Crises are inevitable, in life as in business. At some point, every organization will face a moment that tests its leadership, judgment and credibility. Why do some emerge with trust intact while others spend years trying to rebuild what they lost?
The answer often lies in what leadership does in the moments that follow. Disciplined leaders respond rather than react. A reaction is driven by pressure and emotion. A response is deliberate, informed and directed toward containing harm, communicating clearly and reaching the most responsible resolution as quickly as circumstances allow.
Stakeholders do not expect an organization to be immune from difficulty, nor do they expect leaders to have every answer immediately. They do expect them to acknowledge what is happening, recognize what is at stake and provide clear, verified information. The first 24 hours are critical because silence, defensiveness or conflicting accounts can turn a difficult situation into a lasting crisis of trust.
The following framework gives leadership teams a practical way to navigate those critical first hours.
WHAT COUNTS AS A CRISIS?
A crisis is any event that threatens people, stakeholder trust, operations or an organization’s license to operate, particularly when it may lead to public, legal, regulatory or political scrutiny. Common examples include:
- Data breaches and cybersecurity incidents
- Workplace injuries, safety failures or environmental incidents
- Executive misconduct or allegations against leadership
- Lawsuits, regulatory actions or investigations
- Product failures, recalls or service outages
- Viral social media criticism or damaging news coverage
Not every difficult situation is a crisis. A useful test is whether the issue affects people who rely on the organization, could materially disrupt operations, may attract outside scrutiny or requires decisions from senior leadership. If one or more of those conditions apply, the situation should be escalated for immediate assessment.
THE FIRST HOUR: VERIFY THE FACTS AND ASSEMBLE THE TEAM
Activate a small, defined crisis team. It should include an executive decision-maker, legal counsel, communications counsel and the operational leader closest to the issue. Depending on the circumstances, it may also require representatives from human resources, cybersecurity, risk, compliance or security.
Keep the core decision-making group small, but make its authority clear. Establish who is leading the response, who can approve communications and how urgent decisions will be made.
Document what is known, what remains unverified and what the organization is doing next. Separate confirmed facts from assumptions and record the source of each material fact. This three-part summary becomes the foundation for early communications.
Create a written timeline and decision log. Crises move quickly, and decisions that appear obvious in the moment may be questioned later by employees, regulators, reporters, board members or litigators.
Address the underlying problem. Communication cannot compensate for an operational failure that is still causing harm. Safety, containment, service restoration and the needs of affected people must come first.
HOURS ONE THROUGH SIX: PREPARE AND ISSUE A HOLDING STATEMENT
An information vacuum creates room for speculation, misinformation and competing narratives. When a situation is already public or stakeholders need immediate direction, a holding statement establishes the organization as a responsible source of information while facts continue to be verified.
A strong holding statement:
- Acknowledges the situation plainly
- Recognizes the people affected
- Distinguishes verified facts from matters still under investigation
- Describes the immediate actions being taken
- Explains when or under what circumstances another update will be provided
- Avoids speculation, blame and premature legal conclusions
Example structure: “We are aware of [situation]. Our immediate priority is [the safety or needs of those affected]. We have taken [specific action] and are working to verify the facts. We will provide additional information as soon as it is confirmed.”
Have legal counsel review the statement, but establish an expedited approval process before a crisis occurs. Legal and communications counsel serve different but complementary roles. The strongest response protects the organization’s legal position without producing language so guarded that it undermines credibility.
Do not promise an update at a specific time unless the organization is prepared to meet that commitment.
HOURS SIX THROUGH TWENTY-FOUR: COMMUNICATE WITH EVERY AUDIENCE
A crisis has more than one audience. Each requires a message tailored to its needs, but every communication must come from the same verified set of facts.
People directly affected need timely, compassionate communication about what happened, how they are affected and what support is available. Whenever possible, they should not learn consequential information through the media.
Employees should hear directly from leadership as early as legally and operationally possible. They need clear guidance on what is known, how the organization is responding and where to direct outside questions.
Customers, clients or families need to understand how they are affected and what they should do next.
