What it is

A staged set of communications templates for managing an active crisis. Unlike preparation tools — which help you build holding statements and stakeholder maps before anything happens — this playbook is for use when the crisis is already under way.

It covers six stages: from the first 60-minute internal alignment through to your final resolution statement. At each stage you get the template, the sign-off requirement, and the most important thing to avoid.

The playbook works for any crisis type: operational failure, reputational attack, leadership issue, workforce emergency, or third-party crisis. The first step is classifying your crisis correctly — because the staging, tone, and stakeholder order differ significantly depending on what you’re dealing with.

This is not a preparation tool. If you haven’t been through a crisis yet, start with the Crisis Content Pre-Approval Pack and Stakeholder Mapping Matrix first. When the crisis hits, come back here.

When to use it

Use this template when:

A crisis has been confirmed and you need to communicate before all facts are known
The situation is moving faster than your normal approvals process can handle
Multiple audiences need different versions of the same message
You need to coordinate internal and external communications simultaneously
Someone is asking “what do we say?” and there is no pre-approved pack in place

Do not use this template if:

The situation is resolved and you have all the facts — write a standard communication instead
You have a detailed pre-approved pack that already covers this scenario — use that and adapt
This is a cybersecurity or data breach incident with GDPR notification obligations — use the Security Incident Communications Playbook instead

Inputs needed

Before starting, confirm:

Crisis type: What category is this? (See classification matrix below)
Current status: Is the situation ongoing, contained, or unresolved?
Known facts: What can you state with certainty right now?
Known unknowns: What are you still investigating?
Affected parties: Who is directly impacted — customers, employees, partners, public?
Legal position: What can and cannot be said? Is legal counsel available?
Sign-off chain: Who must approve before any external communication goes out?
Spokesperson: Who is authorised to speak publicly?

Step 0 — Crisis classification

Before drafting anything, classify the crisis. This determines your stakeholder order, tone, and staging.

Crisis type	Primary audience	Speed requirement	Legal sensitivity	Reputational risk
Operational failure (service down, product recall, delivery failure)	Customers, partners	High — hours	Low–Medium	Medium
Reputational crisis (media investigation, viral allegation, public attack)	Media, public, employees	Very high — minutes	High	Very high
Leadership crisis (executive departure, misconduct allegation, death)	Employees, board, investors	High — hours	High	High
Workforce emergency (redundancies, strike, safety incident)	Employees first, then public	High — hours	High	High
Third-party/supply chain failure (supplier collapse, partner misconduct)	Customers, partners	Medium — 24hrs	Medium	Medium–High
Financial/regulatory (enforcement action, profit warning, investigation)	Investors, regulators, board	Medium — 24hrs	Very high	High

Your classification: [Select from above]

Key implication: [One sentence on what this means for your approach — e.g. “Reputational crises require public holding statement before internal is complete; operational failures allow internal first.”]

Stage 1 — Internal alignment (Minutes 0–60)

Purpose: Get your internal team on the same page before anyone says anything externally. The biggest early mistake in crisis management is employees learning about the crisis from a journalist, a customer, or social media before they hear it from you. This stage prevents that.

Who this goes to: Crisis response team + relevant senior leadership. Not all staff yet.

Approval required: Crisis lead / Head of Communications (no external approval needed at this stage)

INTERNAL — NOT FOR EXTERNAL DISTRIBUTION

Subject: [CRISIS TYPE] — Situation update [Date, Time]

We are currently managing [brief description of situation]. This is an internal briefing only. Please do not share externally.

What we know: [State only confirmed facts. One paragraph maximum. If facts are thin, say so — “At [time] we became aware of [X]. We are still establishing the facts.”]

What we don’t yet know: [Be explicit. E.g. “We are still determining the full scope of impact / whether X is involved / how many people are affected.”]

Actions already taken:

[Action 1 — be specific: “Press enquiries directed to [Name] at [contact]”]
[Action 2 — e.g. “Legal counsel notified at [time]”]
[Action 3 — e.g. “Monitoring team tracking media and social coverage”]

What NOT to do:

Do not speak to media, customers, or partners about this situation
Do not post anything on personal or professional social media
Do not reassure anyone — customers, partners, or colleagues — about outcomes we cannot confirm
Direct all enquiries (media, customer, partner) to [Name, contact]

Who is leading the response: [Name, role] — contact [method]

Next internal update: [Time] — or sooner if situation changes significantly.

