Crisis PR Writing
Crisis PR Writing
Overview
Crisis PR writing is the discipline of communicating publicly during a reputation crisis that is not (or is no longer) a live operational incident. Examples:
- An executive misconduct allegation surfaces
- A data breach beyond the operational window — now a public-disclosure problem
- A product recall or safety advisory
- A supplier or partner exposure
- A viral social-media controversy
The canonical reference response is Johnson & Johnson’s 1982 Tylenol cyanide crisis: rapid acknowledgement, decisive action (a full 31-million-bottle recall), transparent media communication, and a visible product redesign.
Core Concepts
1. The acknowledge / explain / commit / follow-through arc
| Phase | Job | Example |
|---|---|---|
| Acknowledge | Name the event. State that it happened. Express concern. | “Earlier today, an unauthorized party accessed a database containing customer account information. We deeply regret the impact this has on the people who trust us.” |
| Explain | State what you know and what you don’t. Avoid speculation. | “Our security team detected the access at 4:17 a.m. ET and contained it within 90 minutes. We do not yet know the full scope of records affected.” |
| Commit | Name the specific actions and timeline. | “We have notified law enforcement and regulators. We are providing affected customers with 24 months of credit monitoring at no cost.” |
| Follow-through | Promise — and then deliver — a visible status update. | “We will issue an update by Friday, November 15, at 5 p.m. ET, and weekly thereafter until the investigation closes.” |
2. The 60-minute holding statement
A good holding statement:
- Acknowledges that something happened
- Expresses concern for anyone affected
- States you are investigating
- Promises a substantive update by a specific time
- Names a point of contact
Hard rules:
- Never speculate. “We don’t know yet” beats “we believe.”
- Never minimize. “An incident has been reported” beats “minor disruption.”
- Never blame externally on day one.
- Always commit to a specific next update time.
3. The non-apology apology (anti-pattern)
| Non-apology | Why it fails | Correct form |
|---|---|---|
| “We’re sorry if anyone was offended.” | Conditional (“if”) + locates problem in audience | “We’re sorry. The video posted Tuesday does not reflect our values.” |
| “Mistakes were made.” | Passive voice removes the actor | “We made a mistake.” |
| “We regret that some customers had a negative experience.” | Frames customer’s reaction as the issue | “We failed our customers. For three weeks, we charged $40 for a service that should have been free.” |
4. SCCT response posture (Situational Crisis Communication Theory)
| Cluster | When to use | Postures |
|---|---|---|
| Victim cluster | The organization is also a victim (malicious external attack) | Inform; express sympathy; emphasize remediation |
| Accidental cluster | Unintentional crisis (technical-error accident) | Explain the cause; demonstrate corrective action; express regret |
| Preventable cluster | The organization knew or should have known (organizational misdeed) | Full apology; full responsibility; visible corrective action |
Mismatch is the most expensive crisis-PR error. Treating a preventable-cluster crisis as a victim-cluster crisis creates the secondary crisis: “first they did it, then they lied about it.”
5. The CEO signature decision
- Yes — CEO signs: preventable-cluster crises, executive-conduct issues, large-scale customer-impacting breaches.
- No — Communications/Legal signs: routine product advisories, ongoing investigations where speculation is dangerous.
6. Versioning discipline
Every statement gets a version number, a timestamp, and an author. When facts change, supersede the prior statement publicly.
7. Channels and cadence
- Holding statement (T+0 to T+60 min): Posted on company press page.
- Substantive statement (T+2h to T+12h): Press release; emailed to affected customers.
- Update cadence (T+24h, T+72h, then weekly): Posted in a single “incident log” page.
Templates
Holding statement (60-minute) — data breach
Statement — November 14, 2026, 9:42 a.m. ET
Acme Corp is aware of reports that customer account information may have been accessed without authorization. Our security team is actively investigating and has engaged independent forensic experts. The protection of customer data is a responsibility we take seriously, and we deeply regret any concern this causes.
We will share a substantive update by 5:00 p.m. ET today, November 14. Customers with immediate questions can contact [email protected]. Press inquiries: [email protected].
Anti-Patterns
| Anti-pattern | Fix |
|---|---|
| Going dark | Even a 60-second holding statement beats two hours of silence |
| Treating a preventable-cluster crisis as a victim-cluster crisis | Match SCCT posture to the actual responsibility |
| “No comment” | “We are still assessing; we will share more by [time]” |
| Speculating in the first 60 minutes | “We do not yet know” — and mean it |
| Crisis comms written by Legal alone | Legal sets outer limits; Comms drafts; CEO owns |