How to Handle a PR Crisis: Your First 72-Hour Plan
When a crisis breaks, you have minutes to handle it before the narrative hardens without you. Thanks to AI and social media. This guide explains how to handle a PR crisis in those first critical hours: verify the facts, activate your crisis team, designate a single spokesperson, issue a brief holding statement, and pause all scheduled content. That's the sequence. Everything after that is execution and recovery.
Many organizations fail a crisis not because they said the wrong thing, but because they said nothing fast enough, or too many people said different things at once, or you said something when silence would have been a better option. Depending on the issue, early silence lets journalists and critics write the first draft of your story. Contradictory statements from multiple executives create a second crisis on top of the first. The organizations that come through reputationally intact had a plan, a designated team, and pre-approved templates ready before anything went wrong.
Selvam Public Affairs has built rapid-response frameworks with executives across North America. This guide reflects what that preparation looks like in practice.
Key takeaways
Speed matters, accuracy matters more: Aim to publish your holding statement within 60 to 90 minutes, but a brief delay to verify facts is better than a rushed statement you'll have to correct later.
One spokesperson, one message: Contradictory statements from multiple voices are commonly cited as among the most damaging early crisis mistakes.
Pause all scheduled content immediately: Promotional material running alongside a crisis response can become its own story, fast.
Consult widely, approve narrowly: One named person must own each public communication decision, with a designated backup.
Recovery is a 90-day process: Stabilize in 72 hours, demonstrate accountability in week one, and prove sustained change by day 90.
How to handle a PR crisis in the first 60 minutes
The opening hour is not for crafting a polished statement. It's for verification, assembly, and containment. Start with facts, not words.
Establish what happened, what's confirmed, what remains unknown, who is affected, and where the information is coming from. Nothing goes public until leadership and communications agree on the verified version. Premature statements routinely become the story, because journalists use them as the record of what the organization believed at that exact moment. Corrections damage credibility more than a short delay ever will.
Once you have a working fact base, activate your crisis team on one coordination channel with one shared fact log. Assign a single spokesperson and a named backup. Designate exactly one person with authority to approve public messaging. Multiple executives fielding press calls and giving slightly different answers is one of the most common and most damaging early mistakes any organization can make.
Stop all scheduled content the moment a potential crisis is identified. Every social post, ad campaign, and promotional launch needs to pause. Tone-deaf celebratory content running alongside a crisis response gets screenshotted, shared, and amplified. This step typically takes minutes, and if your pause procedure is pre-established and documented, the cost of stopping almost always outweighs the risk of leaving promotional content running.
Who belongs on your crisis communications team
A crisis team is a small, empowered group with documented decision authority and clear backups. It is not a committee. The goal is fast, coordinated action, not consensus.
The core functions your crisis communications team needs to fill:
Crisis team leader, activates the plan, owns the decision log
Communications lead, develops key messages and manages channels
Spokesperson, authorized to speak publicly using approved messaging only
Legal/compliance adviser, can require revisions or block communications on legal or regulatory grounds
Operations representative, supplies verified incident facts
HR lead, handles employee welfare and internal communications
Digital/web lead, publishes approved updates and manages the crisis page
Monitoring lead, tracks sentiment, coverage, and escalation signals
The governing principle is consult widely, approve narrowly. One named owner per decision. One named backup when the primary is unavailable. Pre-approving this matrix is one of the highest-leverage things your organization can do before a crisis.
Communication type Minimum approval required Routine internal update using approved messages Communications lead First holding statement Crisis team leader + communications lead Statement involving injury, legal exposure, or regulators Crisis team leader + legal + executive Public admission of fault or policy change CEO + legal + operations Return to normal communications Crisis team leader recommends; executive authorizes
Some crises outpace internal capacity: regulatory investigations, executive misconduct allegations, sustained national media attention, or data breaches. That's where outside rapid-response advisory earns its value fast. Selvam Public Affairs supports organizations in exactly these situations, providing message frameworks, spokesperson coaching, and direct advisory to executives who need to face cameras or government officials within hours, not days.
How to write a holding statement that actually works
A holding statement is not a full response. It's a credible placeholder: short, factual, human, and updateable. Aim to publish within 60 to 90 minutes when facts are sufficiently clear, for straightforward incidents where basic facts are quickly verifiable, earlier is better. Silence in a breaking story is interpreted as guilt or negligence.
Every holding statement needs these elements:
Acknowledgment of the situation
Confirmed facts only
Expression of concern for affected people
Immediate action underway
Honest statement of what remains unknown
A specific time and channel for the next update
Contact information
The three most common errors: promising outcomes you can't guarantee, assigning blame before the investigation is complete, and using "no comment" without explaining when verified information will actually be available.
Below are short, ready-to-use templates for the most common crisis types. Treat them as fill-in-the-blank starting points, not final drafts. Legal review is required before publishing any statement involving injury, liability, or regulatory matters.
Data breach or cybersecurity incident:
"We are aware of unauthorized activity affecting certain [systems/services]. We have activated our incident-response team and engaged external cybersecurity specialists. The investigation is ongoing, and we are working to determine whether personal information was affected. We will update customers by [time/date] at [channel]."
Product safety issue:
"We are aware of a potential safety issue involving [product/batch]. We have paused distribution and are investigating with the relevant authorities. Customers should stop using [product] and contact [support channel] for guidance. We will provide further information by [time/date]."
