Crisis Communication Protocols: A Manual for Companies
It's 7 a.m. A former employee has just posted a viral thread accusing your company of abusive labor practices. Reporters are already calling. Your communications team is looking at you, waiting for instructions. And you have no idea what to say first, who to call or which channel to use. That moment of paralysis is exactly what a crisis protocol eliminates.
A crisis communication protocol isn't just another document to file away: it's the survival manual that makes the difference between a response that controls the narrative and chaos that fuels the fire. When everything is falling apart, this document is the only thing that keeps your team aligned, fast and consistent.
The numbers don't lie. Companies with a well-designed, rehearsed protocol:
- Respond faster (hours vs. days)
- Make fewer communication mistakes
- Keep messages consistent across every channel
- Reduce the reputational impact of the crisis
- Get back to normal sooner
In this article, I'll give you the exact step-by-step process for creating a protocol that actually works when you need it. And if you already have one sitting in a drawer, it's time to pull it out, review it and make sure it's not just a worthless piece of paper.
The trap 80% of companies fall into
Having a crisis protocol on file doesn't protect you. A protocol nobody has rehearsed is as useless as having none at all. Real protection comes from every person on your team knowing exactly what to do, without thinking, when the alarm goes off.
1. Essential elements of the protocol
A complete crisis communication protocol should include:
Definition and scope
What counts as a crisis, the types covered and the scope of application.
Organizational structure
Crisis committee, roles, chain of command and emergency contacts.
Activation procedures
Criteria, alert levels and the process for convening the team.
Communication strategy
Principles, key messages, templates and Q&A document.
Channel management
Protocol by channel, owners and response times.
Resources and tools
Monitoring, internal communication and external vendors.
2.1. Definition and scope
- What counts as a crisis for the purposes of the protocol
- Types of crises covered
- Scope of application (entire company, specific divisions)
2.2. Organizational structure
- Makeup of the crisis committee
- Roles and responsibilities of each member
- Chain of command and decision-making
- Up-to-date emergency contacts
Pro tip
Keep emergency contacts in a format that's accessible offline (downloadable PDF, printed card). In a real crisis, internal servers may be down or inaccessible.
2.3. Activation procedures
- Criteria for activating the protocol
- Alert levels
- Process for convening the committee
- First actions to take
2.4. Communication strategy
- Communication principles
- Key messages by type of crisis
- Statement templates
- Q&A document
2.5. Channel management
- Protocol for each channel (media, social media, internal)
- Owner of each channel
- Target response times
2.6. Resources and tools
- Monitoring tools
- Internal communication platforms
- Media and stakeholder contacts
- External vendors (agencies, lawyers)
2. The crisis communication team
The crisis communication team is the operational core during a critical situation. It needs to be defined before any crisis occurs.
The golden rule of the crisis team
Every team member must be able to mobilize in under 30 minutes, any day of the week, at any hour. If that's not possible, you need an assigned backup.
3.1. Recommended makeup
| Role | Main responsibilities | Ideal profile |
|---|---|---|
| Crisis Communications Director | Design the strategy, approve messages, coordinate the team, report to the CEO | Communications or Marketing Director |
| Media Lead | Handle reporters, distribute statements, organize press conferences | Head of Press or PR Manager |
| Social Media Lead | Monitor mentions, post on social media, respond to comments | Senior Social Media Manager |
| Internal Comms Lead | Inform employees, manage internal channels, coordinate with HR | Internal Communications Director |
| Legal Support | Review statements, advise on legal risks, coordinate with outside counsel | Corporate legal counsel |
3.2. Emergency contacts
Keep an up-to-date list with:
- Personal cell phone numbers for every member
- Alternate emails
- Backup contacts for each role
- Contacts for key external vendors
This list should be reviewed at least quarterly.
Common mistake: outdated contacts
35% of crisis protocols have outdated contact information. A phone number that doesn't work at 3 a.m. can cost you hours of response time and thousands of euros in reputational damage.
3. Activation criteria and process
Not every negative situation is a crisis. Clearly define when the protocol is activated.
