Crisis Communication Strategies: Steps, Tips, Examples

A crisis communication strategy is a set of decisions about what you will say, to whom, through which channel and when, made before you draft a single message. In practice that means serving the audiences facing the most risk first, saying only what you have verified, keeping every channel consistent, and knowing when silence or legal review is wiser.

This guide covers those decisions. It is not the document you keep on a shelf. For the written playbook with roles, approval chains and contact lists, see our crisis communication plan page, and for the wider discipline, start with what crisis management is. If you want definitions first, read what crisis communication is.

One disclosure: we are Reputation Resolutions, we sell crisis services, and we are not a law firm, so nothing here is legal advice. A crisis communications firm can draft, monitor and coordinate, but the calls in this guide, what to admit, who speaks and when to stay quiet, belong to your leadership and your counsel. The framework leans on the CDC's Crisis and Emergency Risk Communication (CERC) manual, written for public health emergencies, which we adapt for organizations and people facing a reputational one. Where something is our editorial judgment rather than the CDC's, we say so.

Strategy versus plan

The strategy is the reasoning you apply while an event is moving: who needs to hear what first, how much you can say, and who must approve it. The plan is the written record of roles, contacts and approval paths that you prepare in advance. A plan without a strategy produces a binder nobody trusts under pressure. A strategy without a plan produces good instincts and slow approvals.

Five decisions to make before any message goes out

Take these in order, because each answer shapes the next.

- What do we know, and what do we not know? Separate verified facts from assumptions. The CDC advises stating what you know, what you do not know and what you are doing to find out more, and not speculating.

- Who is affected, and what should they do? Name the people at risk, then decide the one or two actions that reduce their risk. If there is nothing for them to do, say that plainly.

- Who speaks? The CDC's spokesperson chapter advises naming spokespeople before a crisis, making them visible early, and presenting one unified message across everyone who speaks.

- Where does the full statement live? Pick one home for the complete, dated statement and point every other channel to it.

- When is the next update? Promise only an update time you can keep, and keep it even when the update is that nothing has changed.

Principles that hold up under pressure

The CDC lists six principles: be first, be right, be credible, express empathy, promote action and show respect. Our guide to what crisis management is covers the first three. For strategy, the three that get neglected matter most. Empathy means acknowledging harm in words, which the CDC says builds trust. Promoting action means giving people meaningful things to do, which the CDC says calms anxiety and restores a sense of control. Respect matters most when people feel vulnerable.

The CDC also names five pitfalls: mixed messages from multiple experts, information released late, paternalistic attitudes, not countering rumors and myths in real time, and public power struggles and confusion. Each is a strategy failure rather than a drafting failure, which is why they belong in this guide and not in a template.

Audience prioritization: who hears first

The CDC says emergency communication is more than giving information to the general public, because different audiences have different priority needs based on their relationship to the event. Its table runs from the directly affected community through responders, partners and media to businesses. Ready.gov, the US government's preparedness site, makes the business version of the same point: customers will want to know how they are affected, employees and their families will want information, and regulators and local officials may need to be notified.

The ordering below is our editorial judgment, adapted from those sources. Reorder it for your situation, and ask counsel which notices are required and when.

• 1

  Audience

  People harmed or at risk

  What they need first

  What happened, what to do, who to contact

  Why before the next group

  They must act now

• 2

  Audience

  Employees and their families

  What they need first

  The same facts you will give the public

  Why before the next group

  They will be asked about it, and learning it from the news erodes trust

• 3

  Audience

  Customers, clients, partners

  What they need first

  How they are affected and what you are doing

  Why before the next group

  Their decisions about you are the nearest business consequence

• 4

  Audience

  Regulators, insurers, lenders

  What they need first

  Required notices, on timelines counsel confirms

  Why before the next group

  A missed notice can create a separate problem

• 5

  Audience

  Media

  What they need first

  The same facts at the same time, and one named contact

  Why before the next group

  They carry the story to everyone else

• 6

  Audience

  The wider public, search and social

  What they need first

  A findable, dated statement page

  Why before the next group

  Everything else gets read through it

Message framing: short, true, repeatable

The CDC's guidance on first messages is practical, and most of it carries over to a business crisis:

- Keep the first message short. Include only immediately relevant information, skip the background and avoid jargon, because frightened people take in less.

- Repeat the main message. Repetition helps people remember it when anxiety shortens memory.

- State actions positively when you can. The CDC prefers telling people what to do over what not to do, while noting that some warnings can only be clear as negatives.

