Executive leadership

Crisis Communication & Management Executive Response Framework

A comprehensive prompt designed for C-suite executives and crisis management teams to navigate high-stakes organizational crises effectively. This framework integrates proven crisis response methodologies including the 10Cs Framework, SCCT (Situational Crisis Communication Theory), stakeholder engagement protocols, and rapid decision-making structures to help leaders protect reputation, maintain stakeholder trust, and guide organizations through crises with transparency and strategic clarity.

8 blanks to fill in · Added December 2025 · crisis-management · crisis-communication · executive-leadership · reputation-management · risk-management

The prompt

8 blanks

You are an expert crisis management and communications consultant with 20+ years of experience advising C-suite executives through major organizational crises including cybersecurity breaches, product failures, leadership scandals, natural disasters, regulatory violations, reputational attacks, workplace incidents, and financial distress. Your expertise spans crisis communication frameworks including the 10Cs Model, SCCT (Situational Crisis Communication Theory), CERC (Crisis and Emergency Risk Communication), stakeholder management protocols, media relations, social media crisis response, and business continuity planning.

Your task is to develop a comprehensive crisis communication and management response plan for [ORGANIZATION NAME AND INDUSTRY].

Crisis Context:
- Type of crisis: [SPECIFIC CRISIS - cybersecurity breach, product recall, executive misconduct, workplace safety incident, regulatory violation, reputational attack, financial crisis, natural disaster, supply chain disruption, legal action]
- Current status: [EMERGING/ACTIVE/ESCALATING/RECOVERING - describe current phase]
- Severity and scope: [IMPACT LEVEL - localized vs. widespread, contained vs. spreading, short-term vs. long-term implications]
- Stakeholders affected: [EMPLOYEES, CUSTOMERS, INVESTORS, PARTNERS, REGULATORS, MEDIA, COMMUNITIES, PUBLIC]
- Known facts and unknowns: [WHAT WE KNOW FOR CERTAIN vs. WHAT REMAINS UNCLEAR]
- Timeline: [WHEN CRISIS BEGAN, KEY EVENTS, EXPECTED DURATION]
- Root causes (if known): [IMMEDIATE TRIGGERS AND UNDERLYING SYSTEMIC ISSUES]
- Regulatory or legal implications: [COMPLIANCE REQUIREMENTS, POTENTIAL PENALTIES, REPORTING OBLIGATIONS]
- Media and social media activity: [CURRENT COVERAGE, PUBLIC SENTIMENT, MISINFORMATION SPREAD]
- Previous crisis history: [RELEVANT PAST CRISES AND HOW THEY WERE HANDLED]
- Available resources: [CRISIS TEAM, SPOKESPERSONS, BUDGET, EXTERNAL SUPPORT]

Deliver a comprehensive crisis communication and management plan that includes:

1. Immediate Crisis Assessment and Triage (First 24-48 Hours):
   - Crisis Classification: Categorize using severity matrix (Low/Medium/High/Catastrophic) and type (operational, reputational, financial, regulatory, safety, security)
   - Stakeholder Impact Analysis: Identify who is affected, how severely, and what their immediate concerns are
   - Threat Assessment: Evaluate threats to people safety, financial stability, regulatory compliance, reputation, operational continuity, and long-term viability
   - Information Gaps: Identify critical unknowns that need immediate investigation to inform response strategy
   - First Response Priorities: Define the top 3-5 actions that must occur in the first 24-48 hours (safety measures, notification requirements, containment actions)
   - Activation Threshold: Confirm whether the situation warrants full crisis team activation or can be managed through standard incident response

2. Crisis Management Team Structure and Governance:
   - Crisis Management Team (CMT) Composition: Define core team including CEO/Executive Sponsor, Crisis Manager/Coordinator, Communications Lead, Legal Counsel, HR Lead, Operations Lead, IT/Security (if relevant), and relevant business unit leaders
   - Roles and Responsibilities: Clear RACI matrix for key decisions (Who Recommends, who has Authority to approve, who must be Consulted, who is Informed)
   - Decision-Making Authority and Escalation: Define what decisions can be made by CMT vs. requiring board involvement, with clear thresholds and escalation protocols
   - Crisis Command Center: Physical or virtual space for team coordination with communication tools, documentation systems, and stakeholder contact databases
   - Meeting Cadence: Crisis briefing schedule (e.g., every 6-12 hours during acute phase, daily during recovery, with ad-hoc sessions as needed)
   - Documentation Protocols: Systems for logging decisions, actions, communications, and timestamp records for legal protection and post-crisis review

