A crisis is the worst possible time to decide who speaks, what they say, and who signs off. Adrenaline is high, facts are thin, and every hour of silence gets read as guilt. A PR crisis response plan written in calm removes those decisions from the moment of panic, so your team executes instead of debating. Federal planners take the same view: pre-event planning should identify potential hazards, outline responses, and spell out the responsibilities of principal actors. This guide gives you a copy ready template. To understand the thinking a plan puts into action, read our overview of crisis communications and reputation repair first.
1. Build the Crisis Team and Assign Roles
A plan is only as good as the people named in it. Before anything happens, list real names, backups, and personal phone numbers for each seat below. Roles matter more than titles, so map both.
- Crisis lead: owns the decision to activate the plan and directs the response.
- Spokesperson: the single approved voice for external statements (see section 3).
- Legal reviewer: flags liability, regulatory, and disclosure issues before anything ships.
- Executive sponsor: a senior leader who can commit resources and approve high-severity messaging.
- Monitoring lead: runs listening tools and reports what is actually being said.
- Operations or subject expert: confirms the facts of what happened on the ground.
Keep the core team small. A tight group moves faster and leaks less. Everyone else supports from the edges.
2. Define Escalation and Severity Tiers
Not every complaint is a crisis. Overreacting burns credibility; underreacting lets a fire spread. Define severity tiers in advance so the response matches the threat and nobody has to guess in the moment.
- Tier 1, low: isolated negative comment or single unhappy customer. Handled by front-line staff using approved language. No activation.
- Tier 2, elevated: a complaint gaining traction, a critical article, or a coordinated cluster of posts. Monitoring lead alerts the crisis lead. Prepared holding statement on standby.
- Tier 3, high: viral spread, media inquiries, safety or legal exposure, or executive involvement. Full team activates. Spokesperson engaged. Executive sponsor briefed within the hour.
Write the trigger for each tier as an observable signal, not a feeling. Tie your tiers to the first moves in our guide on the first 24 hours of an online reputation crisis so the clock and the tier move together.
3. Set the Approval Chain and the Single Spokesperson Rule
Mixed messages are their own crisis. Every organization should decide in advance who speaks for it and route all external statements through one voice. Emergency planners recommend developing procedures to determine who the designated spokesperson should be for various types of incidents, precisely so that answer is settled before the phone rings.
- Name one primary spokesperson and one trained backup. Nobody else speaks to media or posts official statements.
- Route every draft through a fixed approval chain: subject expert confirms facts, legal reviews risk, crisis lead approves release.
- Set a maximum approval time per severity tier so review does not become paralysis.
- Instruct all other employees to forward inquiries to the spokesperson rather than commenting personally.
The goal is messaging that stays consistent across every channel, with no contradictory information reaching the public.
4. Prepare Holding Statements and Channels
A holding statement is a short, pre-approved message that buys you time. It acknowledges the situation, states that you are looking into it, and promises an update, without admitting fault or speculating on facts you do not yet have. Draft these templates now, with blanks to fill in later.
- Acknowledgement template: “We are aware of [situation] and are actively looking into it. The safety of [customers/community] is our priority. We will share more as soon as we have verified information.”
- Update template: “Here is what we know as of [time]. Here is what we are doing. Here is when to expect the next update.”
- Channel map: list every owned channel (website, email list, social profiles, support line) and who is authorized to post to each.
Effective messages are specific, clear, and accurate, using plain words that avoid technical jargon and never overstating or understating the facts. Decide in advance which channel leads for which audience, so employees, customers, and press each hear from you directly rather than through rumor.
5. Build the Monitoring and Listening Setup
A plan only helps if you learn about trouble in time to use it. A standing brand monitoring setup is what turns a plan from paper into an early-warning system. Part of any communications team’s job is to monitor and control inaccurate information before it erodes public confidence.
- Set up alerts for your brand name, executives, products, and common misspellings. Free tools such as Google Alerts cover the basics.
- Watch review platforms, social networks, and community forums where your audience actually gathers.
- Use sentiment analysis to track whether the tone of the conversation is rising or falling, not just the volume of mentions.
- Assign the monitoring lead to report at set intervals during an active crisis, so decisions rest on current data.
Sustained brand monitoring between crises is equally valuable: it catches the elevated-tier signals early, when a quiet fix is still possible. Speed matters more every year, as we cover in how AI and social media changed crisis speed.
6. Run the Post-Crisis Review
The response is not over when the noise dies down. The review is where the plan improves. Schedule it within two weeks, while memories are fresh.
- Reconstruct a timeline: when the issue surfaced, when you detected it, when you responded, and how fast each tier escalated.
- Measure the gap between detection and first public statement. That gap is usually the biggest lever for next time.
- Capture what the plan got right and where people improvised because the template had a hole.
- Update roles, templates, and triggers, then run a short tabletop drill so the changes stick.
One durable lever is trust: strong, genuine online reputation management before a crisis gives you credibility to spend during one. Never manufacture that goodwill with fake reviews. The FTC now prohibits buying reviews that express a particular sentiment, positive or negative, and bans review suppression, so recovery has to be earned, not purchased.
Ready to put this plan into practice with outside help? Compare vetted crisis reputation management companies.
Frequently Asked Questions
What should a PR crisis plan include?
At minimum, a named crisis team with backups, defined severity tiers and their triggers, a single approval chain, a designated spokesperson, pre-written holding statements, a channel map, a monitoring setup, and a post-crisis review process. The point is to make every high-pressure decision in advance, so the team executes a documented playbook instead of improvising while the clock runs.
Who should be on a crisis response team?
Keep it small and cross-functional: a crisis lead who activates the plan, a trained spokesperson and backup, a legal reviewer, an executive sponsor who can commit resources, a monitoring lead, and a subject expert who confirms the facts. List real names and personal phone numbers, not just job titles, and identify a substitute for every seat in case someone is unreachable.
What is a holding statement?
A holding statement is a short, pre-approved message you release early in a crisis. It acknowledges the situation, confirms you are investigating, and promises an update, without admitting fault or speculating on unverified facts. It buys you time to gather accurate information while showing the public you are engaged. Draft templates in advance with blanks you can fill in quickly.
How many severity tiers should a plan have?
Three tiers work for most organizations: low for isolated complaints handled with approved language, elevated for issues gaining traction that put a holding statement on standby, and high for viral spread, media inquiries, or legal exposure that activates the full team. Define each trigger as an observable signal so anyone can classify an incident the same way without debate.
How do I test a crisis response plan?
Run a tabletop exercise: gather the team, present a realistic scenario, and walk through the plan in real time without touching live channels. Note where people hesitate, where roles overlap, and where templates fall short. Update the plan based on what you learn, then repeat once or twice a year and after any real incident so the playbook stays current.