Crisis Communications Playbook for PR Teams

TL;DR: When a PR crisis hits, will your team be ready? A crisis communications playbook gives you fewer decisions to make under pressure. The playbook shared on this page covers how to prepare your response team, escalation paths, holding statements and channels. It also explains how to put that preparation into action when things start moving fast.

Key insights:

• A strong crisis communication plan covers three phases: preparation, response and recovery. What happens after the immediate crisis matters just as much as the first response.

• Speed matters, but verified information matters more. Teams need a clear process to confirm facts and assess severity before they decide what to communicate.

• Holding statements buy teams valuable time when the full picture isn’t yet clear. They should acknowledge what’s known, recognize concerns, explain what’s being done and point people to the next update.

• Crisis plans need to be tested. Simulations, contact-tree tests and spokesperson training can all reveal gaps before the PR team has to work under real pressure.

• PR software can support your crisis communications playbook but doesn’t replace it. These tools can improve visibility and coordination, but teams still need clear ownership, sound judgment and a tested response process.

  
  

A crisis rarely arrives at a convenient time. The first alert may come from a journalist, an employee, a monitoring tool or a customer post that suddenly starts spreading. Within minutes, leadership wants answers, legal needs to understand what actually happened, and regional communications teams need to know what they can say.That’s exactly when you don’t want to decide who owns the response, where the latest contact list lives or who needs to approve a holding statement.A crisis communications plan gives you a structure to work from before pressure takes over. It defines the people, processes, messages and escalation paths that can help you prepare for a crisis, respond with confidence and learn from what happened.This guide walks you through those three phases, with practical steps for building a crisis communication plan your team can put into practice today.

The basics of crisis communications

Crisis communications is how an organization communicates before, during and after an event that could affect people, operations, finances or reputation. 

The goal isn’t to “control” every interpretation of events. Unfortunately, that’s not possible. The goal is to make accurate information available quickly, coordinate the organization’s response, and give stakeholders a reliable, up-to-date source of information. A useful crisis management plan usually covers three broad phases:

1. Pre-crisis: Prepare the team, identify risks, establish protocols and test the plan.

2. During the crisis: Verify what happened, activate the right people and communicate quickly and consistently.

3. Post-crisis: Keep stakeholders informed, evaluate the response and update the plan.

What types of crises should you prepare for?

The exact risks depend on the organization, but most crisis communications plans should account for several crisis categories, as outlined in the table below:

Pre-crisis: Build the plan before you need it

Crises feed on uncertainty. Preparation reduces the number of decisions your team has to make while facts are incomplete and scrutiny is high.The UK Government Communication Service’s STOP framework is one useful way to structure this work. STOP stands for “Strategy, Tactics, Organization and People.” 

In practice, it prompts teams to define what they’re trying to achieve, how they’ll communicate, how the response will operate and who needs to be involved in crisis management.

Here are the steps to follow:

1. Assemble the crisis response team

Your crisis response team should be small enough to move quickly but broad enough to make informed decisions. Typical roles include:

• Communications lead: Coordinates the communications response, drafts messaging and keeps the wider team aligned.

•  Spokesperson: Represents the organization publicly and delivers approved messages to journalists and other stakeholders.

• Legal counsel: Advises on legal and regulatory risk and reviews communications where appropriate.

• Executive leadership: Makes or sponsors high-impact decisions and ensures the communications response aligns with the organization’s wider actions.

• Operational or subject-matter experts (SMEs): Supply verified facts from the part of the organization closest to the incident.

Document who fills each role, who acts as backup and how to reach them outside normal working hours.

2. Define communication and escalation protocols

Everyone should know what happens after the first credible alert. Who verifies it? Who calls the first meeting? What triggers escalation to senior leadership? Who can approve a holding statement? Which decisions require legal, security or regulatory input?A simple severity classification can help. For example, a Level 1 incident may be contained locally, while a Level 3 crisis could require an enterprise-wide response. The labels matter less than having agreed criteria and matching each level to a clear escalation protocol.

