Why crisis preparation is always deferred
Crisis communications planning sits in a specific category of business preparation alongside disaster recovery plans and succession planning: everyone agrees it is important, most organisations acknowledge they have not done it adequately, and the reason it keeps getting deferred is that the cost of not having it is invisible right up until the moment it is catastrophically not.
The irony is that the investment required to build a solid crisis communications framework is genuinely modest, a few focused days of work, involving the right people, producing the documentation and processes that will make the difference between a managed difficult moment and an unmanaged reputational crisis. The return on that investment, when it is eventually needed, is enormous. And it will eventually be needed, at some scale, by virtually every organisation that operates in public.
What a crisis communications plan needs to contain
A working crisis communications plan is not a communications strategy document. It is an operational guide that enables fast, coordinated, coherent response under conditions where speed is critical and normal decision-making processes are too slow. It should answer the following questions before a crisis occurs, not while one is unfolding.
Who is on the crisis communications team? Named individuals, not roles, not departments, with their contact details, their specific responsibilities in a crisis scenario, and their decision-making authority. Who is the spokesperson? Who approves communications before they go out? Who manages internal communications? Who handles social media monitoring and response? These decisions made under pressure produce worse outcomes than the same decisions made in advance.
What are our most likely crisis scenarios? Not an exhaustive list of every possible problem, but the three to five scenarios that are most plausible given the business's specific operating context, data breach, product recall, regulatory action, executive misconduct allegation, social media pile-on. For each scenario, the plan should contain a response framework: the key messages the business would need to communicate, the audiences who would need to be reached, and the sequence of actions required.
Who are our key stakeholder audiences? Customers, employees, investors, regulators, media, and for each audience, what their primary concerns are likely to be in a crisis and what communication channel reaches them most effectively. Crisis communications that addresses the right audience with the right message via the wrong channel is ineffective. The mapping does not need to be elaborate, but it needs to exist.
What is our holding statement framework? Before full information is available, the business needs to be able to say something that acknowledges the situation, demonstrates that it is taking it seriously, and does not commit to facts that may later be incorrect. A template holding statement, "We are aware of [situation] and are working urgently to understand the full facts. We will provide further information as soon as we are able to", is better than silence, regardless of how little it says.
The crisis communications plan that exists before the crisis gives the business options. The plan that gets written during the crisis only has one option: reactive damage control.
Speed is the most important variable
In crisis communications, the first few hours of response shape the narrative that will persist regardless of what follows. An organisation that responds quickly, clearly, and with evident responsibility tends to retain more control of the story than one that goes quiet, hedges, or appears to be managing information rather than communicating. Speed requires preparation: the ability to produce an initial response without convening a committee, getting a dozen approvals, and drafting from scratch.
The first hours matter most on social media, where conversations accelerate rapidly and interpretations fill in the absence of official communication. An organisation's silence in the first two to three hours of a public crisis is consistently interpreted negatively, as denial, concealment, or indifference, regardless of the actual reason for the silence. The holding statement framework exists specifically to enable fast, responsible initial response that acknowledges the situation without over-committing on facts not yet established.
Internal communications is half the battle
External crisis communications is the visible part. Internal crisis communications, the communication with employees during a difficult period, is equally important and far more frequently neglected. Employees who hear about a company crisis through social media or news coverage, rather than from their employer, feel the trust damage acutely. Teams that are well-informed during a crisis are more cohesive, more likely to communicate consistently with external parties, and more able to support the organisation's response.
The crisis communications plan should include an explicit internal communications component: who communicates to employees, through what channel, at what cadence, and with what level of information. The tone for internal communications is different from the tone for public communications, more direct, more transparent about uncertainty, more explicitly supportive. Both require planning.
The recovery phase
Crisis communications does not end when the acute situation is resolved. The recovery phase, the period of rebuilding trust and demonstrating that the issues identified have been addressed, is often as important as the initial response. A company that handled its initial crisis response well but then failed to follow through on the commitments made will suffer reputational damage that the good initial response will not protect against. The plan should include a recovery phase component: what commitments were made, how will they be reported on, and what ongoing communications will demonstrate the organisation's follow-through.
Test the plan before you need it
A crisis communications plan that has never been tested is less reliable than it looks. A tabletop exercise, a scenario-based discussion where the crisis team works through a simulated crisis using the plan, reveals gaps in the documentation, ambiguities in the decision-making authority structure, and communication breakdowns that only emerge when people are trying to use the plan rather than reading it. It is the most valuable thirty minutes a well-prepared crisis team can spend, and it is worth doing annually.