Reputation management and crisis communications: what to build before you need it
Reputation is built slowly and lost in an afternoon. The controllable part is preparation: a mapped risk register, pre-agreed decision rights, drafted holding statements, rehearsed spokespeople, and a monitoring system that gives you the first hour. In a live crisis, speed of acknowledgement matters more than completeness of answer.
What is crisis communications?
Crisis communications is the discipline of protecting trust during an event that threatens a company's licence to operate — through fast, accurate acknowledgement, coordinated stakeholder communication, and visible corrective action. It is distinct from issues management, which handles slow-burning reputational risks before they escalate.
Map the risks you can actually name
Every business has between six and twelve credible crisis scenarios, and leadership can usually list them in a room in ninety minutes. Safety incident. Product failure or recall. Data breach. Regulatory action. Financial restatement. Leadership misconduct. Labour dispute. Supply chain exposure. Environmental incident. Viral customer grievance. Litigation. Activist or political attention.
For each one, three things need to exist on paper before the event: who leads the response, who is legally required to be informed and in what timeframe, and what the first public sentence would be. That last item is where most preparation collapses, because it forces the organisation to decide in advance what it is prepared to say when it does not yet have facts.
The register should be reviewed twice a year and after any near miss. Near misses are the cheapest information a company will ever get about its own vulnerabilities.
Decision rights before the noise
In a live event the binding constraint is rarely message quality. It is authority: who can approve a public statement at 11pm on a Saturday without waiting for a committee.
A workable structure has a small core team — business head, communications lead, legal, operations lead for the affected area, HR — with named alternates, a single channel for coordination, and an explicit rule about what can be said without full sign-off. Everything else, including the wider leadership group, receives updates rather than participating in drafting.
The rehearsal matters as much as the structure. Two simulations a year, run against a realistic scenario with real time pressure, expose the gaps that documents hide: no out-of-hours contact list, no site-level spokesperson, no plan for customer service scripts, no idea who monitors social channels at night.
The first sixty minutes
The first hour sets the frame for everything after. The sequence that works is consistent across sectors.
The single most common error is waiting for completeness. Acknowledgement without answers is legitimate and expected; absence is not. The second most common error is over-committing early — promises about cause, blame or timelines that later have to be retracted, which converts an operational problem into a credibility problem.
Media relations as a standing capability
Companies that only contact journalists during bad news get treated accordingly. A standing media capability — regular, useful, non-promotional contact with the reporters who cover your sector — changes the dynamic materially: your call is answered, your context is included, and a correction is possible.
That capability is built from a small number of habits. Know which five to ten journalists actually shape coverage of your category. Be useful on stories that are not about you. Have a spokesperson who is available and can speak in plain language without approval theatre. Never mislead, including by omission, because the relationship is worth more than any single story.
Rebuilding after the event
Trust returns through demonstrated change, on a visible timeline. The pattern that works: a clear account of what happened and why, specific corrective actions with dates and owners, independent verification where credibility is thin, and then follow-up communication when the commitments are met — especially the unglamorous ones.
What does not work is volume. A campaign of positive content over an unresolved issue reads as evasion and prolongs the story. Fix, verify, report, and let time do the rest.
Unprepared response vs. prepared response
Frequently asked questions
How quickly should a company respond publicly to a crisis?
Acknowledge within the first hour where the event is already public, even if you can only confirm awareness and commit to an update time. Full explanations can follow; the acknowledgement window closes quickly and cannot be reopened.
Should the CEO always be the spokesperson?
For events involving loss of life, serious harm, or breaches of trust, yes — anything less reads as avoidance. For technical or localised incidents, a credible operational or site leader is often better, with the CEO held for escalation.
What is the difference between issues management and crisis management?
Issues management deals with slow-moving risks — regulatory shifts, activist attention, chronic complaints — where you have time to shape the outcome. Crisis management deals with sudden events where the timeline is dictated by others. Good issues management prevents most crises.
How often should crisis simulations be run?
Twice a year for the core team, plus onboarding for anyone new to the team. Simulations should rotate scenario types, and at least one should be run out of hours to test the realistic conditions of a crisis.
A short diagnostic conversation is usually enough to tell you whether there is a real opportunity here — and what it would take.