Regulators and public authorities may have notification requirements with strict deadlines.
Board members and investors expect prompt, candid briefings about the facts, risks and response.
Media need a designated spokesperson, an accurate statement and a reliable process for receiving updates.
Partners and vendors may need to adjust their own operations or communications.
Consistency does not mean sending identical language to everyone. It means tailoring the message without changing the underlying facts.
At the same time, monitor news coverage, social media, employee concerns and direct stakeholder inquiries. Correct material inaccuracies promptly and calmly. Monitoring is not simply about tracking sentiment. It helps leadership understand which facts are unclear and where misinformation may create additional risk.
CHOOSING AND PREPARING THE SPOKESPERSON
The right spokesperson depends on the severity, stage and nature of the crisis.
A CEO or senior executive may be necessary when the situation involves loss of life, leadership accountability or significant organizational consequences. A technical or operational leader may be more credible when the immediate questions concern safety, cybersecurity, product performance or service restoration.
The spokesperson should have sufficient authority, remain composed under pressure and understand both what can be said and what has not yet been verified.
Prepare the spokesperson with:
- Three clear messages grounded in verified facts
- Anticipated difficult questions and direct, honest answers
- Clear guidance on legal, privacy and investigative boundaries
- Language for acknowledging what is not yet known
- Practice responding to the question before returning to the central message
- A reminder that tone, body language and empathy matter as much as the words themselves
An organization can express genuine concern without speculating about fault or making unsupported legal conclusions. The language should be developed carefully with communications and legal counsel.
WHAT TO AVOID
- Minimizing the situation. If people have been affected, acknowledge it plainly.
- Speculating. Early assumptions can quickly become damaging inaccuracies.
- Blaming others before the facts are established. Even when a third party may be responsible, immediate deflection often appears evasive.
- Overpromising. Do not announce outcomes, timelines or corrective actions the organization may not be able to deliver.
- Going dark after the first statement. Missed updates create a vacuum that others will fill.
- Arguing on social media. Correct consequential factual errors calmly and direct people to verified updates.
- Allowing multiple unauthorized voices to speak for the organization.
- Over-lawyering the message. A technically accurate statement can still damage trust if it sounds evasive, indifferent or disconnected from the people affected.
AFTER THE FIRST DAY: RECOVERY AND ACCOUNTABILITY
The crisis is not over when the immediate news cycle moves on. Rebuilding trust requires visible follow-through.
- Continue providing verified updates as material information becomes available
- Correct inaccurate information when it could affect people or the organization’s response
- Follow up directly with the people affected
- Explain what the organization learned and what it is changing
- Keep public commitments and report on progress when appropriate
- Review the decision log, approval process and response timeline
- Identify where information, authority or execution broke down
- Update the crisis plan based on what the organization learned
Organizations that emerge from a crisis with their credibility intact demonstrate accountability through their actions, not only through their statements.
PREPARE BEFORE YOU NEED IT
The strongest crisis responses begin before anything goes wrong. A basic crisis preparedness program includes:
- A written crisis plan with escalation thresholds, roles, contacts and approval paths
- A clear process for verifying facts and maintaining a single source of truth
- Pre-drafted holding statements for the organization’s most likely scenarios
- Media training for executives and likely spokespeople
- A tested contact list for employees, board members, regulators and key partners
- A monitoring process for news, social media and stakeholder concerns
- At least one tabletop exercise each year
- A strong Corporate Social Responsibility (CSR) program
No plan eliminates uncertainty. Preparation gives leadership a disciplined way to make decisions while information is incomplete, pressure is escalating and every word may carry consequences.
BOTTOM LINE: THE 25TH HOUR AND BEYOND
Crises reveal the character of an organization and the quality of its leadership. In the first 24 hours, every decision and message tells stakeholders whether the values expressed in ordinary times will hold under pressure. The 25th hour begins the longer work of earning trust through sustained action.
Reputation is built over years and tested in a matter of hours. The storm of headlines, social media posts and public scrutiny eventually subsides. Long after the crisis leaves the news cycle, how the organization met the moment will continue to define its reputation.