This Corporate Crisis Communication Playbook is a practical sequence for a corporate team facing a developing incident. Protect people and follow emergency instructions first; communications must not delay medical help, site safety measures or required notifications. Assign owners, separate confirmed facts from reports, and publish a useful update without pretending to know the outcome.
1. Classify the incident and activate the right people
Use the highest credible risk, not the loudest headline, to set the initial response level. Reassess as evidence changes:
- Safety or operational: injury, fire, contamination, outage or an unsafe site. Alert emergency responders and the safety or operations lead immediately; give affected people practical instructions before planning a media appearance.
- Data or privacy: suspected exposure, unauthorised access or a supplier breach. Involve security, privacy and legal owners; do not publish unverified counts or technical causes.
- Product or service: a suspected defect, recall, disruption or customer harm. Have the product and support owners verify affected versions, locations and usable customer actions.
- Conduct, governance or reputation: an allegation involving people, leadership or business practices. Protect complainants and evidence, route the matter to the appropriate independent investigation owner, and avoid prejudging findings.
For a high-impact incident, appoint an incident commander, a safety or subject-matter owner, a communications lead, a legal contact, a customer or employee contact and a single spokesperson. Record who is on call, who can authorise a public update and when the team will reconvene. Lower-impact issues can use a smaller group, but still need an owner and a review time.
2. Open a fact ledger before drafting
Keep one time-stamped working record with columns for claim, source, verification owner, status, last checked, audience impact and next check. Mark each entry confirmed, under investigation, disputed or incorrect; preserve earlier versions rather than silently rewriting them. Separate what the company observed from what a customer, employee or reporter reports. Log the first alert, decisions, approvals, published messages and corrections. Restrict access to sensitive personal details and share only the minimum needed with the response group.
At each check-in ask: Who may be affected? What should they do now? What has the team actually established? What remains unknown? Which source can resolve it? If a number changes, record the reason and correct the public record promptly. Do not promote a plausible hypothesis into a fact to make a statement sound complete.
3. Set a short, explicit approval path
Have the communications lead draft from the ledger, the operational or safety owner validate actions and figures, and the legal adviser review disclosure, privacy and investigation risks. The incident lead authorises release; name a deputy and a rapid escalation channel if an approver is unavailable. Agree a review deadline appropriate to the risk, rather than waiting for a perfect account while people need safety instructions. Keep version numbers, approver names and release times for every channel. Legal review supports accuracy and obligations; it does not replace immediate safety action or make this guide legal advice.
4. Issue a holding statement that can be updated
Use placeholders until each detail has been checked. A holding statement is a first verified position, not a conclusion:
“We are aware of [verified description of the incident] affecting [verified group or location]. Our immediate priority is [specific safety or support action]. We have [confirmed action taken] and are checking [material unknown]. People who may be affected can [practical contact or instruction]. We will provide our next update at [time, time zone and channel], or sooner if urgent information is confirmed.”
If there is not enough evidence to confirm the event, say that the report is being assessed and identify the next check-in. Remove any bracketed item that cannot be verified. Do not speculate, imply an investigation is complete, promise a fixed recovery time without operational confirmation or offer blanket assurances of safety. An expression of concern can be humane without inventing a cause or legal conclusion.
5. Coordinate media questions without outrunning the facts
Give one media contact the current approved statement, a timestamp and the next-update time. Log each reporter's question and deadline; route factual questions to the ledger owner and send the same corrected information to all affected recipients. Brief the spokesperson on what is confirmed, what cannot yet be answered, the practical action for affected people and the route for follow-up. If a briefing is warranted, define the purpose and audience before inviting press; see crisis communication support, media outreach and press conference management for event-specific work. Journalist attendance, reporting and tone are never guaranteed.
6. Match social and direct channels to the same source
Put a dated canonical update on an owned channel, then link to it from relevant social profiles, customer messages and employee guidance. Assign a monitor to capture questions and misinformation, a responder to triage urgent individual needs, and an approver for any new factual claim. Avoid posting personal details or repeating a rumour to refute it; correct material inaccuracies with the verified fact and a visible timestamp. Moderate threats, abuse and exposed private data consistently under the channel policy, but do not erase ordinary criticism. Supply support contacts for people who cannot use social media.
7. Keep legal, safety and affected-person work connected
Safety teams direct protective action; support teams communicate with customers or employees who need individual help; security and investigators preserve evidence; legal advisers identify applicable reporting and disclosure duties. Communications should ask each owner what can be stated publicly and when, without allowing a press cycle to set the pace of treatment or containment. Do not disclose identities, medical information, investigation material or confidential records without the proper authority. For a regulated, criminal or cross-border matter, obtain qualified advice on the relevant jurisdiction and deadlines; this page is a communications framework, not legal or emergency advice.
8. Publish recovery updates and close the loop
At every promised check-in, publish the time, what changed, what remains open, the action being taken, who is responsible and the next update window—even if the investigation has not reached a conclusion. When a prior statement is wrong, label the correction and explain the verified change. After immediate risk has passed, explain remediation and how affected people can seek support; report only measures and outcomes that can be substantiated. Archive the update trail, review response times and gaps with the incident team, and revise templates, contact lists and approval backups for the next exercise. For approved releases, fact sheets and version control, see press materials and press kits.
Frequently asked questions
What should a company say before all the facts are known?
Say what is verified, what is still being checked, what immediate safety steps are underway, and when the next update is expected. Avoid guessing at causes, numbers or responsibility; if even the basic event cannot yet be confirmed, acknowledge the enquiry and give a realistic time for a further response.
Who should approve a crisis holding statement?
A named incident lead should obtain review from the relevant operations or safety owner, communications lead and legal adviser before publication. Set a deputy and an escalation route in advance so an unavailable approver does not leave an urgent safety message in limbo; the responsible team must still verify every factual claim.
Should a company delete critical social media comments during a crisis?
Do not delete criticism merely because it is negative. Apply a published moderation policy consistently to threats, private information and abusive or unlawful content, preserve relevant records, and move individual support or safety cases to an appropriate private channel without hiding the public update.
When should the company stop issuing crisis updates?
Continue updates until the immediate risk, affected-person support and outstanding public questions have a clear owner and a communicated next step. If an investigation remains open, state what is pending and where verified findings or corrections will be published rather than declaring the matter resolved prematurely.
Plan a response before an incident
Use this playbook as a rehearsal checklist: test contacts, escalation triggers, a sample ledger and a timed holding-statement approval. If you need help scoping a sensitive briefing or approved materials, contact the team with the situation and the immediate safety constraints. Any support is agreed in writing; no communications process can guarantee an incident outcome or media coverage.