How to Build a Crisis Communication Plan

A crisis rarely gives an organization enough time to decide who should speak, what should be said, and how stakeholders should be informed.

A cyberattack, operational failure, public complaint, employee issue, product problem, misinformation campaign, or unexpected media question can quickly create pressure. Without a clear crisis communication plan, teams may respond with conflicting messages, delay important decisions, or communicate before the facts are confirmed.

A crisis communication plan prepares the organization before that pressure begins. It defines responsibilities, approval processes, audiences, messages, communication channels, and monitoring procedures.

This guide explains how to build a practical crisis communication plan that helps your organization respond with speed, clarity, and control.

What Is a Crisis Communication Plan?

A crisis communication plan is a documented framework that explains how an organization will communicate during an urgent or reputation-sensitive situation.

It identifies:

• Who makes communication decisions
• Who is authorized to speak
• Which stakeholders must be contacted
• How messages are reviewed and approved
• Which channels should be used
• How media inquiries should be handled
• How public reaction and coverage should be monitored
• When the response should be updated or escalated

The plan should not attempt to predict every possible crisis. Its purpose is to create a reliable decision-making structure that can be adapted to different situations.

A strong plan supports the wider reputation and crisis management process. Operational teams manage the incident itself, while communication teams explain what is happening, what the organization is doing, and what stakeholders should expect next.

Why Organizations Need a Crisis Communication Plan

During a crisis, silence, delay, and inconsistency can create additional risk.

When an organization does not communicate clearly, employees may rely on rumours, customers may lose confidence, journalists may use incomplete information, and online speculation may become more visible than the confirmed facts.

A crisis communication plan helps an organization:

• Respond without starting from zero
• Coordinate leadership, legal, operational, and communication teams
• Reduce conflicting or unauthorized statements
• Communicate confirmed information quickly
• Prepare spokespeople for difficult questions
• Keep employees and stakeholders informed
• Track how the situation is developing
• Protect trust while the operational response continues

The plan also improves internal confidence. People work more effectively when they understand their responsibilities and know how decisions will be made.

What Should a Crisis Communication Plan Include?

Every organization has different risks, stakeholders, and approval structures. However, most effective plans include the following elements.

Plan Element	Purpose
Crisis scenarios	Identifies the events most likely to affect the organization
Response team	Defines who leads communication and who supports decisions
Roles and authority	Clarifies who approves, writes, publishes, and speaks
Stakeholder map	Lists the audiences that may need information
Escalation process	Explains when and how an issue becomes a crisis
Message templates	Provides a starting point for urgent communication
Channel plan	Identifies where each audience should be contacted
Media protocol	Defines how journalists and interview requests are handled
Monitoring process	Tracks coverage, sentiment, misinformation, and response
Review process	Keeps the plan current through testing and updates

The plan should be easy to access and use. A long document with unclear responsibilities may become difficult to follow during a fast-moving situation.

1. Identify Your Most Important Crisis Scenarios

Begin by identifying the incidents that could affect operations, employees, customers, stakeholders, or reputation.

Possible scenarios include:

• Cybersecurity incidents
• Data loss or privacy issues
• Service interruptions
• Product or safety concerns
• Employee misconduct
• Leadership controversies
• Legal or regulatory developments
• Supply chain failures
• Public protests or stakeholder opposition
• Misinformation or online criticism
• Accidents at facilities or events
• Sudden leadership changes

Do not treat every negative comment or operational problem as a major crisis. The purpose of scenario planning is to understand which situations may require coordinated communication across several teams.

For each scenario, consider:

• How serious could the impact become?
• Which audiences would be affected?
• How quickly could the issue become public?
• Which facts would need confirmation?
• Which teams would need to respond?
• What communication risks could appear?

This assessment can be part of a wider strategic planning exercise that connects communication risk with organizational priorities.

2. Build a Crisis Communications Team

The crisis communications team should be defined before an incident occurs.

The team may include representatives from:

• Senior leadership
• Corporate communications or PR
• Operations
• Legal and compliance
• Human resources
• Information technology
• Security
• Customer service
• Government relations
• Relevant business units

Not every team member needs to speak publicly. The main purpose is to ensure that facts, decisions, and messages move through the right people.

The plan should clearly name:

• The crisis communication lead
• The final message approver
• The primary spokesperson
• A backup spokesperson
• The person responsible for media inquiries
• The person responsible for employee communication
• The person responsible for monitoring and reporting
• Technical or subject-matter experts who may be consulted

Alternates should be assigned in case a key decision-maker is unavailable.

3. Define When an Issue Becomes a Crisis

Organizations need a clear escalation system.

A routine customer complaint may require a customer service response. A complaint that receives widespread media attention, raises safety concerns, or involves a public authority may require a wider crisis response.

An escalation framework can classify issues by level.

Level 1: Routine Issue

The matter can be managed by the responsible department using normal procedures.