4.1. Activation criteria
The protocol is activated when at least one of these criteria is met:
- Negative coverage in national media
- Negative content going viral on social media
- An incident affecting the safety of customers or employees
- Significant legal action against the company
- Resignation or dismissal of key executives
- A leak of confidential information
- A cyberattack affecting operations or data
- Any situation that, in the Communications Director's judgment, calls for a coordinated response
4.2. Alert levels
Level 1: Watch
A potentially problematic situation. Stepped-up monitoring, preparation of materials. The full committee is not activated.
Level 2: Alert
A manageable situation that requires a response. Partial activation of the team, reactive communication, daily meetings.
Level 3: Crisis
A serious situation. Full activation of the protocol, multiple meetings a day, proactive communication, 24/7 availability.
4.3. Activation process
- Detecting the situation
Any employee can alert the communications team. - Initial assessment
The Communications Director assesses the situation and its severity. - Deciding the activation level
It's determined whether this is Level 1, 2 or 3 based on the established criteria. - Convening the team
The relevant members are contacted according to the level. - First meeting
No more than 2 hours after detection, to align the response. - Assigning immediate tasks
Each member receives their specific responsibilities. - Launching the response
The defined communication strategy is executed.
Time is reputation
Companies that respond within the first 2 hours control the narrative in 67% of cases. After 8 hours, that figure drops to 11%. Your activation speed is your biggest competitive advantage in a crisis.
4. Developing key messages
Key messages are the core points you want to get across during the crisis. They must be consistent across all communications.
5.1. Characteristics of good key messages
Clear
Easy to understand, with no technical jargon.
Concise
Can be expressed in 1-2 sentences.
Consistent
The same across every channel.
Credible
Based on verifiable facts.
Centered on the audience
They address the audience's concerns.
What you should NEVER do with your messages
Don't improvise, don't speculate, don't blame third parties and, above all, never lie. A lie uncovered during a crisis multiplies the damage exponentially. If you don't have the information, say "we're looking into it."
5.2. Message structure
For each crisis, develop 3-5 key messages that cover:
- Acknowledgment
What happened (without speculating) - Empathy
We understand the impact/concern - Action
What we're doing - Commitment
What we'll do to prevent it from happening again - Information
Where to get more information/help
5.3. Sample key messages
Scenario: Data security breach
We have detected unauthorized access to our systems that may have affected some customers' data. We understand the concern this causes and we take data protection very seriously. We have activated our security protocols, brought in outside experts and notified the relevant authorities.
- Message 1: Acknowledgment
"We have detected unauthorized access to our systems that may have affected some customers' data." - Message 2: Empathy
"We understand the concern this causes and we take the protection of our customers' data very seriously." - Message 3: Action
"We have activated our security protocols, brought in outside experts and notified the relevant authorities." - Message 4: Commitment
"We are contacting potentially affected customers individually with specific information and protective measures." - Message 5: Information
"Customers can get more information at [website] or by calling [toll-free number]."
5. Managing communication channels
Each channel has its own characteristics and requires a specific approach.
| Channel | Response time | Key characteristic | Owner |
|---|---|---|---|
| News media | 2 hours | Mass reach, credibility | Media Lead |
| Social media | 30 minutes | Immediacy, virality | Social Media Lead |
| Corporate website | 1 hour | Total control, official reference | Digital Lead |
| 4 hours | Direct, customizable | Internal Comms Lead | |
| Phone | Immediate | Personal, for sensitive cases | Customer service |
6.1. News media
Characteristics: Mass reach, credibility, permanence.
Protocol:
- Route all media requests through the Media Lead
- Respond to every request, even if only to decline
- Target response time: 2 hours
- Prepare press releases for proactive distribution
- Consider exclusive interviews with key outlets
6.2. Social media
Characteristics: Immediacy, two-way communication, virality.
Protocol:
- Continuous monitoring throughout the crisis
- Target response time: 30 minutes
- Post regular updates
- Respond to comments and questions
- Don't delete negative comments (except offensive ones)
- Consider pausing advertising and scheduled content
Social media: the channel that can save you or sink you
59% of consumers expect brands to respond on social media within 1 hour during a crisis. Every minute without a response is room for others to control your narrative.
6.3. Corporate website
Characteristics: Total control, official reference.
