Guide · May 21, 2026 · 10 min read · by the Harbor Line Media team

Crisis-ready: the PR prep you do before you need it

Every crisis feels unprecedented from the inside, and almost none of them are. A product fails, a customer's data leaks, a senior figure says something they should not have, a supplier collapses and takes your delivery promises with it. The specifics vary; the shape rarely does. What separates the companies that come through with their reputation intact from the ones that compound the damage is almost never cleverness in the moment. It is preparation done quietly, months earlier, when nothing was on fire and there was no obvious reason to bother. The work feels abstract precisely because the threat is hypothetical, which is exactly why so few companies do it until the day they wish they had.

The uncomfortable truth is that the first hour of a crisis is the worst possible time to start thinking about how you handle crises. Adrenaline is high, facts are scarce, and the instinct to either say nothing or say too much is overwhelming. Preparation does not make a crisis pleasant, but it converts blind panic into following a plan, and that difference is everything. This piece sets out the work worth doing before you need it: the holding statement, the named spokesperson, the monitoring that buys you warning, and a playbook for the first hour.

Decide what counts as a crisis

Not every bad day is a crisis, and treating every complaint as a five-alarm fire burns out a team and dulls its judgement. So the first piece of preparation is a shared, written sense of what actually warrants the crisis response. A useful test is whether the situation threatens to cause material harm to people, to the business, or to its reputation beyond what normal customer service or operations can absorb, and whether it is likely to attract outside attention.

Sketch the scenarios most plausible for your business specifically. A health brand worries about a safety issue; a fintech worries about an outage or a breach; a consumer brand worries about a viral complaint or a founder's misstep. You will not predict the exact event, but mapping the categories tells you who needs to be involved in each and what information you would need fast. This mapping is not a grim exercise in catastrophising. It is the difference between recognising a situation early and arguing internally about whether it even qualifies while the clock runs.

Set tiers, too. A minor issue handled by one manager, a serious issue that pulls in leadership and communications, a severe issue that involves the chief executive and possibly lawyers and regulators. Knowing in advance which tier an event falls into removes a layer of paralysing debate at the worst possible moment.

Write holding statements before the storm

In the first minutes of a crisis you will be asked to say something long before you know enough to say something complete. The holding statement exists for exactly this gap. It acknowledges that you are aware of the situation, that you take it seriously, and that you are establishing the facts, without admitting things you do not yet know or speculating about cause. It buys you time without leaving a vacuum that others will fill on your behalf.

Draft these in advance for your most plausible scenarios, leaving blanks for the specifics. A good holding statement is short, human, and free of defensive legalese. It says, in effect, "we know, we care, we are looking into it, and we will update you." What it does not do is minimise, blame, or promise outcomes you cannot guarantee. The tone matters as much as the content; a statement that sounds like it was written by a frightened legal department reads as evasion, while one that sounds like a person taking responsibility buys goodwill.

Keep these drafts somewhere the right people can reach them quickly, and review them periodically so they do not go stale. The point of writing them cold is that you are calm, articulate, and capable of nuance now, in a way you will not be at the moment the phone starts ringing. A holding statement is a different instrument from a routine announcement, and it helps to be clear on when a formal statement serves you better than a pitch to individual reporters.

Name your spokesperson now

One of the quiet failures in a crisis is the scramble to work out who speaks. Reporters want a named human, not a faceless "spokesperson," and they want them quickly. Decide in advance who that person is for each tier of crisis, who their backup is when the first choice is on a plane or unreachable, and what authority they have to speak without waiting for sign-off on every word.

The right spokesperson is senior enough to carry credibility, calm under pressure, and trained to handle hostile or repetitive questioning without losing composure. That last quality is learnable, and a few hours of media training before you need it pays for itself many times over. Knowing how to stay on message, how to acknowledge a difficult question without taking the bait, and how to avoid filling silence with damaging speculation are skills, not instincts. They overlap heavily with the everyday discipline of being a credible source, which is why someone who has practised being quoted as an expert source in calmer times usually handles the hard interviews better.

Clarify the chain of authority around the spokesperson too. Who do they consult before speaking, who can they override in the interest of speed, and at what point does the chief executive step in personally. A crisis where the public face of the company keeps disappearing to seek permission looks like a company that is not in control, which is its own kind of damage.