Stage 2 — First public holding statement (Hours 1–4)

Purpose: Acknowledge the situation publicly before it is defined for you by media, social, or speculation. A holding statement says: “we know, we’re on it, we’ll tell you more.” It doesn’t solve the crisis — it buys you time to respond properly.

Who this goes to: Media (if enquiries received), your website/newsroom, social channels if monitoring significant public activity.

Approval required: Head of Communications + CEO or authorised deputy. Legal sign-off required if legal sensitivity is High or Very High (see classification).

Note on timing: In a reputational crisis, this must go out within 60–90 minutes of public awareness, not 4 hours. In operational or third-party crises, you usually have more time. Use your classification.

[ORGANISATION NAME] — Statement — [Date]

We are aware of [brief, neutral description of the situation].

We are [taking immediate action / investigating / working to resolve this] and our priority is [safety of those affected / restoring service / establishing the facts / supporting those involved].

We will provide a further update [today / within [X] hours / as soon as we have more information].

[If relevant: Anyone affected should [contact us at / visit / call].]

[Media enquiries: [Name], [email/phone]]

Adapting this statement:

✓ You can modify: the specific situation description, contact details, timeline language, and actions being taken.

❌ Do not modify: tone of seriousness, commitment to update, absence of speculation, absence of blame.

What not to include at this stage:

Numbers (affected people, financial impact) unless confirmed
Cause or responsibility attribution
“Everything is fine” — it isn’t confirmed yet
Promises about timeline you may not be able to keep

Stage 3 — Stakeholder cascade (Hours 2–8)

Purpose: Different stakeholders need different versions of the same message. Employees need more context than the press release. Your board needs more than your customers. Partners need to know what it means for them specifically. This stage ensures everyone hears from you, not from someone else.

Order matters. Employees should always hear from you before or simultaneously with public communications. Board and investors before wider media coverage if at all possible. Never let a stakeholder learn about a crisis affecting them from a third party.

Approval required: Each communication requires appropriate sign-off. Internal communications: CEO or senior leadership. Customer communications: Head of Communications + Legal if legally sensitive. Board/investor: CEO + Legal.

3a — All-staff communication

Subject: Update from [CEO/name] — [Brief situation description]

I want to give you a direct update on [situation] and what we’re doing about it.

What has happened: [More detail than the public statement — employees can handle context. Include what happened, when it was identified, and what the immediate impact has been.]

What we are doing: [Concrete actions — specific enough to be reassuring. Not “everything possible” — what specifically.]

What this means for you: [What employees should expect. Will there be more enquiries from customers? Will working patterns be affected? Will there be media interest? Be direct about what the next 24–48 hours looks like.]

If you’re asked: [One sentence they can say if a customer, partner, or journalist asks. E.g.: “We’re aware of the situation and working to resolve it — please contact [name] for more information.”] That’s all. Please direct all media enquiries directly to [Name].

I will update you again [time/when]. If you have questions in the meantime, [contact method].

[Name] [Title]

3b — Customer/user communication (if directly affected)

Subject: An update from [Organisation] — [Brief, factual description]

Dear [Customer/[FIRST NAME]],

I’m writing to let you know about [situation] and what it means for you.

What happened: [Plain language. No jargon. What occurred, when, and whether they were affected directly.]

What we’re doing:

[Action 1 — specific]
[Action 2 — specific]
[Action 3 — specific]

What you need to do (if anything): [If they need to take action, make it specific and numbered. If they don’t, say so clearly: “You don’t need to do anything right now.”]

What to expect next: [Timeline for resolution or next update. Only commit to what you can deliver.]

If you have questions, please [contact method — ensure this is genuinely staffed].

[Name] [Title]

3c — Board/investor communication

This should be a direct call or message — not a formal press release format. Directness is expected here.

[Name/board],

I want to brief you directly on [situation] before wider coverage develops.

The facts as we know them: [Concise. Board members do not need the empathetic holding statement language — they need facts, risk assessment, and your plan.]

Current risk assessment:

Reputational risk: [High / Medium / Low — with one line of reasoning]
Operational risk: [Impact on business continuity]
Legal/regulatory risk: [Any exposure]
Financial risk: [If applicable]

Our response: [What we are doing and who is leading it.]