Protocol:
- Publish official statements
- Create a dedicated crisis page if needed
- Update the FAQ
- Make sure the information is accessible and up to date
6.4. Email
Characteristics: Direct, customizable, documentable.
Protocol:
- Direct communications to affected customers
- Newsletters to the general database if appropriate
- Make sure you have mass-sending capacity
6.5. Phone
Characteristics: Personal, immediate, for sensitive cases.
Protocol:
- A dedicated crisis hotline if needed
- Scripts for the customer service team
- Escalation of complex cases
6. The spokesperson's role
The spokesperson is the company's face and voice during the crisis. Their performance can make all the difference.
7.1. Choosing the spokesperson
The spokesperson should be:
- Someone with authority and credibility
- Able to stay calm under pressure
- A skilled communicator
- Knowledgeable about the issue at hand
- Media trained
When the CEO needs to step forward
In serious crises, the CEO should be the lead spokesperson. Delegating can come across as not taking the matter seriously. A Burson study shows that 65% of the public trusts the response more when the CEO speaks directly.
7.2. Preparing the spokesperson
Before any appearance:
- A full briefing on the situation
- A run-through of key messages
- Rehearsal of tough questions
- Review of the Q&A
- Agreement on what must NOT be said
7.3. Rules for the spokesperson
Stick to the key messages
Never improvise. Every word counts.
Don't speculate
"We don't have that information confirmed."
Show empathy
Without appearing weak. Balance is key.
Don't speak off the record
Always assume everything is being recorded.
7.4. Backup spokespeople
Designate alternate spokespeople for:
- When the lead spokesperson isn't available
- Specific technical topics
- Different audiences (employees, customers, investors)
Your team needs to be ready before the crisis hits
We train your spokespeople with intensive media training and realistic drills. Don't wait until the moment arrives to find out they're not ready.
Request spokesperson training7. Statement templates
Having templates ready speeds up your response. Here are some adaptable models.
8.1. Initial statement (holding statement)
[COMPANY] - STATEMENT
[City], [Date]
[Company] is aware of [brief description of the situation].
We are actively investigating what happened and working to [immediate action].
[If anyone has been affected] Our priority is [the well-being of those affected/customers/employees].
We will provide more information as it becomes available.
For more information: [press contact]
The holding statement buys you time
You don't need to have all the answers to issue your first statement. A well-written holding statement shows that you're aware of the situation, that you're taking action and that you'll keep people informed. That's enough for the first few hours.
8.2. Update statement
[COMPANY] - UPDATE ON [ISSUE]
[City], [Date]
Regarding [situation], we would like to share the following updates:
[Point 1: What we have discovered/confirmed]
[Point 2: What actions we have taken]
[Point 3: Next steps]
[If appropriate] We regret the inconvenience caused and thank [those affected] for their patience.
We will continue to share any relevant updates.
For more information: [contact]
8.3. Apology statement
STATEMENT FROM [CEO/COMPANY]
[City], [Date]
On behalf of [Company], I want to express our most sincere apologies for [description of the problem].
What happened does not reflect our values or our standards of [quality/service/conduct].
We take full responsibility and have taken the following measures:
[List of concrete actions]
We are committed to [future commitment] to ensure this never happens again.
[CEO signature]
Beware of premature apologies
Apologizing before the facts are clear can have legal implications. Always coordinate the apology statement with your legal advisor before issuing it.
8.4. Closing statement
[COMPANY] - RESOLUTION OF [ISSUE]
[City], [Date]
We would like to inform you that [the situation/investigation/incident] has been resolved/concluded.
[Summary of what happened and conclusions]
[Actions taken and results]
[Measures implemented for the future]
We thank [customers/employees/the public] for their understanding during this period.
For any further inquiries: [contact]
8. Questions and answers document
The Q&A document is an essential tool that anticipates the questions you'll receive and provides approved answers.
The Q&A is your invisible shield
A good Q&A document with 30-50 anticipated questions covers 90% of what you'll be asked. That means your team will never improvise and never contradict itself.