Monitor so you hear it first

The worst way to learn about a crisis is from a journalist's call asking for comment on something you did not know was happening. Monitoring exists to make sure you hear it first, or at least early enough to respond rather than merely react. This does not require an expensive war room. It requires consistent attention to the channels where trouble surfaces for your kind of business.

For most brands that means a handful of things watched routinely: mentions of your brand and key people across news and social platforms, the review sites and forums where your customers gather, and any spikes in customer service complaints that might signal a pattern rather than a one-off. Set alerts where you can, and assign a person to scan the rest on a regular rhythm. The aim is to notice the shift from a normal grumble to an emerging story while it is still small.

Build a simple escalation path from monitoring to action. Whoever spots the early signal needs to know exactly who to tell and how, without worrying that they are overreacting. A culture where people feel safe raising a possible problem early is worth more than any tool, because the cost of a false alarm is a few minutes and the cost of a missed signal can be a day's head start handed to the story instead of to you.

The first-hour playbook

When something does break, the first hour sets the tone for everything that follows. A written playbook turns that hour from chaos into a sequence. The exact steps will vary, but a workable version runs roughly like this:

1. Confirm the facts you actually know, and clearly separate them from rumour and assumption.
2. Convene the response group for the relevant tier, by a pre-agreed channel so nobody is hunting for a phone number.
3. Assess scale and trajectory: who is affected, is it spreading, and where is the attention coming from.
4. Issue the holding statement to buy time and prevent a vacuum, adapting the prepared draft to the specifics.
5. Brief your spokesperson and your internal teams so customer-facing staff are not blindsided.
6. Decide the next update window and stick to it, because silence after a holding statement invites speculation.

Two principles run through all of it. First, do not let the desire for a perfect, complete response delay any response; a timely acknowledgement beats a polished statement that arrives after the story has hardened. Second, never say anything you are not sure is true, because a correction later costs far more credibility than an honest "we do not yet know." The playbook's job is to make these principles automatic rather than something you have to summon under pressure.

Look after your own people

External communication dominates crisis thinking, but internal communication often determines how well the external effort holds together. Your employees will hear about the crisis, will be asked about it by friends and family, and may be the source of leaks if they feel left in the dark. Brief them early, honestly, and with clear guidance on what they can and cannot say. A workforce that understands what is happening and trusts that leadership is handling it becomes part of the response rather than a liability.

Give people a single internal source of truth, updated as the situation develops, so they are not relying on the same fragmentary news as everyone else. Tell them who to direct enquiries to rather than expecting them to field questions themselves. And acknowledge the human strain a crisis puts on the team, because the people managing it are often working long, tense hours, and burnout in the response group degrades judgement exactly when you need it most.

Remember the audiences that are neither press nor staff. Customers want to know whether they are affected and what you are doing about it; investors and partners want to know the business is in control; regulators, in some sectors, want to know within a fixed window or you face penalties on top of the original problem. Map these stakeholders in advance, decide who owns each relationship, and align the messages so a customer email and a press statement do not contradict each other. Inconsistency across channels is its own crisis, and it is entirely avoidable with a little forethought.

Review and rehearse

Preparation decays if it sits in a drawer. Revisit your crisis materials on a regular schedule, because spokespersons change roles, contact details go out of date, and new categories of risk emerge as the business grows. A plan that names someone who left last year and a channel nobody checks anymore is barely better than no plan at all.

After any real incident, hold a calm review once the pressure has lifted. What did the monitoring catch early and what did it miss; did the holding statement hold up; was the right person able to speak quickly; where did the plan and reality diverge. Capture the lessons in writing and fold them back into the materials while the memory is fresh. A crisis you survive teaches more than any rehearsal, but only if you stop to learn from it rather than simply exhaling and moving on.

The most valuable proactive habit is the occasional rehearsal. Run a tabletop exercise: pick a plausible scenario, gather the response group, and walk through it as if it were real, without warning the wider organisation. These dry runs surface the gaps no document reveals, the unclear authority, the missing phone number, the holding statement that reads badly out loud, the spokesperson who freezes. They are uncomfortable, which is the point; far better to discover the weaknesses in a meeting room than at the moment a real story breaks. Being crisis-ready is not a state you reach once. It is a discipline you maintain quietly, in the calm, so that when the calm ends you are following a plan instead of inventing one.