- Limit action steps to three or four. The CDC says people retain far fewer instructions under stress.

- Use "we" and respect fears. Personal pronouns help credibility, and condescension costs it.

- Give options and skip the humor. The CDC warns against paternalism and notes that live microphones and phones capture behind-the-scenes remarks.

Then use one structure: what we know, what we do not know, what we are doing, what you can do, and when we will update. This is a hypothetical example, not a client case. A regional gym chain learns that a local news site has published an allegation about its billing. A message in this structure reads: we have seen the article, we are reviewing the accounts it describes, we do not yet know whether the practice it alleges occurred and will not guess, members who want to check their billing can call a named line, and we will update this page by a stated time tomorrow. Counsel should read it before it goes out.

Channel choice

The CDC notes that the channels people can use vary with infrastructure, personal choice and economics, and that language, literacy and hearing or vision affect whether a message is received at all. It also suggests sharing messages through institutions that audiences already trust. Our editorial rule is one home base, then shorter versions on the channels each group actually uses, always pointing back to the home base.

Consistency is the strategy

The CDC says every communication from your organization and its partners should share the same facts, and that inconsistent messages increase anxiety and quickly undermine credibility. Its own example: during a 2003 blackout in Michigan, two neighboring health departments gave conflicting guidance about restaurants, which drew intense media scrutiny and public confusion, and some restaurants lost business.

To get consistency in practice, decide the approval path in advance, which the CDC also advises, keep a running fact log, and brief everyone with customer contact, such as support, sales and front desk, on the same three sentences. Make sure public statements do not contradict anything you are saying in a legal filing or a content removal request.

When to stay silent

Silence is a decision, not a default. The CDC's view is that if you do not communicate about your response, the public will assume you are not responding. Its spokesperson chapter also says not to answer "no comment" and to explain why you cannot answer instead, for example that the matter is under investigation or no decision has been made. The real question is usually what the smallest true thing to say is.

These cases can justify saying nothing public for now. This is editorial judgment, and your counsel should confirm it:

- A coordinated attack or hostile thread where a reply would hand the claims a larger audience than they have.

- Facts you cannot yet verify, where the only alternative to silence is a guess. Say you are looking into it.

- Matters involving a minor, a patient or a victim, where privacy rules limit what you may say. Speak about your process, not the person.

- An active investigation or proceeding where counsel has set limits.

Even then, tell your own employees and anyone directly affected.

When counsel must review

We are not a law firm, so this is a list of triggers, not legal advice. Have your own attorney read a statement before it goes out when it:

- admits fault, apologizes in a way that could be read as liability, or explains a cause;

- names or describes a person, such as an employee, customer or accuser;

- mentions a lawsuit, investigation, regulator, claim or settlement;

- involves health, student, financial or other regulated personal information;

- announces a data incident or anything that may trigger a notification duty;

- promises refunds, compensation or a policy change;

- concerns a current or former employee's employment.

Agree the review path and a turnaround you can meet in advance, so legal review does not become the reason a statement is late. Ask counsel at the start what to preserve before content changes or disappears.

Two more hypothetical scenarios

These are hypothetical and are not client results. For sourced public cases, see our crisis communication examples.

- A coordinated review attack on a local clinic. Strategy: verify the reviews against real patients without disclosing any patient information, report them through the platform's own channel, brief staff on one sentence to use, and avoid a public argument in the replies. The statement page stays quiet unless real patients are confused.

- An allegation about an executive. Strategy: counsel first, then a short statement that takes the concern seriously, describes the process under way without characterizing the facts, names who to contact, and sets an update time. No defense of character, no detail about the accuser.

The search and AI layer

Whatever you say will be read alongside the coverage. A dated, factual statement page gives readers and search engines a source written in your own words. Where content about you is false and qualifies under a platform's policy or the law, removal may be possible, but it is not guaranteed and depends on the publisher. Suppression and monitoring are separate, scoped work. Our guide to recovering from a PR crisis covers the weeks after, and our reputation crisis management page covers the search side.

When to bring in outside help

Consider it when the story is moving faster than your approvals, when it is spreading across several platforms, or when part of it is content that may need to be removed at the source. Reputation Resolutions has worked on reputation problems since 2013, is A+ BBB accredited and a Google Partner, and has clients in 40+ countries. We work alongside your counsel and your existing advisors, not in place of them. If you want to talk it through, start with our crisis communications services page.