Careers
Part of Crisis communications: what to keep and what to drop
Crisis communications questions: working answers for a growing organization
Crisis communications questions with working answers on activation thresholds, leadership, first statements, unknown facts, legal review, and update timing.
What to take away
- When do we activate? Use a defined threshold based on harm, disruption, legal exposure, or public confusion.
- Who leads? Name the incident lead and put a communication lead inside the response.
- What do we say first? State what is confirmed, the immediate action, the help route, and the next update time.
- How often do we update? Hourly for the first 4 hours, then at least twice daily, and immediately when material facts change.
- When is the crisis over? When urgent risk and support have transferred to accountable normal operations.
Common crisis communications questions become easier when the company has agreed roles, evidence standards, and response tiers. The table gives working answers for a growing organization. Adjust them to the event, affected people, operating capacity, jurisdiction, and qualified advice.
Answer the first ten questions
| Question | Working answer |
|---|---|
| When do we activate? | When harm, disruption, legal exposure, or public confusion crosses a defined threshold. Example: OSHA requires reporting a fatality within 8 hours and a hospitalization within 24 hours, so those events trigger the top tier. |
| Who leads? | The named incident lead, with a communication lead inside the response. |
| What do we say first? | What is confirmed, the immediate action, the response, help route, and next update. Example: "We have confirmed a payment outage affecting [region]. We have paused [activity]. Customers should [action]. Next update at 4 p.m. ET." |
| Can we say we do not know? | Yes, if the unknown is genuine and the team says how it is being checked. |
| Should legal approve everything? | Use scoped review and emergency authority established before the event. |
| Do we need one spokesperson? | Use a small prepared group with clear subject authority and one fact brief. |
| How often do we update? | Hourly for the first 4 hours, then at least twice daily, and immediately when material facts change. |
| Should we answer rumors? | Correct consequential falsehoods without repeating unnecessary detail. |
| Can we remove an old post? | Preserve it and make the correction visible unless safety or law requires removal. |
| When is the crisis over? | When urgent risk and support have transferred to accountable normal operations. |
FEMA's course material on principles of effective emergency communication emphasizes clarity, specificity, consistency, credible messengers, audience understanding, and action. It is emergency-management training, not a universal corporate rulebook, but it supplies a useful test for an urgent message.
The first response should serve the person facing a decision. State whether a location is open, a product should be used, a payment is due, an account must be protected, or employees should report elsewhere. If no action is needed, say that. Give a specific time for the next update and use a time zone.
The FTC's data breach response guide for business advises organizations to assemble a multidisciplinary team, verify the affected information and people, create a plan for different audiences, avoid misleading statements, and provide protective steps.
Keep legal and communication roles distinct but connected. Counsel can identify mandatory notice, protected information, investigation risks, and claims that need support. Communicators can show where language is unclear, where people need immediate action, and whether the support channel can deliver what the statement promises.
After the event, preserve every published version, major question, approval, correction, service failure, and outcome. Decide what the team will change, who owns it, when it will be tested, and what proof will close the action. That converts a difficult episode into a stronger response system.
Check evidence and data rules
The GAO evaluation design guide connects evaluation questions with evidence needs and design choices. Use it to check evidence, not to set the crisis tier.
The W3C Privacy Principles statement gives web-system designers shared privacy concepts and warns against shifting privacy work to individuals. Use it for data handling, then review the governing law.
Common questions
Should a company use a holding statement?
Yes, when it contains verified facts, an immediate action or help route, and a real next-update time. A vague expression of concern is not enough.
Can employees post about the crisis?
Give employees a safe internal reporting route and clear public guidance. Do not ask them to speculate, conceal facts, or pose as independent supporters.
Should every criticism receive a reply?
No. Prioritize safety, service, material error, impersonation, and questions that affect decisions. Monitor the rest for patterns.