What I need from you: [If anything — approval of a specific statement, awareness only, or specific action.]

I will update you at [time/interval]. Please call me directly on [number] if needed.

[Name]

3d — Partner/supplier communication (if affected)

Subject: [Organisation] — Situation update for partners — [Date]

Dear [Name/Partners],

I’m writing to update you on [situation] that may affect our work together.

[Brief factual description — slightly more than the public statement, less than the internal brief.]

What this means for our partnership: [Direct: will there be delays, changes to contact, any action they need to take?]

What we’re doing: [Three bullets, specific.]

We will keep you updated as the situation develops. Your [account manager / main contact] will be in touch [timeframe].

[Name]

Stage 4 — First full response (Hours 8–24)

Purpose: Once you have established facts — even if not all facts — move from a holding statement to a fuller response. This is where you start to show you understand what happened and are taking it seriously. A holding statement that runs for more than 24 hours without development starts to look evasive.

Approval required: CEO + Head of Communications + Legal. This is a substantive statement — every word matters.

[ORGANISATION NAME] — Full statement — [Date]

[Headline: one sentence that names what happened without spin]

On [date], [organisation] experienced/became aware of [factual description of what happened].

What happened: [Factual account of the situation — what occurred, when it was identified, and who has been affected. Use plain language. Avoid passive voice where possible. This section should be 2–3 sentences maximum.]

What we have done:

[Action 1 — specific and verifiable]
[Action 2 — specific and verifiable]
[Action 3 — specific and verifiable]
[If applicable: “We have notified [relevant authority]”]

What we are doing: [What is ongoing — investigation, remediation, support. Be specific about timelines where you can commit to them.]

What we are doing to prevent recurrence: [Even if the investigation is not complete, you can commit to the process: “We are conducting a full review and will publish our findings by [date].” Avoid specific promises about outcomes if the investigation is incomplete.]

[If there are affected individuals:] We are in direct contact with those affected and are providing [support/remedy/refund]. Anyone who has not heard from us should contact [contact method].

[Spokesperson quote if applicable:] “[Quote from named leader — must be genuinely approved by that person. Should acknowledge impact, not minimise. Should be specific about action, not generic about commitment.]” — [Name, Title]

We will provide a further update [when].

[Media enquiries: [Name], [contact]]

Stage 5 — Ongoing updates cadence

Purpose: Silence is damaging in a crisis. If you have nothing new to say, say that explicitly and give a timeline for when you will. This stage defines your update rhythm for as long as the crisis is active.

Update frequency guidance:

Severity	Update frequency	Channel
High (major public impact, ongoing)	Every 4–6 hours	Website, social, email to affected
Medium (contained but unresolved)	Every 12–24 hours	Website, email to affected
Low (resolved operationally, monitoring reputationally)	Every 24–48 hours	Website only

Template for a “no news” update:

We are continuing to [investigate / resolve / monitor] [situation]. We do not have significant new information to share at this time. Our next update will be at [time/date]. If you have a specific query, please contact [contact].

Template for a “partial update” (facts emerging but not resolved):

Update — [Date, Time]

Since our last update, we can now confirm:

[New confirmed fact 1]

[New confirmed fact 2]

We are still establishing:

[Ongoing unknown 1]

We expect to have more information by [time/date]. Our response team remains [active / in contact with affected parties / working with [external body]].

What to avoid in updates:

Phrases like “there’s nothing new to report” without a next update time — this signals you’ve stopped managing the situation
Changing your account of what happened without explicitly acknowledging the change
Updating only one channel (e.g. press but not social) — inconsistency creates new stories

Stage 6 — Resolution statement

Purpose: The final communication that closes the crisis chapter and restores confidence. This is your most carefully crafted piece — it needs to be honest about what happened, credible about what you’re changing, and forward-looking without being dismissive of the impact.

When to use this: Only when the situation is genuinely resolved — not to close it down prematurely. An early resolution statement followed by new developments is significantly worse than a longer crisis.

Approval required: CEO + Legal + Head of Communications. External relations or investor relations if publicly listed.

[ORGANISATION NAME] — Full account of [situation]: what happened, what we did, what we’re changing

Overview

On [date], [Organisation] experienced [brief description]. The situation has now been fully resolved. This statement provides our complete account.

