How Should Organisations Prepare for a Communications Crisis
How Should Organisations Prepare for a Communications Crisis?
The best crisis communications plan is largely written before the crisis begins.
Organisations often discover this only after something goes wrong.

A senior executive makes an ill-judged statement. A product fails. A cyber incident becomes public. An employee allegation reaches journalists. A regulator intervenes. A social-media post suddenly attracts widespread attention.

Everyone starts asking the same question:

What do we say?
By then, the organisation has already lost valuable time.
Preparation changes the equation.

Crisis preparation begins with organisational risk

A crisis communications plan should begin with an honest, uncomfortable appraisal of the organisation's actual vulnerabilities.
Ask:
  • What could seriously damage our reputation?
  • What could interrupt our operations?
  • What could harm customers or employees?
  • What could attract regulatory attention?
  • What could trigger political scrutiny?
  • What could generate sustained media interest?
  • What could cause stakeholders to question our leadership?
The answers will differ by sector.

A university may face allegations concerning research integrity.

A bank may face a systems failure. A manufacturer may face a safety problem. An NGO may face a governance controversy.

A mining company may face community conflict. A consultancy may face a confidentiality issue.

The crisis plan should reflect those realities.

Build scenarios before you need them

The most useful preparation exercise is scenario planning. Select the ten or so events that could cause serious disruption.
For each one, establish:

What happens first?

Who needs to know?

Who makes the decision?

Who communicates?

What information is required?

Which stakeholders are affected?

Which authorities need to be notified?

What can we say immediately?

What must we investigate first?

What would make the situation worse?

This converts an abstract crisis plan into something operational.

Establish a crisis team

A crisis should not create an organisational argument about who is responsible. Responsibilities should already exist.

A crisis team might include:

  • chief executive
  • communications lead
  • legal counsel
  • operational lead
  • human resources
  • risk or compliance
  • information technology
  • relevant technical specialist
The composition depends on the organisation. The principle is consistent.
The people responsible for making decisions should know each other before the crisis occurs.

Identify the spokesperson

The CEO is not automatically the best crisis spokesperson.

Sometimes the CEO should lead. Sometimes the technical expert should explain the problem. Sometimes a communications executive should handle media enquiries.

Sometimes several people are needed. What matters is authority, competence and credibility.

The spokesperson must understand the facts and remain within the boundaries of what the organisation can responsibly disclose.

Prepare holding statements

A holding statement buys time. It should acknowledge the issue without speculating.

A useful structure is: We are aware of the issue.

We are investigating what happened.

Our immediate priority is [stakeholder or issue].

We will provide further information when we can confirm the facts.

This is deliberately simple. A holding statement should not attempt to solve a complex crisis in three paragraphs.

Build a fact sheet

Before a crisis, prepare a central repository containing
  • organisational facts
  • key statistics
  • leadership biographies
  • regulatory information
  • previous statements
  • relevant policies
  • emergency contacts
  • stakeholder information
  • frequently asked questions
During a crisis, people make mistakes when they are forced to search for basic information under pressure.

Preparation reduces that risk.

Establish an approval process

One of the worst crisis scenarios is having a statement ready but no agreement on who can approve it.

Define:

  • who drafts
  • who reviews
  • who provides legal input
  • who approves
  • who publishes
  • who briefs employees
  • who handles journalists
The process should be short. A crisis cannot wait three days for a committee meeting.

Prepare employees

Employees are frequently overlooked during crises. That is dangerous. Employees may receive questions from customers, journalists, friends, suppliers or community members.

They need to understand:

  • what happened
  • what the organisation is doing
  • where official information will appear
  • who should handle external enquiries
  • what they can safely discuss
Internal communication should therefore happen early. Employees should not learn about a major organisational crisis from the news

Monitor the information environment

Crisis preparation also requires monitoring.

Cision's research continues to emphasise the changing media environment and the need for communications professionals to understand how journalists, audiences and information channels operate. (Cision)

Monitoring should include:

  • mainstream media
  • social platforms
  • relevant industry conversations
  • regulatory announcements
  • employee concerns
  • stakeholder groups
The purpose is early detection. The earlier an organisation identifies a developing issue, the more options it has.

Prepare for misinformation

A crisis creates an information vacuum. People fill it. Some information will be accurate.

Some will be incomplete. Some will be speculative. Some may be deliberately false. The organisation needs a process for determining which claims require a response.

Do not respond to every rumour. Prioritise claims that:

  • could cause material harm
  • are gaining significant reach
  • concern safety
  • affect important stakeholders
  • contain factual inaccuracies that can be corrected
Silence is sometimes appropriate. Correction is sometimes necessary. The decision should be strategic

Test the plan

A document sitting in a shared drive is not a crisis capability. Run simulations. Give the crisis team a fictional scenario.

Then introduce complications:

A journalist calls.

The CEO is unavailable.

Employees are posting online.

A regulator issues a statement.

A new fact contradicts the original assumption.

The story begins trending.

Watch what happens. The exercise will reveal weaknesses that a written plan cannot.

Reputation recovery requires evidence

Crisis communication does not end when media attention declines.

The organisation must demonstrate that it has learned and changed.

Muck Rack's 2026 communications research places increasing emphasis on demonstrating impact, trust and reputation rather than merely measuring communication activity. (Muck Rack) That principle applies strongly to crisis management.

The organisation should eventually be able to explain:

  • what happened
  • why it happened
  • what it did immediately
  • what it changed
  • what safeguards now exist
  • how stakeholders can judge progress

A practical crisis checklist

Before a crisis occurs, every organisation should be able to answer:
1.
What are our ten most plausible serious crises?
2.
Who leads the response?
3.
Who is the spokesperson?
4.
Who approves public statements?
5.
Where is our crisis contact list?
6.
How do we communicate with employees?
7.
Which stakeholders require direct engagement?
8.
Which regulators or authorities may need notification?
9.
How do we monitor media and public discussion?
10.
How do we test the plan?
If the organisation cannot answer these questions quickly, the crisis plan needs work. Preparation will never eliminate uncertainty. It does something more valuable.

It gives leadership a framework for making good decisions while circumstances are changing quickly.

Selected sources

Cision, Inside PR 2026 (Cision)
Muck Rack, How to demonstrate communications impact in 2026 (Muck Rack)
Edelman Trust Institute (Edelman)