet know is not a weakness. It’s a credibility signal. Audiences are generally more forgiving of uncertainty than they are of overconfidence that later proves to be wrong. Saying “we are still establishing the full picture and will update you by [specific time]” is more effective than issuing a comprehensive statement that turns out to be incomplete.

The organisations that consistently handle crises well tend to be the ones that have invested in honest communication as a cultural practice, not just a crisis-specific tactic. When transparency is the default mode, it’s much easier to maintain under pressure. When it’s only deployed in emergencies, it tends to feel performative, because it is.

The Post-Crisis Review Most Organisations Skip

The post-crisis review is where the real learning happens, and it’s the stage that most organisations either skip entirely or conduct in a way that produces no useful output.

A useful post-crisis review asks specific questions. What did we know, and when did we know it? Where did the response plan hold, and where did it break down? Which stakeholder groups felt well-served by our communication, and which didn’t? What would we do differently if this happened again tomorrow?

The review should involve people from across the organisation, not just the communications team. The operational teams, the customer-facing teams, the legal and compliance functions, all of them will have seen things that the communications team didn’t. Their perspective is essential to building a more accurate picture of what happened and why.

The output of the review should be specific and actionable. “Improve internal communication” is not an action. “Establish a 30-minute internal briefing window before any external statement is issued, with a named owner for that briefing” is an action. The difference matters, because vague commitments don’t survive the return to normal operations.

I’ve judged the Effie Awards and spent time evaluating what separates effective marketing from ineffective marketing at scale. One of the consistent patterns is that the organisations with the strongest long-term performance are the ones that build learning into their operating rhythm rather than treating it as an optional extra. Crisis communication is no different. The review is where the next crisis gets managed better.

There’s a range of additional thinking on communications, reputation management, and how PR fits within a broader marketing function available in the PR & Communications section of The Marketing Juice. If crisis communication is a current priority, the surrounding context is worth reading.

Building the Plan: A Practical Starting Point

If your organisation doesn’t have a crisis communication plan, or has one that hasn’t been reviewed in the last two years, the starting point isn’t a lengthy document. It’s a series of honest conversations.

Start with the risk landscape. What are the scenarios that could realistically affect your organisation’s reputation or operations? Be specific and be honest. The exercise is only useful if it reflects actual exposure rather than theoretical scenarios that make everyone feel comfortable.

Then establish the command structure. Who has authority to speak externally? Who approves statements? Who is the backup if the primary person is unavailable? These decisions need to be made and documented before they need to be acted on.

Then test it. A tabletop exercise, where a fictional crisis scenario is walked through by the relevant team, is one of the most efficient ways to identify gaps in a plan. It’s uncomfortable, which is why most organisations avoid it. That discomfort is the point. Better to find out where the plan breaks down in a controlled environment than in a live situation.

For organisations looking to strengthen their monitoring capability, tools that support audience research and feedback collection, such as Hotjar’s survey tools, can also be useful in a post-crisis context for gauging how stakeholders perceived the response. Understanding the gap between how you think you communicated and how audiences actually experienced it is genuinely valuable.

The plan itself doesn’t need to be long. It needs to be clear, accessible, and owned by someone who has the authority to activate it. A ten-page document that nobody has read is less useful than a two-page document that the relevant team knows cold.

Crisis communication management is not a specialism separate from the broader discipline of good communication. It’s what good communication looks like under pressure. The organisations that handle it well are, almost without exception, the ones that have invested in honest, clear, consistent communication as a standard operating practice. The crisis plan is the structure. The culture is what makes it work.

About the Author

Keith Lacy is a marketing strategist and former agency CEO with 20+ years of experience across agency leadership, performance marketing, and commercial strategy. He writes The Marketing Juice to cut through the noise and share what works.

Frequently Asked Questions