Level 2: Emerging Risk

The issue may attract wider attention or affect several stakeholder groups. Communication and leadership teams should be informed.

Level 3: Active Crisis

The issue has a serious operational, legal, safety, stakeholder, or reputation impact. The full crisis response structure should be activated.

The criteria should be specific enough to support quick decisions. They may include the number of people affected, media attention, operational impact, regulatory involvement, online visibility, or risk to public trust.

4. Map the Audiences You May Need to Reach

A crisis communication plan should not focus only on media coverage.

Different audiences need different information. Important stakeholder groups may include:

• Employees
• Customers
• Partners
• Suppliers
• Regulators
• Government entities
• Investors
• Board members
• Local communities
• Media outlets
• Influencers
• Industry associations
• The general public

A stakeholder engagement map can help the organization identify who needs to know, what each group needs to understand, and which channel should be used.

Employees often need information early. They may receive questions from customers, partners, family members, or journalists. If they learn about the crisis through social media, internal trust may be damaged before the organization communicates officially.

5. Prepare Core Message Principles

The exact message will depend on the facts. However, the organization can define message principles in advance.

A useful crisis message usually explains:

1. What is known
2. What is not yet confirmed
3. What the organization is doing
4. Who is affected
5. What people should do next
6. When another update will be provided

Messages should be:

• Accurate
• Clear
• Human
• Relevant
• Consistent
• Appropriate to the level of certainty

Avoid speculation. Do not present an assumption as a confirmed fact. If information is still being reviewed, say so clearly.

A strong message does not need to answer every question immediately. It should show that the organization understands the situation, is taking action, and will continue to provide verified updates.

Jummar’s content, narratives, and messaging work helps organizations prepare clear language for sensitive communication moments.

6. Create Holding Statements and Message Templates

A holding statement is a short initial message issued while the organization is still gathering information.

It may confirm that:

• The organization is aware of the situation
• Relevant teams are responding
• The matter is being reviewed
• Safety or stakeholder needs are being prioritized
• More information will be shared when confirmed

A holding statement should not be copied unchanged for every crisis. Templates should provide structure, not replace judgment.

Useful templates may include:

• Initial public holding statement
• Employee notification
• Customer update
• Stakeholder email
• Media response
• Website notice
• Social media update
• Service disruption message
• Correction of misinformation
• Post-crisis update

Templates should contain placeholders for the date, time, affected groups, confirmed facts, actions, spokesperson, and next update.

7. Establish a Clear Approval Process

A message that requires too many approvals may arrive too late. A message published without the right review may create legal, operational, or reputation risk.

The crisis communication plan should explain:

• Who drafts the message
• Who checks the facts
• Who reviews legal or regulatory implications
• Who gives final approval
• Who publishes or distributes the message
• How urgent approvals are handled outside office hours

Approval routes should change according to the seriousness of the issue.

A routine service update may need one communication approver. A serious safety or regulatory issue may require leadership, legal, operational, and communication approval.

Clear communication guides, systems, and policies can prevent confusion about authority and responsibility.

8. Prepare Your Spokespeople

The spokesperson should understand more than the approved statement. They should understand the situation, the organization’s response, the likely questions, and the boundaries of what can be discussed.

Spokesperson preparation should include:

• Core messages
• Supporting facts
• Difficult questions
• Topics that cannot yet be confirmed
• Language to avoid
• Interview format
• Audience expectations
• Body language and delivery
• Procedures for correcting inaccurate questions

The spokesperson should not memorize long answers. They should be able to respond naturally while returning to the main message.

Regular media training helps leaders and spokespeople practise difficult situations before facing live interviews or public questions.

9. Plan Your Communication Channels

The right channel depends on the audience and urgency.

Possible channels include:

• Internal email
• Employee messaging systems
• Website notices
• Social media accounts
• Direct customer messages
• Press releases
• Media statements
• Press conferences
• Stakeholder briefings
• Call centre scripts
• Leadership messages
• Government or regulatory notifications

Do not assume one public statement will reach every audience.

Employees may need a detailed internal message. Customers may need direct instructions. Journalists may need a confirmed statement and contact person. Regulators may require formal notification through a specific process.

The channel plan should also define which platforms are considered official sources during a crisis.

10. Manage Media and Influencer Inquiries

During a visible crisis, journalists and influencers may contact employees across the organization.

The plan should instruct employees to direct external inquiries to the authorized media contact rather than answering independently.

A media protocol should include:

• The official media contact
• How inquiries are recorded
• Response priorities
• Approved messages
• Interview approval procedures
• Deadlines from journalists
• Follow-up responsibilities
• Procedures for correcting inaccurate coverage

Good media and influencer relations during a crisis depend on credibility. Avoid sending repeated statements that do not address the main concern. Share useful updates when confirmed information changes.