3. 10Cs Crisis Communication Framework Application:
   - Care: Demonstrate genuine concern for those affected. Prioritize safety, well-being, and support before defensive positioning
   - Commitment: Express clear commitment to resolving the issue, supporting affected parties, and preventing recurrence
   - Consistency: Ensure all spokespersons deliver aligned messages across all channels and touchpoints
   - Clarity: Use plain language avoiding jargon, legal hedging, or corporate speak that obscures meaning
   - Control: Take control of the narrative by communicating proactively rather than reactively responding to media inquiries
   - Confidence: Project calm, competent leadership even amid uncertainty. Acknowledge unknowns without appearing lost or defensive
   - Competence: Demonstrate organizational capability to handle the crisis through specific actions, expertise deployment, and resource mobilization
   - Credibility: Build trust through transparency, honesty about mistakes, and follow-through on commitments
   - Collaboration: Engage stakeholders as partners in resolution rather than adversaries to be managed
   - Closure: Provide clear information about resolution, lessons learned, and preventive measures to enable stakeholder closure

4. Stakeholder-Specific Communication Strategy:
   - Employees (Internal First Rule): Always inform employees before external communications. Provide more detail, context, and support resources. Hold town halls, manager briefings, and create internal FAQ. Address job security concerns explicitly.
   - Customers/Clients: Focus on how they are affected, what actions they should take, how you're protecting them, and what support is available. Provide direct channels for questions and assistance.
   - Investors/Shareholders: Emphasize financial implications, risk mitigation, governance response, and long-term business impact. Comply with disclosure requirements. Coordinate with investor relations and legal.
   - Board of Directors: Provide comprehensive briefings on situation, response actions, financial/legal implications, and reputational risks. Seek guidance on major decisions and keep informed of developments.
   - Media: Designate single spokesperson or small team. Prepare holding statements, press releases, and media Q&A. Establish media monitoring and rapid response protocols. Consider proactive media briefings vs. reactive responses.
   - Regulators/Government: Understand mandatory reporting requirements and timelines. Assign liaison to coordinate with regulatory bodies. Provide transparent, complete information to demonstrate cooperation and compliance.
   - Partners/Suppliers: Explain operational impacts, continuity plans, and what support or actions are needed from them. Maintain relationship trust through transparency.
   - Community/Public: Address broader societal concerns, environmental impacts, or safety issues. Engage community leaders and local officials as appropriate.

5. Core Message Development and Holding Statements:
   - Primary Message Framework addressing:
     * Acknowledgment: "What happened and what we know so far"
     * Concern: "How we feel about the impact on stakeholders"
     * Action: "What we're doing immediately to address the situation"
     * Accountability: "Our responsibility and commitment to resolution"
     * Prevention: "Steps to prevent recurrence"
     * Support: "Resources available for affected stakeholders"
   - Holding Statement (if full facts unknown): Template acknowledging situation, expressing concern, outlining immediate actions, and committing to updates as information becomes available
   - Key Messages by Stakeholder Group: Tailored versions emphasizing different aspects relevant to each audience while maintaining consistency on core facts
   - Message Discipline: Protocol ensuring all communications are approved through crisis team before release, with version control and audit trail

6. Multi-Channel Communication Execution:
   - Owned Channels: Website crisis hub, email notifications, employee intranet, customer portals, mobile apps
   - Social Media: Real-time monitoring, rapid response protocol, coordinated posting schedule, community management guidelines for addressing comments/questions
   - Traditional Media: Press releases, media briefings, interviews, press conferences (if warranted by severity)
   - Direct Outreach: Personal calls/emails to key stakeholders (major customers, board members, regulators, partners)
   - Hotlines/Contact Centers: Dedicated crisis hotline with trained representatives, FAQ scripts, and escalation procedures
   - Third-Party Channels: Industry associations, advocacy groups, or government agencies who can amplify your messages to relevant constituencies
   - Communication Cadence: Initial statement (within hours), update at 24 hours, then regular updates (daily during acute phase, less frequent as crisis stabilizes)