9.1. Q&A structure
Organize the questions by category:
- Questions about the facts
- Questions about responsibility
- Questions about impact
- Questions about actions
- Questions about the future
9.2. Recommended format
For each question, include:
| Element | Description | Example |
|---|---|---|
| Question | Phrased the way a reporter would ask it | "How many customers are affected?" |
| Approved answer | The official answer, cleared by legal | "We have identified X units from batch Y..." |
| Key points | Messages to reinforce in the answer | Safety, transparency, swift action |
| What to avoid | Traps or topics not to get into | Approximate figures, blaming third parties |
| If pressed | Follow-up answer under pressure | "Our priority is safety..." |
9.3. Sample Q&A
Scenario: Product recall due to a defect
Q: How many products are affected?
A: "We have identified [number] units from batch [reference] manufactured between [dates]. We are proactively contacting every customer who purchased these products."
Avoid: Giving approximate figures or figures that may change.
Q: Has anyone been injured or affected?
A: "So far, we are not aware of any incident related to this defect. We acted preventively precisely to avoid any risk."
If pressed: "Our priority is our customers' safety, which is why we acted immediately when we detected the problem."
Q: How could this have happened?
A: "We are investigating the exact causes. Our quality controls detected the anomaly, which allowed us to act quickly."
Avoid: Blaming specific suppliers or employees.
9. Internal communication during the crisis
Employees are your first audience and your best ambassadors (or your worst detractors). Internal communication is critical.
Employees first, always
Your employees should learn about the situation before the public does. If they find out from the press or social media, you lose their trust and gain internal detractors who may leak information.
10.1. Internal communication principles
Employees first
They should find out before the public.
Transparency
Share what you can, and explain what you can't share.
Frequency
Update regularly, even when there's nothing new.
Two-way communication
Allow questions and feedback.
Clear instructions
What they should do if someone asks them.
10.2. Internal communication channels
Email from the CEO
For important communications.
Intranet
For reference information and updates.
Meetings
In person or virtual, for sensitive topics.
Managers
As a cascade and feedback channel.
Hotline
For confidential questions.
10.3. Content of internal communications
- What happened (official version)
- What we're doing
- How it may affect them
- What they should do if someone asks them
- Where to direct media inquiries
- Upcoming updates
10.4. Guide for employees
Provide clear instructions:
Instructions for employees handling outside inquiries
If a reporter contacts you: Don't make any statements. Say: "I'm not authorized to make statements. Please contact our communications department at [email/phone]." Write down the reporter's name, outlet and contact information. Inform the Communications Lead immediately.
On social media: Don't post anything related to the situation, not even on your personal accounts.
10. Protocol for digital channels
Digital channels require a specific protocol because of their immediacy and reach.
11.1. Monitoring
- Turn on real-time alerts
- Monitor relevant hashtags
- Track mentions of the brand and its executives
- Keep an eye on forums and review sites
- Report every hour during the acute phase
Recommended tools for crisis monitoring
Brandwatch, Mention and Brand24 let you set up real-time alerts. For a complete guide, see our article on online brand monitoring.
11.2. Responding on social media
- Post the official statement on every platform
- Pin the post to the top of the profile
- Answer questions with approved messages
- Move individual cases to private channels
- Don't get into debates or arguments
11.3. Managing comments
| Type of comment | Recommended action |
|---|---|
| Legitimate questions | Respond with official information |
| Negative but respectful | Thank them and offer more information |
| Offensive or spam | Hide or delete according to your policies |
| Misinformation | Politely correct it with facts |
11.4. Scheduled content
- Review and pause scheduled posts
- Assess whether the tone is appropriate given the context
- Pause advertising campaigns if necessary
11. Monitoring and adjustment
During the crisis, you need to monitor constantly and adjust the strategy as the situation evolves.
12.1. Metrics to track
- Sources: Who's talking? Media, influencers, the general public?
- Topics: Which aspects are causing the most concern?
12.2. Situation reports
Prepare regular reports for the crisis committee:
- Summary of media coverage
- Social media analysis
- Stakeholder feedback
- Assessment of message effectiveness
- Recommended adjustments
The situation report is your compass
A well-structured report every 4-6 hours during the acute phase allows the crisis committee to make informed decisions and adjust the strategy before it's too late.
