Crisis Communication
Also called: crisis comms · emergency communication · incident communication
Crisis communication is the set of practices and infrastructure a company uses to communicate during incidents — safety events, cyber breaches, product recalls, executive departures, regulatory actions, public-relations fires. What separates companies that weather crises from the ones that don't is almost never the model; it's the preparation done months before the event.
Why it matters
Crisis communication is hired to protect trust during the moments when trust is most at risk. A company's reputation is built over years and can be damaged in an hour. Researchers of reputation repair are consistent on one finding: the first hour of a crisis sets the trajectory for the next six months. A team with a rehearsed playbook, clear decision rights, and pre-drafted templates moves in that first hour. A team improvising loses three days to committee work while the narrative is set by others.
How it works
Take a 2,800-person healthcare organization hit with a ransomware attack that takes EHR offline at 6 PM on a Friday. A prepared crisis comms response: the incident commander (named in the playbook) activates the team within 15 minutes; pre-drafted templates for employee, patient, and press audiences get adapted and approved within the hour; the patient-facing website has a pre-approved banner; the employee hotline script is activated; the press-inquiry channel is routed to a single spokesperson. By 9 PM, all audiences have an initial message. By morning, an update cadence is established. The crisis doesn't get smaller because of comms, but the secondary damage (patients showing up to closed clinics, employees hearing about the attack on social media, reporters getting contradictory statements from multiple spokespeople) is contained.
The operator's truth
The playbook that isn't rehearsed isn't a playbook. Every company has a crisis comms document somewhere; a fraction have actually run a tabletop exercise in the last year; a smaller fraction have run a full drill. The ones that rehearse find the gaps — the playbook that named an incident commander who left last quarter, the template that references an approver who's out of the country, the phone tree that hasn't been verified in 18 months. The gaps are always there; rehearsal finds them before a real crisis does.
Industry lens
In universities, crisis communication has to serve an unusually broad and opinionated stakeholder base: students, parents, faculty, staff, alumni, donors, board, media, regulators. A 30,000-student research university responding to a campus incident needs a different message for each of those audiences within hours, in their preferred channels, with fact patterns that hold up across them. The universities that have practiced this handle it well; the ones that haven't get criticized (often fairly) for being slow, confusing, or contradictory in a moment that demanded clarity.
In the AI era (2026+)
By 2027, AI compresses the drafting window dramatically. Within minutes of an incident, the AI produces first drafts for each audience based on the facts known and the company's voice. The human approval loop still runs, but the drafting delay disappears. The risk: the speed advantage can be used to rush decisions that needed human deliberation. The teams that use it well reserve AI- accelerated drafting for the routine-crisis moments and slow down deliberately on the high-voltage ones.
Common pitfalls
- Playbook as shelfware. If it hasn't been rehearsed, it's not operational.
- Multiple spokespeople in the first 24 hours. Single voice is a discipline; multiple voices is a crisis multiplier.
- Internal silence during an external crisis. Employees hearing about the company from the news is a second crisis inside the first.
- Over-promising in the first hour. Commitments made before facts are settled become the headline when the facts change.
- No dark site. Pre-built contingency web pages and email templates save hours when hours matter most.
