Crisis Communication Plan: Build It Before You Need It

A crisis communication plan is a documented framework that tells your organisation who speaks, what they say, and how fast they move when something goes wrong. Without one, you are not improvising, you are guessing, and guessing under pressure in front of journalists, customers, and regulators is where reputations get permanently damaged.

The companies that handle crises well rarely look like they are handling a crisis. That composure is not natural talent. It is preparation.

Why Most Plans Fail Before the Crisis Arrives

I have seen this pattern more times than I care to count. A business invests in developing a crisis communication plan, the document gets signed off, it sits in a shared drive, and nobody looks at it again until something goes wrong. By then, the contacts are out of date, the named spokesperson has left the company, and the approval chain described in the plan no longer reflects how the business actually makes decisions.

A plan that is not maintained is not a plan. It is a liability. It gives people false confidence that the problem has been solved, when what they actually have is a document that describes a version of the organisation that no longer exists.

The other failure mode is scope. Many crisis plans are written to handle one type of scenario, usually a product recall or a data breach, and then quietly assumed to cover everything else. When the crisis that arrives is a rogue social media post from a senior employee, or a supplier caught doing something indefensible, or a campaign that lands badly with a specific community, the plan does not fit and nobody knows whose job it is to adapt it in real time.

If you are building or reviewing your communications capability more broadly, the PR and Communications hub at The Marketing Juice covers the strategic and operational dimensions that sit around crisis management, including media relations, brand positioning, and stakeholder communication.

What a Crisis Communication Plan Actually Needs to Contain

A functional crisis plan has six components. Not all plans include all six. That is usually why they fail.

1. A Clear Governance Structure

Who has the authority to activate the plan? Who approves the first public statement? Who decides whether to escalate to the board? These are not communications questions. They are governance questions, and they need to be answered before a crisis happens, not negotiated during one.

The governance structure should name individuals, not job titles. Job titles change. It should also name backups, because crises have a habit of arriving when the primary decision-maker is unavailable. And it should define what “activation” actually means: what threshold of event triggers the plan, who calls it, and what happens in the first 30 minutes after activation.

2. A Scenario Library

Generic frameworks are better than nothing, but a scenario library is significantly more useful. This is a set of pre-mapped responses to the specific types of crisis your organisation is most likely to face, based on your industry, your business model, your product risk profile, and your public footprint.

A financial services business faces different scenarios than a consumer food brand. A company with a large social media following faces different exposure than a B2B software provider. The scenarios in your library should reflect your actual risk profile, not a generic list borrowed from a crisis management textbook.

For each scenario, the library should cover: who owns the response, what the initial holding statement looks like, which channels are activated, what the escalation triggers are, and what third-party stakeholders need to be informed. When I was running agencies with large client rosters, we maintained scenario libraries for individual clients based on their specific risk categories. It meant that when something happened, we were not starting from scratch. We were adapting from a foundation.

3. Pre-Approved Holding Statements

A holding statement is not a full response. It is the first thing you say while you are still establishing the facts. Its job is to acknowledge the situation, signal that you are taking it seriously, and buy time for a more considered response without creating further problems.

The mistake most organisations make is trying to draft holding statements during the crisis. This is when legal gets involved and slows everything down, when competing internal agendas surface, and when the statement that eventually gets approved is so hedged it says nothing. Pre-approved holding statements, developed calmly and reviewed by legal in advance, solve this problem entirely.

They do not need to be long. They need to be honest, measured, and free of language that will become a liability if the situation develops in an unexpected direction. Avoid anything that sounds like a denial before you have established the facts.

4. A Stakeholder Map

Who needs to hear from you during a crisis, and in what order? This is not the same question as who you want to communicate with. It includes people who have a legitimate expectation of being informed: employees, investors, regulators, key customers, distribution partners, and in some cases suppliers. Getting this wrong, specifically informing the public before you have informed your own staff, is one of the most damaging and most common crisis communication errors.

Your stakeholder map should include contact details, preferred communication channels, and a sequencing logic. Employees first, then key external stakeholders, then public-facing communications. That sequence is rarely wrong.

5. A Channel Strategy

Different crises require different channels. A data breach affecting individual customers requires direct individual communication, not a press release. A product safety issue may require a coordinated media statement, direct outreach to retailers, and a social media response simultaneously. A reputational crisis driven by social media requires a social-first response strategy, not a statement buried on your website.

Your plan should specify, for each scenario type, which channels are primary and which are secondary. It should also specify what you do not do. In some crises, responding on social media amplifies the situation rather than containing it. Knowing in advance when silence or minimal response is the right call is as important as knowing when to be vocal.