The timeline

Date/Time	What happened
[Date]	Situation first identified
[Date]	Internal response activated
[Date]	First public statement issued
[Date]	[Key action taken]
[Date]	Situation resolved

What happened — in full

[3–5 sentences. Factual, plain language, cleared by Legal. Include enough detail to be credible but not so much as to invite new lines of questioning. No passive voice where you can avoid it. No deflection to external factors unless factually necessary and framed carefully.]

Impact

[Who was affected and how — be specific]
[Duration of impact]
[Any ongoing effects]

What we got right

[One or two sentences — not self-congratulatory, but honest. E.g. “We issued our first statement within two hours and kept communications updated throughout.” If you genuinely got nothing right in your response, omit this section.]

What we should have done better

[This is optional but powerful. If there were genuine response failures, acknowledging them restores more credibility than pretending the response was perfect. Be specific — “We should have communicated directly with affected customers 12 hours earlier.”]

What we are changing

[Specific, named, time-bound commitments. Not “we will do better.” E.g.:]

[Specific change 1 — e.g. “We are implementing [X] by [date]”]
[Specific change 2 — e.g. “We have engaged [type of firm] to conduct an independent review, results by [date]”]
[Specific change 3 — e.g. “We are updating our [policy/process/training] for all staff by [date]”]

Our commitment going forward

[One paragraph. Specific. Owned by a named person. No platitudes.]

[Name, Title] [Date]

AI prompt

Base prompt

I need to draft communications for an active crisis. Please help me create staged messages for different audiences.

Crisis details:
- Crisis type: [Operational / Reputational / Leadership / Workforce / Third-party / Financial]
- What has happened: [Describe the situation]
- When identified: [Date/time]
- Who is affected: [Customers / employees / partners / public / specific group]
- Current status: [Ongoing / contained / evolving / partially resolved]
- Known facts: [What we can confirm]
- Known unknowns: [What we are still establishing]
- Legal sensitivity: [High / Medium / Low — and any specific constraints]
- Approval chain: [Who must sign off]

Please draft:
1. An internal holding statement for the crisis response team (Stage 1)
2. A first public holding statement (Stage 2)
3. A direct communication to affected [customers/employees/partners] (Stage 3)

For each draft:
- State only confirmed facts
- Be explicit about what is not yet known
- Avoid speculation on cause, blame, or outcome
- Include specific actions taken (not vague reassurances)
- Flag any [REQUIRES LEGAL REVIEW] moments
- Keep the tone serious but not catastrophising

Prompt variations

Variation 1 — Operational failure (service outage, delivery disruption, product issue):

We have experienced [describe the operational failure] affecting [scope of customers/users]. We need to communicate in real time as we work to resolve it.

Known facts: [What we can confirm]
Affected scope: [How many / which customers]
Resolution timeline: [Our best estimate — or unknown]
Actions taken: [What we've done so far]

Draft communications for:
1. An internal team update (what happened, what's being done, what staff should say if asked)
2. A customer-facing holding statement (brief, honest, with contact information)
3. A social media acknowledgment (one post, 200 words max — acknowledges the issue, no false reassurance, points to more information)

Tone: Direct, honest, not defensive. Don't minimise the disruption to customers. Don't over-promise on resolution timing.

Variation 2 — Reputational crisis (media investigation, public allegation, viral content):

We are facing a reputational crisis: [describe the allegation, story, or content]. This is either already public or about to break.

What is true: [State what you can confirm is accurate]
What is disputed or uncertain: [What you cannot confirm or deny yet]
Our position: [How do you want to frame the organisation's response]
Legal constraints: [What can and cannot be said]

This requires speed. Please draft:
1. A 2-sentence holding statement for immediate media use
2. An internal communication for all staff (before the story breaks externally if possible)
3. A fuller statement for once we've had time to formulate a position (can be drafted now, to be adapted)

Tone: Serious, not dismissive. Acknowledge where acknowledgment is appropriate. Do not appear to be deflecting or managing perception — focus on facts and action.

Variation 3 — Leadership crisis (sudden departure, misconduct allegation, bereavement):

We are managing a leadership crisis: [describe the situation — executive departure / misconduct allegation / death in post].

