top of page

How to Handle the First 60 Minutes of a PR Crisis A Step-by-Step Response Checklist

  • Writer: Jerome Cleary
    Jerome Cleary
  • Aug 19
  • 9 min read

A PR crisis does not wait for the perfect statement, the right person to call back, or a calmer hour. The first 60 minutes are messy. Facts are incomplete. Screenshots move faster than approvals. People inside the organization hear different versions of the same event.


That first hour still matters. Not because every answer must be final, but because the organization needs to show control, care, and discipline. The goal is simple: confirm what happened, protect people, stop the spread of bad information, and prepare one clear public line.


This checklist is built for that first hour. It works whether the crisis involves a product failure, executive misconduct allegation, data incident, employee safety issue, customer harm, offensive content, operational outage, or viral complaint.


Close-up view of a stopwatch beside a printed crisis checklist on a folding table.
The first hour rewards speed, but only when it is paired with discipline.

Before you respond, define what counts as a crisis


Not every angry comment or critical post is a crisis. A true PR crisis has the potential to harm trust, safety, reputation, revenue, or legal standing. It usually has at least one of these traits:


  • People may be at risk.

  • The issue is spreading quickly.

  • The facts are unclear or disputed.

  • The organization’s values or conduct are being questioned.

  • News media, regulators, investors, employees, or customers may ask for answers.

  • Silence could make the organization look careless or evasive.


If the issue meets any of these conditions, pull it into a crisis workflow. Do not let it sit in a normal customer service, communications, or legal queue.


The first mistake many teams make is trying to decide whether the situation is “bad enough” while the story grows. Treat the first hour as a triage window. You can always scale down later. It is much harder to recover after you waited too long.


Minute 0 to 10 Gather the facts and freeze assumptions


The first 10 minutes are not for writing the perfect public statement. They are for separating known facts from rumors.


Assign one person to collect information. This person does not need to solve the crisis. Their job is to build a clean source of truth.


Start with four questions:


  1. What do we know for certain?

  2. What do we not know yet?

  3. Who is affected?

  4. What could get worse in the next hour?


Write answers in plain language. Avoid legal or technical shorthand unless it is needed for accuracy. Mark every item as confirmed, unconfirmed, or unknown.


A good fact log might include:


Question

What to capture

What happened

The event, allegation, error, outage, incident, or complaint

When it started

Time, date, and timezone

Where it appeared

Physical location, news outlet, customer channel, internal report, or public forum

Who is affected

Customers, employees, partners, community members, or the public

Current status

Ongoing, contained, resolved, or still unclear

Source

Person, system, report, screenshot, message, or witness

Confidence level

Confirmed, likely, unverified, or disputed


Do not repeat an unverified claim as if it is true. Also do not dismiss it because it is uncomfortable. The right stance is disciplined curiosity.


During these first 10 minutes, preserve evidence. Save screenshots, emails, call notes, incident reports, video links, customer messages, and timestamps. If the issue may involve legal, safety, employment, or regulatory matters, preserve records without editing or deleting anything.


Minute 10 to 15 Activate the right response team


A PR crisis needs a small, clear decision group. Too many people slow the response. Too few people miss key risks.


The core team usually includes:


  • Communications lead

  • Senior decision-maker

  • Legal counsel

  • Operations or subject matter lead

  • Customer support or employee relations lead, depending on who is affected

  • Security, safety, IT, or compliance lead, if relevant


Name one person as the response lead. This person keeps the team moving, sets deadlines, and decides when the team has enough information to act. Name one person as the message owner. This person drafts and controls all approved language.


This matters because scattered replies create a second crisis. One employee says “no comment.” Another apologizes for something not confirmed. A third shares an internal theory. The public sees contradiction, not good intentions.


Set one rule right away:


No one speaks publicly or sends broad internal messages about the issue unless the response lead and message owner approve the language.

That does not mean hiding. It means avoiding accidental misinformation.


Eye-level view of a wall clock above a simple emergency supply shelf.
A crisis response starts by making time visible and responsibilities clear.

Minute 15 to 25 Assess the real level of risk


Now decide what kind of crisis you are handling. The first public response should match the level of harm and uncertainty.


Use a simple three-level scale.


Level

Situation

First-hour goal

Level 1

Limited complaint, local issue, no clear safety or legal risk

Monitor, acknowledge if needed, prepare key facts

Level 2

Growing attention, customer impact, employee concern, possible media interest

Acknowledge, investigate, prepare internal and external lines

Level 3

Safety concern, major outage, alleged misconduct, legal exposure, national attention, regulator interest

Mobilize leadership, issue holding statement, prepare ongoing updates


The risk level can change. That is normal. A small issue can become serious if the facts shift or the public reaction grows. A loud issue can shrink once the team confirms context.


Look at five dimensions:


  • Human impact

    Has anyone been harmed, threatened, misled, displaced, exposed, or put at risk?


  • Scale

    Is this one person, one location, one system, or a broader pattern?


  • Speed

    Is attention growing minute by minute?


  • Credibility

    Are the claims supported by documents, videos, witnesses, regulators, or named sources?


  • Trust impact

    Does the issue conflict with what the organization says it stands for?


If human safety is involved, safety comes before reputation. If people are still being harmed, the first message should focus on protective action, not image repair.


Minute 25 to 35 Decide your first public posture


By the 25-minute mark, the team should decide what it can responsibly say. This is not always a full apology. It may be an acknowledgment, a correction, a safety notice, or a commitment to investigate.