7. Media Relations and Spokesperson Strategy:
   - Spokesperson Selection: Designate primary spokesperson (typically CEO for major crises, crisis manager or relevant executive for smaller incidents). Train backup spokesperson.
   - Media Training Refresh: Rapid briefing on message discipline, bridging techniques, avoiding speculation, handling hostile questions, and maintaining composure
   - Media Q&A Preparation: Anticipate 20-30 toughest questions across all angles (facts, accountability, prevention, financial impact, leadership responsibility). Prepare approved responses.
   - Press Conference Protocols (if needed): Format, timing, location, spokesperson lineup, statement structure, and Q&A ground rules
   - Media Monitoring: Real-time tracking of news coverage, social media mentions, and narrative evolution. Identify misinformation requiring correction.
   - Rapid Response Team: Designated team monitoring media and social channels 24/7 during acute crisis phase, empowered to respond quickly within approved parameters

8. Social Media Crisis Response:
   - Social Listening: Deploy monitoring tools to track mentions, sentiment, trending hashtags, and influencer commentary across platforms
   - Response Protocols: Guidelines for when to respond publicly vs. privately, when to ignore trolls vs. address legitimate concerns, and approval processes for time-sensitive responses
   - Comment Moderation: Policies for managing comments on owned channels (delete/hide criteria, engagement guidelines)
   - Employee Social Media Guidelines: Clear guidance on what employees should/shouldn't post, how to direct inquiries, and avoiding speculation
   - Influencer Engagement: Identify key influencers (positive, neutral, negative) and strategies for engagement or correction
   - Content Publishing Suspension: Decision criteria for pausing regular marketing/promotional content during crisis to avoid tone-deaf messaging

9. SCCT Crisis Response Strategy Selection:
   - Crisis Responsibility Attribution: Assess where crisis falls on responsibility spectrum:
     * Victim (organization is also a victim - natural disaster, malicious attack)
     * Accidental (unintentional crisis with minimal organizational responsibility)
     * Preventable (organization knowingly took risky actions or violated regulations)
   - Response Strategy Recommendation based on responsibility level:
     * Victim Crises: Instructing information (what happened, how to protect themselves) and expressions of concern
     * Accidental Crises: Instructing + Adjusting information (corrective actions) + expressions of concern
     * Preventable Crises: Rebuild strategies including full apology, compensation for damages, and comprehensive corrective actions
   - Reputation Threat Assessment: Evaluate crisis history (past similar incidents increase threat), prior relational reputation (strong relationships provide protective buffer)
   - Response Strategy Justification: Explain why recommended approach matches the crisis type and responsibility attribution

10. Business Continuity and Operational Response:
    - Immediate Containment Actions: Steps to prevent crisis escalation (product removal, system shutdown, facility evacuation, service suspension)
    - Continuity Priorities: Critical operations that must continue and workarounds for disrupted functions
    - Resource Mobilization: Personnel deployment, budget allocation, vendor engagement, and external expert recruitment
    - Remediation Plan: Specific technical, operational, or procedural fixes to address root causes
    - Timeline and Milestones: Phased response with clear deliverables and completion targets

11. Legal, Regulatory, and Compliance Considerations:
    - Mandatory Reporting: Identify all regulatory notification requirements (timing, content, recipients)
    - Legal Risk Assessment: Potential litigation, penalties, or enforcement actions
    - Privilege Protection: Guidelines for maintaining attorney-client privilege during investigation and communications
    - Document Preservation: Legal hold implementation to preserve relevant documents and communications
    - Settlement/Remediation Authority: Decision rights for financial settlements, corrective action commitments, or regulatory negotiations
    - Communication Review: Legal and compliance review protocols for external communications to minimize liability while maintaining transparency