The facts: [What has happened and what can be confirmed]
What cannot be said: [Confidentiality, legal, or HR constraints]
The business impact: [What changes operationally or structurally]

This requires careful handling. Draft:
1. An internal staff communication from the most senior available leader (acknowledges what happened, provides continuity reassurance, avoids speculation)
2. A public/press statement if media interest is expected (minimal, factual, warm where appropriate)
3. A communication to the board or investors if relevant (factual, risk-assessed, action-focused)

Note: If the situation involves misconduct allegations, draft without admitting or denying any specific claim until investigation is complete.

Variation 4 — Workforce emergency (redundancies, strike, safety incident):

We are managing a workforce crisis: [describe — planned redundancies, unexpected strike, workplace safety incident].

Affected employees: [How many, in which functions/locations]
Regulatory obligations: [Any statutory notification requirements]
Union involvement: [Yes/no — if yes, has communication with union representatives happened first?]
Timeline: [When does this become public / when must employees be told]

Draft:
1. Internal all-staff communication (honest, direct — employees will see through corporate language)
2. External statement if media interest is likely
3. FAQ for managers — the questions employees will ask and the honest answers

Employees-first rule: The internal communication must go out before any external communication. Do not draft them in the wrong order.

Variation 5 — Real-time update drafting (crisis in progress):

We are currently in an active crisis. We've already issued our initial holding statement [paste it here if available]. The situation has developed as follows:

What has changed since last update: [New facts, new developments]
What is still unresolved: [Ongoing unknowns]
Actions taken since last communication: [Specific steps]
Time of last external update: [When]

Please draft an update that:
- Acknowledges the time elapsed since last update
- States new confirmed facts clearly
- Is honest about what is still unresolved
- Gives a specific next update time
- Does not repeat the same generic reassurances from the last update — show forward movement

Flag where we are making claims we will be held to, and where we should qualify language.

Human review checklist

Before any external communication is sent:

Have you classified the crisis correctly — and does your staging reflect that classification?
Are all stated facts confirmed — not estimated, not assumed?
Have you been explicit about what you don’t yet know?
Has Legal reviewed if legal sensitivity is rated High or Very High?
Does the internal communication go out before or simultaneously with any public statement?
Is the sign-off chain for this specific stage completed — not assumed?
Is the contact point in the communication genuinely staffed and able to respond?
Have you avoided making any promises about outcome, timeline, or resolution you cannot keep?

Tone and content checks:

Does the statement avoid passive voice constructions that obscure responsibility? (“Mistakes were made” vs “We made a mistake”)
Does it avoid generic platitudes with no specific backing? (“We take this seriously” — fine only if followed by specific actions)
Is the tone appropriate for the crisis type — serious for reputational/safety, empathetic for workforce, factual for operational?
Would a journalist, employee, or affected customer reading this feel the organisation was being straight with them?
Does the resolution statement (Stage 6) only go out when the situation is genuinely resolved?

Process checks:

Is the update cadence agreed and being followed?
Has someone been assigned to monitor public/media response to each communication?
Do all channels carry consistent messaging — no version drift between press, social, and email?

Example output

Crisis type: Reputational — media investigation (allegations of supplier misconduct)

Classification: Reputational, Very High legal sensitivity, primary audience Media/Public, Very High speed requirement

Stage 1 — Internal alignment (excerpt)

INTERNAL — NOT FOR EXTERNAL DISTRIBUTION

Subject: Media enquiry — supplier allegations — situation update, 09:15

We have received enquiries from [publication] about alleged conduct by a supplier in our supply chain. We are treating this as a live media story requiring immediate response.

What we know: [Publication] has contacted our press office with specific questions about [general topic — no details here]. The story may publish today or tomorrow. We do not yet have full detail of their allegations.

What we don’t know: The full scope of the allegations, which suppliers are named, and whether we have been given opportunity to respond.

Actions taken: Legal counsel notified at 09:00. Press enquiries directed exclusively to [Name, contact]. Supply chain team asked to identify relevant supplier documentation. Monitoring team briefed.

What NOT to do: Do not respond to any enquiries, even to say “no comment.” Do not post or comment on social media. Do not contact the supplier directly until Legal advises. If approached by a journalist directly, say: “All media enquiries go to [Name] — I’ll make sure they get your details.” Then contact [Name] immediately.

Next update: 12:00 today.

