Crisis Communication Framework (Organizational)

A protocol for communicating during organizational crises — data breaches, product failures, PR disasters, financial problems, or executive misconduct. The protocol follows three phases: Phase 1 — First Response (within 1-4 hours): (a) Acknowledge: 'We are aware of [situation] and are actively investigating.' (b) Express concern: 'Our priority is [affected stakeholders — customers, employees, public safety].' (c) Commit to transparency: 'We will share more information as we have it, within [timeframe].' (d) Designate a single spokesperson. All other employees refer inquiries to this person. Phase 2 — Full Response (within 24-48 hours): (a) State what happened factually. Don't speculate. (b) State what you're doing about it — specific actions, not vague promises. (c) Apologize appropriately (if at fault) or express empathy (if not). (d) Explain what will change to prevent recurrence. Phase 3 — Recovery: (a) Follow through on every commitment made during the crisis. (b) Provide updates at promised intervals even if there's nothing new to report. (c) After resolution, publish a post-mortem. Key rules: Never lie. Never say 'no comment.' Never blame the victim. Speed matters more than perfection — get ahead of the narrative.

When to use it

Any organizational event that attracts negative public, media, or stakeholder attention. Data breaches, product recalls, workplace incidents, financial misconduct, executive behavior, environmental incidents. Also adaptable for personal reputation crises (social media pile-ons, professional misconduct accusations).

How it can help

Provides a battle-tested framework for the highest-stakes communication most organizations will ever face. In the social media era, the window for crisis response has shrunk from days to hours — organizations without a protocol scramble and make catastrophic errors (denial, blame-shifting, contradictory statements). The three-phase structure matches the information lifecycle of a crisis: you know very little at first (Phase 1), more within a day (Phase 2), and enough to rebuild trust later (Phase 3). The 'never lie, never say no comment' rules alone prevent most crisis communication disasters.