3. Build a contact tree

A contact tree sets out who needs to be informed, in what order and through which channels. Include internal decision-makers as well as external parties you may need to reach quickly, such as agencies, regulators, emergency services or specialist advisers.Keep the tree somewhere the team can reach even if normal systems are unavailable. A contact list that exists only inside the system affected by the crisis doesn’t help.

4. Prepare holding statements and messaging frameworks

A holding statement buys the organization time to verify facts without going silent. Prepare adaptable templates for your highest-risk crisis scenarios, but don’t pre-write details you simply don’t know yet.A useful holding statement usually does four things: 

• Acknowledges what’s known.

• Recognizes the concern.

• Explains what the organization is doing.

• Tells people where the next verified update will appear.

Keep pre-approved messaging factual and flexible. The aim is to reduce drafting time, not force a live crisis scenario into language that no longer makes sense.

5. Train and test the plan

A crisis communication plan that nobody has practiced is still just a theoretical exercise. 

Run simulations, test your contact trees and talk spokespersons through difficult questions. Check whether team members can find the latest templates quickly and whether approvals still work when key decision-makers are unavailable.

Update the playbook when teams, suppliers, systems or risks change.

During a crisis: Put the playbook into action

The first hours of a crisis are usually defined by incomplete information and intense demand for answers. Speed matters, but unverified speed creates a second problem. The key is to move quickly without getting the facts wrong.

Step 1: Detect and verify the issue

Confirm what’s happened through credible internal sources. A social post, media inquiry or system alert may be the first signal, but it shouldn’t automatically become the organization’s version of events. 

Assign responsibility for verification and record what’s confirmed, what’s still unknown and when the information was last updated.

Step 2: Classify the severity

Apply the severity criteria in your crisis management plan. Consider impact on people, operations, customers, reputation and regulatory obligations. 

The classification should determine which stakeholders are activated and how quickly decisions need to move.

Step 3: Activate the crisis response team

Alert the right people, confirm roles and establish one working channel for the response. The team should know where verified facts, draft messages, approvals and decisions are recorded so parallel email and chat threads don’t create competing versions of reality.

Step 4: Draft the first message

Start with what you know. Acknowledge the situation, show appropriate concern, explain the action being taken and say when or where people can expect another update. 

Avoid speculation and resist the urge to fill gaps simply because journalists or social audiences are asking for more.

Step 5: Choose channels by stakeholder

Different audiences need different levels of detail and different delivery routes. 

Employees may need an internal update before a public announcement. Customers may need a direct service message. Journalists need an accessible statement and media contact. Regulators or investors may require direct communication through established processes.

Keep the core facts consistent but adapt the format and level of detail to the audience.

Step 6: Monitor, respond and adapt

Track media coverage, stakeholder questions, social conversations and new operational information. Use media monitoring to spot factual gaps, misinformation, recurring questions and places where the existing message doesn’t answer what people need to know.

Update communications when the facts change and keep a record of what was published, when and with whose approval.

Post-crisis: Review, recover and improve

A crisis doesn’t necessarily end when media attention drops. Customers, employees, regulators and other stakeholders may need updates long after the first response.The post-crisis phase should cover both reputation management and operational learning. 

• Continue monitoring: Track coverage, questions and emerging issues that may require another response.

• Follow up with stakeholders: Provide promised updates and address unresolved concerns.

• Run a post-crisis review: Compare what happened with the playbook. Where did the team lose time? Which approvals worked? What information was difficult to find?

• Update protocols: Revise contact trees, templates, escalation rules and training based on what you learned.

• Demonstrate change: If the crisis exposed a real failure, communicate the concrete actions the organization is taking to address it.

Clear updates, visible corrective action and consistent follow-through help to rebuild trust.

Crisis communications playbooks in action

Real crises are messier than frameworks. The two cases below show why speed, stakeholder communication and response quality are important.

1. Facebook and Cambridge Analytica

In March 2018, The Guardian and other major news outlets brought renewed scrutiny to how an app obtained data from tens of millions of Facebook users and how Cambridge Analytica used it for political profiling.

Facebook faced criticism over its data practices and its response. Mark Zuckerberg later apologized, the company announced restrictions on third-party access, and it introduced additional privacy controls.