11. Monitor Coverage, Sentiment, and Misinformation

A crisis communication plan should include a clear monitoring process.

The organization needs to know:

• Which facts are being reported
• Whether the approved message is appearing accurately
• Which questions remain unanswered
• How stakeholders are reacting
• Whether misinformation is spreading
• Which voices are influencing the discussion
• Whether the issue is growing or declining

Effective monitoring and analysis goes beyond counting mentions. It examines tone, themes, message pickup, influential sources, and emerging risks.

Monitoring findings should reach decision-makers quickly. Communication may need to change when new concerns, facts, or misunderstandings appear.

12. Test the Crisis Communication Plan

A plan should be tested before it is needed.

Crisis simulations can reveal:

• Missing contact information
• Slow approval procedures
• Unclear authority
• Inconsistent messages
• Technology or access problems
• Unprepared spokespeople
• Gaps between operational and communication teams
• Stakeholders who were not included

A simulation may use a realistic scenario and ask the team to respond within a limited time.

After the exercise, document:

• What worked
• What caused delays
• Which information was missing
• Which roles were unclear
• What should be revised
• What training is needed

Testing turns the plan from a document into a working organizational capability.

13. Review the Plan Regularly

Organizations change. Teams, services, leaders, platforms, regulations, suppliers, and stakeholder expectations may all change.

Review the crisis communication plan at least once a year and after:

• A real crisis
• A simulation
• A leadership change
• A major organizational restructuring
• The launch of a new service
• Entry into a new market
• A change in regulation
• A significant communication issue

Contact lists should be checked more frequently. An outdated phone number can create serious delays during an urgent situation.

Common Crisis Communication Mistakes

Even organizations with a plan can create additional problems if they respond poorly.

Common mistakes include:

Waiting for Complete Information Before Saying Anything

The organization may not have every answer immediately, but it can confirm awareness, explain the response, and promise another update.

Communicating Different Messages to Different Audiences

Messages may require different levels of detail, but the core facts and position should remain consistent.

Ignoring Employees

Employees are often among the first people asked about the situation. They need clear internal communication and instructions.

Responding Emotionally to Criticism

Defensive or argumentative responses may increase public attention and create new reputation risks.

Using Legal Language That Audiences Cannot Understand

Legal accuracy matters, but public communication should still be clear and readable.

Speaking Before Facts Are Confirmed

Speed matters, but an inaccurate statement may cause more damage than a careful initial response.

Treating Monitoring as a Final Report

Monitoring should guide the active response, not only describe what happened after the crisis ends.

Crisis Communication Plan Checklist

Before finalizing your plan, confirm that it includes:

• Priority crisis scenarios
• Crisis communication team
• Contact details and backups
• Escalation criteria
• Stakeholder lists
• Spokesperson roles
• Approval procedures
• Holding statement templates
• Employee communication process
• Media inquiry protocol
• Channel responsibilities
• Monitoring procedures
• Simulation schedule
• Review and update dates

The plan should be stored securely but remain accessible to the people who may need it outside normal office hours.

Frequently Asked Questions

What is the first step in creating a crisis communication plan?

The first step is identifying the incidents that could seriously affect operations, people, stakeholders, or reputation. This allows the organization to define likely audiences, responsibilities, and response needs.

Who should be part of a crisis communications team?

The team usually includes senior leadership, communications, operations, legal, human resources, IT, security, customer service, and relevant subject-matter experts. The exact structure depends on the organization and crisis type.

What is a crisis holding statement?

A holding statement is a short initial message used before all details are confirmed. It acknowledges the situation, explains that the organization is responding, and tells audiences when further information may be available.

How quickly should an organization respond during a crisis?

The organization should respond as quickly as it can communicate confirmed and useful information. Speed is important, but accuracy should not be sacrificed.

Should employees speak to the media during a crisis?

Only authorized spokespeople should provide official comments. Other employees should direct media inquiries to the designated media contact.

How often should a crisis communication plan be updated?

The plan should be reviewed at least annually and after major organizational changes, simulations, communication incidents, or real crises.

Can social media replace a full crisis communication plan?

No. Social media is one communication channel. A full plan should also cover employees, customers, media, regulators, partners, leadership, and other stakeholders.

How is crisis communication success measured?

It can be measured through response speed, message accuracy, stakeholder understanding, media coverage, sentiment, misinformation control, employee awareness, and the organization’s ability to maintain or rebuild trust.

Prepare Before the Pressure Begins

A crisis communication plan cannot remove every risk. It can, however, give your organization a clearer way to make decisions, coordinate teams, communicate verified information, and protect stakeholder trust.

The strongest plans are practical, regularly tested, and connected to the organization’s real operational structure.

Jummar helps organizations in Saudi Arabia prepare crisis communication plans, develop messages, train spokespeople, establish response procedures, and monitor public conversation.

Book a Consultation to discuss your organization’s crisis communication and reputation needs.