6. A Testing Schedule

A plan that has never been tested has never been validated. Most organisations run desktop simulations at best, which is better than nothing but significantly less revealing than a live exercise. A live simulation, where a scenario is presented without warning and the team has to activate the plan in real time, will expose gaps that no document review ever will.

Run simulations at least once a year. Update the plan after every simulation and after every real event, regardless of how it was handled. The plan should be a living document, not an archived one.

The Governance Problem That Nobody Talks About

In my experience, the communications failure in a crisis is almost always downstream of a governance failure. The organisation did not know who was in charge. Legal and marketing were pulling in opposite directions. The CEO wanted to be the spokesperson but had not been media trained. The board wanted to be kept informed but there was no mechanism to do so without slowing the response to a crawl.

I have sat in crisis response meetings where the first 45 minutes were spent arguing about who had the authority to approve a two-sentence holding statement. By the time it was approved, the story had already been published, framed entirely by the other party’s version of events. That framing stuck.

The governance question is not a communications question, and that is precisely why communications teams often cannot solve it on their own. It requires a decision from the CEO and the board about how authority flows during a declared crisis. That decision needs to be made, documented, and communicated internally before anything else. Everything else in the plan depends on it.

Effective crisis governance also has a commercial dimension that is often underappreciated. When you are managing a crisis that affects brand partners, distributors, or major clients, the stakeholder communication sequence has revenue implications. Getting it wrong, specifically leaving a major client to find out from the media, can cost you the relationship entirely. I have seen that happen. It is entirely avoidable with a properly maintained stakeholder map and a clear escalation protocol.

When the Crisis Is Internal and the Plan Does Not Cover It

One of the most underserved areas in crisis planning is internal crises: leadership misconduct, whistleblower disclosures, significant redundancies, or internal culture failures that become public. These are different in character from product or operational crises, and they require a different response framework.

The instinct in many organisations is to treat internal crises as HR matters and keep communications minimal. This is often the wrong call. Employees have access to social media. Journalists have sources inside organisations. The idea that you can contain an internal crisis through silence has not been reliable for at least a decade, and it is less reliable every year.

Internal crises require an employee communication strategy that is honest, timely, and does not treat staff as a risk to be managed. People can tell the difference between an organisation that is being straight with them and one that is managing them. The former builds trust during a difficult period. The latter accelerates the leak.

Years ago, I had to manage an internal situation where a campaign we had developed had to be completely abandoned at the eleventh hour due to a music licensing issue we had not anticipated, despite having specialist consultants involved. The client was understandably frustrated. The team was exhausted. The temptation was to minimise what had happened and focus on the solution. What actually worked was being direct with the client about what had gone wrong, what we were doing about it, and what we were putting in place to prevent it happening again. They stayed with us. The relationship deepened. Transparency under pressure, when it is genuine and accompanied by a credible plan, tends to hold.

The Speed Trap: Why Fast Is Not Always Right

There is a dominant narrative in crisis communications that speed is everything. Get something out in the first hour. Do not let a vacuum form. Own the narrative before someone else does.

This is broadly true, but it has a shadow side that is less frequently discussed. Speed without accuracy creates a second crisis. If your first statement contains an error, an overstatement, or a commitment you cannot keep, correcting it becomes the story. The correction looks like a cover-up. The cover-up narrative is harder to shift than the original crisis.

The goal is not to be first. The goal is to be first with something that is true, measured, and defensible as the situation develops. A holding statement that acknowledges the situation and commits to providing more information as it becomes available is almost always preferable to a substantive statement issued before you have established the facts.

This is where pre-approved holding statements earn their value. They allow you to respond quickly with something that is already accurate and legally reviewed, without the pressure of drafting under fire.

How Channel Behaviour Changes During a Crisis

Social media platforms behave differently during a crisis than they do during normal operations. Content that would normally perform well, whether it is scheduled posts, promotional content, or brand storytelling, becomes actively damaging if it runs while a crisis is unfolding. The contrast between a cheerful brand post and a serious unresolved situation is noticed immediately and amplified.

Your crisis plan needs a social media pause protocol. This means a clear trigger for suspending scheduled content, a defined process for doing so quickly, and clarity on who has the authority to pause and resume. Most scheduling platforms allow this, but the decision to do it needs to happen fast, which means the protocol needs to be defined in advance.

It is also worth mapping how your brand’s specific audience behaves on social media during a crisis. Some audiences respond to transparency and engagement. Others amplify conflict regardless of what you say. Understanding your audience’s behaviour patterns, not just their demographics, shapes how you use social channels during a crisis response. Platforms like TikTok, for example, operate with different content dynamics than LinkedIn or Twitter, and a response strategy that works on one platform can look tone-deaf on another.

