AI Skill Report Card
Managing Crisis Communications
Quick Start15 / 15
When a crisis hits, immediately produce a holding statement within the first hour — before full facts are known:
We are aware of [issue] and are actively investigating.
[Immediate action taken, e.g., "We have paused X" / "Our team is on-site"].
The safety/well-being of [affected group] is our top priority.
We will share updates as soon as more information is available.
Contact: [spokesperson/channel] for further inquiries.
This buys time, shows control, and prevents an information vacuum from being filled by speculation.
Recommendation▾
Add an example of a less severe/lower-stakes scenario (e.g., PR backlash from a tweet) to show scaling of response intensity
Workflow14 / 15
Progress:
- [ ] Step 1: Assess severity and scope (who's affected, legal/financial/safety risk)
- [ ] Step 2: Activate crisis response team and designate single spokesperson
- [ ] Step 3: Issue holding statement (within 1 hour)
- [ ] Step 4: Gather verified facts; avoid speculation or premature blame
- [ ] Step 5: Draft core messaging (key facts, actions taken, empathy, next steps)
- [ ] Step 6: Tailor messages per audience (customers, employees, media, investors, regulators)
- [ ] Step 7: Choose channels matching audience (press release, email, social, internal memo)
- [ ] Step 8: Deploy messages simultaneously to avoid contradictions across channels
- [ ] Step 9: Monitor media/social sentiment and respond to misinformation quickly
- [ ] Step 10: Issue follow-up updates as facts evolve
- [ ] Step 11: Post-crisis: publish resolution statement and conduct internal debrief
Step Details
1. Assess severity — Use a simple matrix: Impact (low/med/high) × Visibility (internal/public). High-impact + high-visibility = full activation.
2. Spokesperson — One voice only. Prevents contradictory statements. Usually CEO (major crisis) or Comms Director (operational issue).
4. Fact-gathering — Never confirm unverified details. Use phrases like "we are confirming" rather than guessing.
5. Core message structure (the "ACE" framework):
- Acknowledge — show awareness and concern, no corporate detachment
- Control — state concrete actions already taken
- Explain — what happens next and when the next update will come
8. Simultaneous deployment — Internal communication to employees must go out at the same time as or before external statements, so staff don't learn about the crisis from the news.
Recommendation▾
Include guidance on legal review coordination timing, since legal and comms often conflict on speed vs. caution
Examples18 / 20
Example 1: Input: A food delivery app suffers a data breach exposing 2 million users' payment info. Output:
Holding statement (T+1hr):
"We are aware of a security incident affecting customer data and have immediately
engaged our security team and external forensics experts. We have taken affected
systems offline as a precaution. Protecting your data is our highest priority,
and we will provide a full update within 24 hours."
Follow-up (T+24hr) to customers via email:
"On [date], we discovered unauthorized access to a database containing payment
information for approximately 2 million accounts. We have since: (1) closed the
vulnerability, (2) engaged [forensics firm] to investigate, (3) notified law
enforcement. We recommend you [specific action: change password, monitor statements].
We are offering free credit monitoring for 12 months via [link]. We sincerely
apologize and will share further findings at [portal link]."
Internal memo to employees (sent simultaneously):
"Before this goes public, you should know: [facts]. Direct any media inquiries
to [Comms]. Do not speculate on social media. FAQ attached for customer-facing teams."
Example 2: Input: A factory explosion injures three workers; local news is already reporting. Output:
Holding statement (T+30min, to media and posted on company site):
"At approximately [time], an incident occurred at our [location] facility.
Emergency services responded immediately and three employees were injured and
are receiving medical care. We have suspended operations at the facility pending
investigation. Our thoughts are with the affected employees and their families.
We will provide updates as facts are confirmed."
Note: No cause is stated or implied. No blame assigned. Family notification
prioritized before any public release of names/conditions.
Recommendation▾
Provide a brief severity assessment matrix template (actual grid) rather than just describing it in prose
Best Practices
- Speed over perfection — a timely 80%-complete statement beats a perfect one issued too late.
- Lead with empathy, not legal hedging — overly lawyered language reads as evasive.
- Single source of truth — designate one update channel (e.g., a live incident page) everyone points to.
- Consistency across channels — same key facts in press release, social, and internal memo.
- Update cadence — commit to specific times for next updates, and keep that promise even if the update is "no new information yet."
- Pre-drafted templates — maintain holding statement templates for common risk scenarios (breach, injury, product recall, executive misconduct) before a crisis occurs.
Common Pitfalls
- Going silent — silence is read as guilt or incompetence; always say something fast, even if incomplete.
- Speculating on cause or liability before facts are confirmed — creates legal exposure and credibility risk if wrong.
- Multiple spokespeople giving inconsistent details.
- Over-promising ("this will never happen again") without ability to guarantee it.
- Ignoring internal audience — employees who feel blindsided become a secondary PR problem.
- Deleting or ignoring social media criticism instead of engaging — fuels narrative of cover-up.
- Treating the apology as the end — failing to publish a resolution/lessons-learned statement once the crisis is resolved.