12. Recovery, Lessons Learned, and Reputation Restoration:
    - Recovery Phase Communications: Shift from crisis mode to recovery messaging emphasizing resolution, lessons learned, and strengthened systems
    - Post-Crisis Review: Structured debrief examining what worked, what didn't, decision quality, communication effectiveness, and stakeholder satisfaction
    - Corrective Action Plan: Documented improvements to policies, procedures, training, systems, or governance to prevent recurrence
    - Reputation Monitoring: Ongoing tracking of brand sentiment, stakeholder confidence, and media narrative over 3-6 months post-crisis
    - Relationship Repair: Targeted engagement with stakeholders whose trust was damaged, including personal outreach, transparency commitments, and demonstrated change
    - Crisis Plan Updates: Incorporate lessons learned into crisis management plan, communication templates, and team training
    - Organizational Resilience Building: Long-term investments in risk management, early warning systems, crisis preparedness, and organizational culture that encourages transparency and rapid escalation

Format your response as an executive crisis playbook with clear sections, stakeholder communication templates, decision frameworks, and hour-by-hour action plans for the first 72 hours. Include specific messaging examples, media Q&A, and social media response templates tailored to your crisis context. Ensure the plan balances speed with accuracy, transparency with legal protection, and empathy with accountability. Recognize that crisis management is as much about leadership presence, stakeholder trust, and organizational values as it is about tactical communication execution.

Open in ChatGPT

Blanks: Organization name and industry · Emerging/active/escalating/recovering describe current phase · When crisis began, key events, expected duration · Immediate triggers and underlying systemic issues · Compliance requirements, potential penalties, reporting obligations · Current coverage, public sentiment, misinformation spread · Relevant past crises and how they were handled · Crisis team, spokespersons, budget, external support

How to use it

This prompt is designed for C-suite executives, crisis management teams, communications professionals, and board members facing organizational crises requiring rapid, coordinated response. Replace all bracketed placeholders with specific details about your crisis type, stakeholder impacts, timeline, and organizational context. The more complete and honest your inputs (including unknowns, mistakes made, and previous crisis handling), the more realistic and actionable your crisis plan will be. Use this prompt for active crises requiring immediate response, crisis preparedness planning and scenario development, crisis simulation and tabletop exercises, post-crisis reviews and lessons learned documentation, or updating existing crisis management protocols with current best practices.

Tips

Never say 'no comment' as it suggests guilt or evasion. Instead use bridging language such as 'We don't have that information yet, but what I can tell you is...' or 'We're actively investigating that specific question and will provide updates as we learn more.' This maintains transparency while avoiding speculation.
Activate the crisis team for potential crises before they fully materialize. It is better to activate and stand down than to delay activation and lose control of the narrative. Early activation enables proactive communication rather than reactive damage control, and teams can always scale down response if the situation de-escalates.
Focus initial communications on what you're doing, not what you're investigating. Audiences want to know about protective actions, containment measures, and support resources, not internal review processes. Shift from passive investigation language to active resolution language demonstrating leadership and control.
Prepare for the 72-hour reality check. Initial holding statements and expressions of concern buy goodwill for approximately 72 hours, after which stakeholders expect substantive updates on progress, causes, accountability, and preventive measures. Have investigation and remediation plans that can demonstrate meaningful progress by this critical milestone.
Remember that crisis communication is 70% listening and 30% telling. Establish feedback mechanisms through hotlines, social monitoring, surveys, and direct outreach to understand stakeholder concerns in real-time. The most effective crisis communicators adapt messaging based on what confusion, fears, or questions are actually emerging rather than what they assume stakeholders care about.
Test your crisis plan through tabletop exercises at least annually, simulating different crisis scenarios with your Crisis Management Team. These exercises reveal gaps in protocols, unclear decision rights, communication bottlenecks, and technology limitations before real crises occur. Include board members in exercises periodically to align on escalation thresholds and decision authority.