Stage 2 — First public holding statement

[Organisation] — Statement

We are aware of enquiries regarding our supply chain and are taking them seriously. We have launched an immediate internal review and are working to establish the facts. We will respond fully once that review is complete.

Media enquiries: [Name], [contact]

Stage 4 — First full response (excerpt)

[Organisation] — Statement on supply chain standards — [Date]

We have completed an initial review of the allegations regarding [supplier category] in our supply chain. Here is what we can confirm.

What we found: We identified that [specific finding — cleared by Legal]. This does not meet our supplier code of conduct. We have [suspended / terminated / placed under review] our relationship with [supplier/supplier category] effective immediately.

What we are doing:

Conducting a full audit of our Tier 1 and Tier 2 suppliers against our code of conduct, to be completed by [date]
Engaging an independent third party to verify audit findings
Reviewing our supplier onboarding process to strengthen screening

What affected [stakeholders] should know: [If customers or employees are affected — what it means for them specifically.]

We take full responsibility for the standards of our supply chain. The facts as established do not reflect who we want to be as an organisation.

“[Quote from named senior leader, genuinely approved by that person]” — [Name, Title]

Our next update will be at [time/date].

DO NOT SAY: ❌ “We had no way of knowing” — investigation may prove otherwise ❌ “This is an isolated incident” — you don’t know that yet ❌ “We are confident our supply chain is otherwise fully compliant” — you haven’t audited it ❌ “We take a zero-tolerance approach to…” — unless you can demonstrate you always have

Crisis Content Pre-Approval Pack — Build and pre-approve your holding statements before any crisis occurs
Security Incident Communications Playbook — Staged playbook specifically for cybersecurity and data breach incidents with GDPR obligations
Stakeholder Mapping Matrix — Map every audience who needs to hear from you and in what order
Moderation Guidelines & Escalation — Rules for managing social and community channels during a crisis
Approval Workflow Mapper — Map your expedited approvals chain for crisis communications

Tips for success

Classify before you draft. The biggest early mistake is writing a generic holding statement that doesn’t fit the crisis type. A reputational crisis needs a different tone and different stakeholder order from an operational one. Spend five minutes on classification — it saves hours of redrafting.

Employees first, always. In virtually every crisis type, your employees should hear from you before or simultaneously with external communication. If they learn about the situation from a customer, journalist, or social media post, you’ve added an internal crisis to your external one. Write the all-staff communication in parallel with the public statement, not after.

Say what you don’t know. Transparency about uncertainty is more credible than false confidence. “We are still establishing the full scope” is not a weakness — it’s honest. What damages you is saying you don’t know something after claiming you did, or being caught stating something as fact that turns out to be wrong.

The resolution statement is not a get-out-of-jail document. Some organisations use a resolution statement to draw a line under a crisis before stakeholders are ready to move on. A resolution statement only works if the situation is genuinely resolved and your response throughout was credible. If it wasn’t, the resolution statement needs to acknowledge what went wrong in the response itself. Trying to close the book too early usually opens it again.

Keep the update cadence. If you say you’ll update at 18:00 and you miss it — even if there’s nothing new to say — you have a new story: “Organisation goes silent.” Post the no-news update. It takes three minutes and closes off a line of criticism.

Common pitfalls

Treating the crisis as a communications problem rather than an operational one. Communications can manage perception, but only if the underlying situation is being genuinely addressed. If the service is still down, if the practice hasn’t changed, if the leader is still in post — no holding statement helps. Sort the operational problem and communicate about the solution, not just the response.

Having too many spokespeople. In a crisis, messages diverge when multiple people are authorised to speak. Designate one external spokesperson and stick to it. Others can communicate internally, but externally it’s one voice.

Drafting a resolution statement before the crisis is resolved. Particularly tempting in a slow-burn reputational crisis. Resist. If new information emerges after a “we have now fully addressed this” statement, the original crisis doubles in size.

Failing to debrief. Once the crisis is resolved, run a structured retrospective: what triggered it, how fast was the response, what was missed, what should be pre-approved for next time. The best preparation for your next crisis is a structured review of the last one.

Leaving the holding statement up too long. A holding statement that runs past 24–36 hours without development signals you’ve stopped managing the situation. Move to a fuller response when you have enough established facts — even if the full picture isn’t complete.

Real-Time Crisis Response Playbook