The earned media dimension has also shifted considerably. Journalists now monitor social media in real time. A story that starts as a social media conversation can become a published article within hours. Your monitoring capability, meaning your ability to detect and assess a developing situation before it reaches mainstream media, is as important as your response capability. If you are not monitoring, you are always reacting to yesterday’s news.

The Commercial Case for Investing in Crisis Preparation

Crisis communication planning is one of those investments that is very easy to deprioritise because the return is invisible until you need it. When nothing goes wrong, the plan sits unused and looks like a cost with no benefit. This is the wrong frame.

The commercial case is straightforward. A poorly managed crisis costs money in ways that are measurable: lost revenue during the crisis period, customer churn, increased cost of acquisition as brand trust erodes, management time diverted from growth activity, legal costs, and in some cases regulatory penalties. A well-managed crisis can actually strengthen brand trust if the response is credible and the organisation is seen to handle it with integrity.

The organisations that handle crises best are not necessarily those with the largest communications teams. They are the ones that have done the unglamorous preparatory work: mapping scenarios, clarifying governance, training spokespeople, testing their plans, and maintaining their stakeholder relationships before they need them. That preparation is what makes the response look effortless, even when it is anything but.

Across the industries I have worked in, from financial services to consumer goods to technology, the pattern holds. The businesses that had invested in preparation recovered faster, retained more customers, and spent less managing the aftermath. The ones that had not invested spent the first 48 hours figuring out basic governance questions that should have been resolved years earlier.

There is also a talent dimension worth noting. Senior marketing and communications professionals are increasingly evaluating potential employers on the maturity of their crisis preparedness. An organisation that has no plan, no governance structure, and no training programme is asking its communications team to operate without a safety net. That is a retention risk as well as a reputational one.

Maintaining the Plan Without Letting It Become Bureaucracy

One of the practical challenges with crisis communication plans is keeping them current without turning maintenance into a bureaucratic exercise that nobody engages with. The plan needs to be a working document, not a compliance artefact.

A few disciplines that work in practice. First, assign a named owner, not a team, with clear accountability for keeping the plan current. Second, build review triggers into the calendar: annually at minimum, and also after any significant organisational change such as a leadership transition, a merger, a major product launch, or entry into a new market. Third, after any real crisis or near-miss, run a structured debrief and update the plan based on what you learned. The debrief is where the most valuable learning happens, and most organisations skip it entirely because they are relieved the crisis is over.

The scenario library is the component that becomes outdated fastest. New products create new risk profiles. New markets bring new regulatory environments. New channels create new exposure. A scenario library that was accurate three years ago may be missing the scenarios that are most likely to affect your business today.

Spokesperson training is another area that tends to drift. People who were trained two years ago may have forgotten what they learned, or may have moved into different roles. New senior leaders need to be trained before they are needed, not the morning before a press conference.

For a broader view of how crisis communication sits within a wider strategic communications framework, the PR and Communications section at The Marketing Juice covers the full range of disciplines that support reputation management and stakeholder engagement at a strategic level.

What Good Looks Like in Practice

The organisations that handle crises well share a few observable characteristics. They respond quickly with measured, accurate statements. They communicate with stakeholders in a logical sequence. They do not over-promise on resolution timelines. They update regularly even when there is nothing new to report, which prevents the vacuum that speculation fills. And they follow through on commitments made during the crisis, which is where many organisations fall down once the immediate pressure has passed.

They also know when the crisis is over. One of the less-discussed aspects of crisis management is the exit strategy: how you signal that the situation has been resolved, how you resume normal communications without it looking jarring, and how you address any lasting reputational damage through sustained behaviour rather than a single statement.

The exit from a crisis is not a press release. It is a period of consistent behaviour that demonstrates the organisation has learned from the situation and made the changes it committed to. That takes longer than the crisis itself, and it requires the same level of coordination and discipline as the initial response.

I have managed enough crisis situations, both directly and alongside clients, to know that the organisations that come out stronger are the ones that treat the crisis as information. Something went wrong. That reveals something about the business, the product, the culture, or the processes. The organisations that use that information to make genuine changes are the ones that rebuild trust. The ones that treat the crisis as a communications problem to be managed and then move on unchanged tend to face the same crisis again in a different form.

About the Author

Keith Lacy is a marketing strategist and former agency CEO with 20+ years of experience across agency leadership, performance marketing, and commercial strategy. He writes The Marketing Juice to cut through the noise and share what works.

Frequently Asked Questions