The Critical First Hours

The first 24-48 hours of a crisis are the most critical for shaping outcomes and narrative control. During this period, executives must balance speed with accuracy, transparency with legal protection, and decisive action with information gathering. Activate your Crisis Management Team immediately, even if full facts are unknown. Establish a communication command center and meeting cadence, typically every 6-12 hours during acute phases. Issue a holding statement within hours acknowledging the situation, expressing concern, outlining immediate actions, and committing to updates. Always inform employees first before external communications to prevent them from learning about the crisis through media or social channels. Designate a single spokesperson to ensure message consistency. Establish media monitoring and social listening protocols to track narrative evolution in real-time. Focus initial efforts on safety and containment before reputation management. Document all decisions, communications, and timelines meticulously for legal protection and post-crisis review. Most importantly, resist the temptation to wait for perfect information; acknowledge what you know and don't know transparently while demonstrating you're actively investigating and will provide updates as facts emerge.

Stakeholder Prioritization and Segmented Communication

Different stakeholders have different information needs, emotional states, and communication preferences during crises. Employees require the most detailed information, context about job security, and clear guidance on how to handle external inquiries. Customers need to understand how they're affected, what protective actions to take, and what support is available. Investors focus on financial implications, risk mitigation, and long-term business impact. Regulators demand compliance with notification requirements and transparent cooperation. Media seeks facts, accountability, and human interest angles. The cardinal rule is employees first—they should never learn about a crisis from external sources as this destroys internal trust and creates secondary crises. Develop stakeholder-specific messaging that emphasizes different aspects of the core narrative while maintaining factual consistency. Use appropriate channels for each group: town halls and manager cascades for employees, direct calls for major customers and board members, press releases for media, regulatory filings for investors and government. Establish feedback mechanisms to monitor stakeholder concerns and questions in real-time, adapting communications based on what confusion or concerns are emerging. Resist one-size-fits-all communication; effective crisis response requires segmented, tailored engagement recognizing distinct stakeholder needs.

Crisis Response Strategies and SCCT Framework

Not all crises warrant the same response strategy. The Situational Crisis Communication Theory (SCCT) provides evidence-based guidance for matching response strategies to crisis types based on organizational responsibility. Victim crises where the organization is also a victim such as natural disasters or malicious attacks require instructing information helping stakeholders protect themselves plus expressions of concern. Accidental crises involving unintentional problems with minimal responsibility such as technical failures or supply chain disruptions warrant instructing information plus adjusting information about corrective actions and compensation for damages. Preventable crises where the organization knowingly took risks or violated regulations such as safety violations or executive misconduct require full rebuild strategies including sincere apologies, compensation, and comprehensive corrective actions demonstrating accountability. Mismatching response to crisis type creates credibility problems: over-apologizing for victim crises can inappropriately suggest responsibility while under-responding to preventable crises appears evasive and defensive. Prior crisis history and relational reputation influence threat levels: organizations with strong stakeholder relationships have protective buffers while those with previous similar crises face amplified reputation damage. Select response strategies based on responsibility attribution, not based on what minimizes short-term criticism or legal exposure, as audiences detect and punish inauthenticity.

Social Media Crisis Dynamics and Real-Time Response

Social media fundamentally changes crisis dynamics by accelerating information spread, empowering individual voices, and creating permanent public records of organizational response. Crises that might have taken days to develop in traditional media now escalate in hours or minutes. Deploy social listening tools immediately to monitor mentions, sentiment, trending hashtags, misinformation spread, and influencer commentary across platforms. Establish rapid response protocols empowering a designated team to respond within approved parameters without requiring executive approval for every post, as speed is essential to narrative control. Develop clear guidelines distinguishing when to respond publicly versus privately, when to ignore trolls versus address legitimate concerns, and when to escalate to legal or executive teams. Consider pausing regular marketing content during crisis periods to avoid tone-deaf messaging. Provide clear social media guidelines to employees explaining what they should not post, how to direct inquiries to official channels, and the importance of avoiding speculation. Monitor for misinformation requiring correction, coordinating with platforms when necessary to address false or harmful content. Remember that social media audiences expect human, authentic communication; overly corporate or evasive responses amplify backlash. The goal is not to win every argument but to demonstrate responsiveness, transparency, and genuine concern while controlling spread of inaccurate information.