12.3. Adjusting the strategy
Based on your monitoring, adjust:
- Key messages if they're not resonating
- Channels if some are more effective
- Communication frequency
- The spokesperson if necessary
- Tone, based on how sentiment evolves
12. Drills and training
A protocol only works if it's practiced. Drills are essential.
Everyone has a plan until they get punched in the face. Drills are those controlled punches that prepare your team for the real blow.
13.1. Types of drills
Tabletop exercise
Discussion of a hypothetical scenario with the whole team. Low cost, high learning value.
Partial drill
Practicing specific aspects (e.g., a mock press conference, a social media response).
Full-scale drill
Actual activation of the protocol with a fictional scenario. The most realistic and revealing option.
13.2. Recommended frequency
| Type | Frequency | Approx. duration |
|---|---|---|
| Tabletop exercise | Every 6 months | 2-3 hours |
| Partial drill | Annual | Half a day |
| Full-scale drill | Every 2 years | 1-2 days |
13.3. Team training
Media training
For spokespeople, at least once a year.
Social media crisis management
For the digital team.
Crisis communication
General training for the whole team.
13.4. Evaluation and improvement
After each drill:
- Debriefing
A meeting with all participants to share their impressions. - Identifying improvements
Document what worked and what didn't. - Updating the protocol
Build the lessons learned into the document. - Follow-up
Verify that corrective actions are implemented.
13. Conclusions
A well-designed, well-practiced crisis communication protocol can make the difference between a crisis that's quickly overcome and one that causes lasting damage.
Key takeaways:
- Clearly define roles, responsibilities and processes before the crisis occurs.
- Prepare templates and messages that can be adapted quickly.
- Train your team and practice with regular drills.
- Keep the protocol up to date and accessible.
- During the crisis, monitor and adjust constantly.
If you need help developing or improving your crisis communication protocol, Élite Reputación offers services to give you the backing of an expert crisis communication team, including protocol preparation, team training and drills. You can also read our article on reputational crisis management for a broader view of the subject.
FAQ Frequently asked questions about crisis communication protocols
It depends on how complex the organization is, but a solid protocol can be developed in 4-8 weeks. That includes the risk analysis phase, defining roles, drafting templates and an initial validation drill. What matters isn't speed, but that the protocol is complete and realistic.
Every company needs a protocol, regardless of size. In fact, small businesses are more vulnerable because a single crisis can hit them disproportionately hard. The protocol can be simpler, but it has to exist. A basic version with roles, contacts, templates and an activation process is enough to get started.
At a minimum, review it once a year. In addition, update it whenever there are significant changes in the organization (new executives, restructurings, new products), after every real crisis and after every drill. Emergency contacts should be reviewed quarterly.
Use common sense and follow three principles: transparency, speed and empathy. Designate a single spokesperson, centralize all communication, don't speculate and show that you're taking action. And once the crisis is over, create the protocol immediately so you're never caught unprepared again.
Every member of the crisis team should have full access. Executives and managers should be familiar with the parts that affect them (especially the employee guide). Make sure the document is available offline, since internal systems can fail during a crisis.
The only way to know is to test it with a drill. If, during the exercise, your team knows who to call, what to say and which channels to use without constantly checking the document, you're on the right track. If there's confusion, delays or contradictions, the protocol needs work.
It depends on the severity and your internal resources. For minor crises, a well-prepared in-house team may be enough. For serious crises with national media exposure, bringing in outside experts adds experience, objectivity and extra capacity. Ideally, you should have an agency identified and an agreement in place in advance so you can activate it quickly.
Silence. Not communicating is still communicating: it signals that you don't care, that you're hiding something or that you're not in control of the situation. The second most serious mistake is lying or downplaying. Both destroy trust almost irreparably. It's better to admit you don't have all the information and commit to keeping people informed than to stay silent or misrepresent the facts.
Response teams in multiple cities
We help organizations prepare and execute their communication protocols in cities such as Medellín, Mendoza, Miami and Monterrey, among other markets in Spain and Latin America.
Don't wait for a crisis to break out to discover you're not prepared
We design a custom protocol for you, train your team and run realistic drills. When the moment comes, your company will respond like clockwork.
Protect my company now