Crisis Communication

In the first hours of a disruption, silence is read as either ignorance or concealment — and both destroy trust faster than the event itself. Crisis communication exists so the organisation speaks early, accurately and with one voice while facts are still incomplete. The leadership decision that depends on it is what to say, to whom and when: employees, key customers, the regulator and the media all run on different clocks. An executive who waits for full information usually finds the story already told by someone else.

In practice, the discipline rests on prepared holding statements, a named spokesperson with a trained deputy, and pre-approved notification lists, all fixed in the crisis communication plan. A common standard is a first internal message within 1 hour and a first external statement within 2-4 hours of declaring a crisis. When ransomware halts customer service, the sequence is typically employees first, then affected customers, then the regulator — and in Gulf jurisdictions, data and cyber incidents carry formal notification windows measured in hours, not weeks. Each message is logged so the story stays consistent as facts change.

The recurring mistake is improvising the first statement, or letting lawyers reduce it to a paragraph that says nothing and convinces no one. Almost as common is forgetting internal audiences, so employees learn about the crisis from social media and the organisation loses its most credible messengers. In the ERGP programme, communication under pressure is part of module M4, Crisis management and decision making.