The lesson for crisis communicators? When an organization already knows about a serious issue, delay creates space for journalists, regulators and other stakeholders to define the story before the organization explains what it knew and what it’s doing.

2. Malaysia Airlines Flight MH370

Malaysia Airlines Flight MH370 disappeared on March 8, 2014, while flying from Kuala Lumpur to Beijing, an incident that triggered a major international search and an extraordinarily difficult communications environment.The airline and Malaysian authorities provided briefings and updates while families, journalists and governments sought answers that simply didn’t yet exist. 

The case illustrates one of the hardest realities of crisis communication: sometimes there’s no satisfying new information to give. However, when this happens, stakeholder communication is still critical. 

Best practice is to distinguish confirmed facts from uncertainty, keep affected people at the center of the response, and avoid letting pressure for certainty produce speculation.

Where crisis communication software fits

This playbook defines how your communication team should respond during a crisis. The right software supports the work. During a crisis, your team may need media monitoring and social listening software to understand how the story is developing, collaboration tools to coordinate drafts and approvals, and a reliable place (like an online newsroom) to publish verified updates. Documentation platforms can also help your team to keep your crisis communication plan, escalation protocols, contact trees and templates accessible.

Good PR software can help the people using your crisis communication plan work with better visibility and fewer disconnected tools. For a full breakdown of the tools available, see our crisis communication software guide.

Your newsroom can become a reliable source during a crisis

When information is moving quickly, an owned newsroom gives journalists, influencers, investors, employees and other stakeholders one place to check the organization’s latest verified position.Software like PR.co also helps communications teams keep newsroom publishing, collaboration, monitoring, localized PR and PR analytics connected. Central teams can maintain oversight while contributors and regional teams work within clear permissions.That doesn’t make the software a crisis strategy on its own. The team still needs judgment, clear ownership and a tested response process. But once those elements are in place, having dependable publishing, monitoring and collaboration infrastructure can make it easier to communicate quickly without losing control of what goes live.Read more about how PR.co supports crisis communications. Alternatively, book a demo to see our platform in action.

FAQs

1. How should PR teams communicate across different channels?

Start with the audience and what they need to know, and keep the underlying facts consistent across channels, even when the format changes.

Your corporate website or newsroom can act as the authoritative home for detailed public updates. Social channels are useful for timely updates and directing people to that source. Press statements and briefings give journalists access to verified facts and a spokesperson. Employees, regulators, investors and affected customers may also need direct communication rather than learning about the situation from a public post. 

2. What’s the role of a spokesperson in a crisis?

The spokesperson is the organization’s public voice. They need to deliver accurate information, explain what the organization is doing and respond to questions without speculating.Good spokesperson preparation covers difficult questions, the limits of what can be disclosed, the tone appropriate to the situation and a clear process for getting new facts as the crisis develops.

3. How should a spokesperson handle difficult questions?

They should answer the question as directly as the available facts allow. If they don’t know, they should say so and explain how they’ll follow up. Speculation should be avoided.Preparation helps. Anticipate the hardest credible questions before a briefing, rehearse concise answers and agree which topics require specialist or legal input. Bridging back to a key message can be useful, but it shouldn’t become a way to dodge legitimate questions. Audiences notice.

4. What should a holding statement include?

This statement should be short, factual and adaptable. It normally acknowledges the incident, recognizes the concern it may cause, explains the immediate action being taken and tells stakeholders where they can find further verified updates.The organization should avoid promises they can’t keep or details that haven’t been confirmed. The purpose is to communicate responsibly while key stakeholders establish a fuller picture.

5. What does a crisis communication template look like?

A simple starting structure could look like this:[Headline: Company responds to incident]We are aware of [brief confirmed description of the incident] and understand the concern this may cause.Our team has [confirmed action already taken]. We are currently [what’s being investigated or addressed].Our priority is [relevant priority: safety, service continuity, affected customers, data security, etc.].We will provide verified updates at [newsroom/webpage/channel] as more information becomes available.Media contact: [name / email / phone]Treat this as a framework, not a fill-in-the-blanks response. Every live statement should reflect the facts and needs of the specific situation.