Executive misconduct allegation:
"We are aware of allegations concerning [role or conduct]. We take these reports seriously and have begun an independent review. Because the process is ongoing, we cannot comment on unverified claims or personnel details. We will provide further information when appropriate."
Regulatory investigation:
"We are aware of [regulator's action/inquiry] concerning [issue]. We are cooperating fully with the relevant authorities. As the process is ongoing, we will not comment on specific allegations, but we will provide updates as appropriate."
How to sequence stakeholders and monitor social media during a PR crisis
Once the holding statement is published, two things need to run simultaneously: proactive stakeholder outreach and real-time monitoring. Most organizations sequence these wrong, or only do one.
Employees come before any public statement. Brief managers first so they can field team questions. Give them approved talking points and a confidential escalation path. Employees who learn about the crisis from a news alert become unintended, uncoordinated spokespeople, a problem you don't need on top of everything else. The external sequence follows: victims and directly affected individuals first, then customers, partners and suppliers, regulators and government contacts, investors, and finally broad media. For media inquiries, stay reactive until facts are verified. One spokesperson, one contact channel, no exceptions.
On monitoring, the goal isn't to read every comment. It's to detect velocity, identify narrative multipliers, and catch misinformation before it spreads. The metrics that matter are mention volume versus baseline, negative sentiment rate, sentiment velocity (the direction of change, not just the score), narrative reach, and influencer or media pickup. Enterprise tools like Brandwatch, Sprinklr, Talkwalker, CisionOne, and Meltwater handle this at scale. Brand24 is a faster, more accessible option for real-time keyword and sentiment alerts.
Respond publicly using one source of truth: a continuously updated newsroom page, status page, or pinned post. Never delete comments without explanation. Correct misinformation selectively, only address claims that are spreading fast and likely to cause real harm. Arguing with individual critics at scale amplifies the crisis. It doesn't contain it.
What the recovery timeline actually looks like
Reputation recovery is not a single news cycle. It follows a three-phase arc, and organizations that treat it otherwise almost always get caught by a second wave.
Phase one: Stabilization (first 72 hours). By hour 6, the crisis team should be assembled, one spokesperson designated, and all scheduled content paused. By hour 24, the holding statement should be published, all priority stakeholder groups contacted, and no contradictory official statements in circulation. By hour 72, a verified incident update should be published, a remediation plan with named owners should be in place, critical misinformation should be addressed, and incident escalation should be declining for 24 consecutive hours. The key metric in this phase: time to first verified public update.
Phase two: Accountability (days 4 through 30). Publish a stakeholder FAQ. Begin corrective actions rather than just announcing future intentions. Brief employees with managers' talking points. Conduct a blameless internal response review within the first week while the sequence of decisions is still fresh in participants' minds. By day 30, complete the investigation or publish an interim finding, implement high-priority operational fixes, and resume normal communications only when doing so won't appear dismissive.
Phase three: Proof (days 31 through 90). Publish evidence that controls are working. Measure trust recovery through repeat surveys using the same questions as the initial measurement. Pass a tabletop crisis exercise. Institutionalize changes in policy, training, and governance. The test at day 90 is not whether public attention has disappeared. It's whether the organization can show, with evidence, that the harm was addressed and the underlying failure is less likely to recur.
How to handle a PR crisis before it happens: build the plan now
Effective PR crisis management comes down to speed, accuracy, and discipline. The organizations that handle a PR crisis best already have a crisis communications plan, a designated team, pre-approved templates, and a clear chain of authority before anything goes wrong.
Work backward from this playbook. Build your team roster now. Draft your holding statement templates. Define your approval matrix. Run at least one tabletop exercise before a real crisis forces you to improvise. The gap between organizations that manage crises well and those that don't is almost never talent. It's preparation.
Frequently asked questions about PR crisis response
What are the first three steps when handling a PR crisis?
Verify the facts before saying anything public, activate a small crisis team on a single coordination channel, and designate exactly one spokesperson with authority to speak on the record. Those three steps contain the most common early mistakes: premature statements, fragmented decision-making, and contradictory messages from multiple voices.
How quickly should a holding statement be issued?
For incidents where basic facts are quickly verifiable, aim to publish within the first hour. A window of 60 to 90 minutes is generally acceptable for more complex situations. A short delay to confirm facts is better than a fast statement you'll have to retract, but silence beyond 90 minutes in a breaking story will be interpreted as evasion.
What does a PR crisis response checklist include?
A practical crisis response checklist covers: verifying facts and standing up a shared fact log, activating the crisis team and assigning roles, designating a spokesperson and approval chain, pausing all scheduled content, issuing a holding statement, sequencing stakeholder outreach (employees first, then external), launching real-time monitoring, and setting a timeline for the next verified public update.
How long does reputation management after a crisis take?
Plan for a minimum of 90 days. Stabilization takes the first 72 hours. Accountability, publishing findings, beginning corrective actions, and briefing stakeholders, runs through day 30. Sustained proof of change, including policy updates, training, and evidence that controls are working, carries through day 90 and beyond.
If your organization needs to build that infrastructure, or if a crisis is already unfolding and you need to know how to handle a PR crisis right now, reach out to the team at Selvam Public Affairs. We work with executives on message frameworks, spokesperson coaching, and crisis communications strategy designed for the speed that real PR emergencies demand.
A crisis tests your communications skills and your preparation.