There are four common response postures.


Posture

Use it when

Example language

Acknowledge

You know an issue exists, but details are still developing

“We are aware of the report and are looking into it now.”

Inform

You have verified facts the public needs

“The service outage began this morning and affects customers in several regions.”

Apologize

Harm or failure is confirmed

“We are sorry this happened and understand the frustration it caused.”

Correct

False information is spreading and you can prove it

“Reports that customer payment data was exposed are not accurate based on our current review.”


The safest first response often combines acknowledgment, concern, and a next step.


A strong holding statement answers:


  • What you know

  • What you are doing

  • Who is affected, if known

  • When people can expect another update

  • Where updates will appear


A weak statement hides behind vague language. It says “we take this seriously” but gives no action. That phrase is not wrong, but it cannot carry the whole response.


Use this simple holding statement structure:


We are aware of [issue]. Our team is [specific action]. At this time, [confirmed fact or current status]. We understand the concern this may cause and will share the next update by [time or condition].

Fill only what you can defend. Do not guess. Do not promise an outcome. Do not blame a person, vendor, employee, customer, reporter, or “miscommunication” before the facts support it.


Minute 35 to 45 Prepare internal messages before noise spreads


Employees, customer-facing teams, board members, franchisees, partners, or vendors may hear about the crisis before they hear from leadership. That gap can create confusion.


Send a short internal note once the response team agrees on the first posture. It should tell people what happened, what they can say, and where to send questions.


Keep it brief.


Suggested internal note:


We are aware of [issue] and the response team is reviewing it now. Please do not speculate or post about the situation. If customers, reporters, partners, or community members ask, use this approved line: [approved line]. Send any related messages, screenshots, or questions to [internal contact or channel]. We will provide another update by [time].

If the crisis affects employees directly, give them more than a script. Explain what support is available and what steps the organization is taking to protect them.


Internal trust matters. If employees believe the organization is hiding from them, they may fill the silence themselves. Most do not do this to cause harm. They do it because nobody gave them a clear path.


Overhead view of a handwritten note card with approved response language beside a phone.
Short approved language helps prevent mixed messages while facts are still forming.

Minute 45 to 55 Choose channels and publish with care


Now decide where the first message should go. The channel depends on where the crisis is unfolding and who needs the information most.


Common options include:


  • Company website status page or newsroom

  • Customer email

  • Employee message

  • Recorded phone update

  • Direct outreach to affected people

  • Statement to reporters

  • Public post on the channel where the issue is spreading


Use the smallest channel that still reaches the right people. If only affected customers need a safety instruction, contact them directly. If a false public claim is spreading widely, a public correction may be needed.


Before publishing, run a fast review:


  • Is every factual claim confirmed?

  • Does the message show concern for affected people?

  • Does it avoid speculation?

  • Does it avoid defensive language?

  • Does it name the next step?

  • Does it say when or how updates will continue?

  • Is the tone human?


The tone should be calm, direct, and accountable. Avoid sounding irritated that the issue became public. Avoid sounding more worried about reputation than impact.


Compare these two lines:


Weak language

Stronger language

“We are disappointed by the misinformation circulating online.”

“We are aware of the concerns being raised and are reviewing the facts now.”

“This was an isolated incident.”

“Based on what we have confirmed so far, this appears limited to one location. We are checking that now.”

“No customers should be concerned.”

“We have not found evidence of customer impact at this stage. If that changes, we will notify affected customers directly.”


Precision builds trust. Overconfidence breaks it.


Minute 55 to 60 Set the next hour in motion


The first hour should end with a clear operating rhythm. A crisis does not stop once the first statement goes out.


Before the 60-minute mark, confirm these items:


  • The fact log has one owner.

  • The response lead has authority to call the next check-in.

  • The message owner controls approved language.

  • Customer-facing teams have a script.

  • Internal teams know where to report new information.

  • Legal, safety, or technical reviewers know what decisions are pending.

  • The next public update has a target time or trigger.

  • Monitoring is active, but not chaotic.


Set the next meeting or check-in for 30 to 60 minutes later, depending on severity. For high-risk events, keep a live response channel open with strict posting rules. Only useful updates belong there.


The 60-minute checklist you can copy


Use this as a working checklist during the first hour.


Time

Action

Done

0 to 10 minutes

Open a fact log and mark items as confirmed, unconfirmed, or unknown


0 to 10 minutes

Preserve screenshots, reports, messages, and timestamps


10 to 15 minutes

Activate the crisis response team


10 to 15 minutes

Name the response lead and message owner


15 to 25 minutes

Rate the crisis level based on harm, scale, speed, credibility, and trust impact


25 to 35 minutes

Choose the first response posture


25 to 35 minutes

Draft a short holding statement


35 to 45 minutes

Send approved internal guidance


45 to 55 minutes

Choose the right external channel


45 to 55 minutes

Review the message for accuracy, care, and next steps


55 to 60 minutes

Publish or prepare to publish


55 to 60 minutes

Set the next update time and assign follow-up owners



Print this checklist before you need it. During a crisis, people skip obvious steps because adrenaline narrows attention.


What not to do in the first hour


A good response is as much about restraint as speed. Avoid these common mistakes:


  • Do not deny before verifying

    A fast denial can become the headline if later facts prove it wrong.


  • Do not apologize for unconfirmed conduct

    You can express concern without accepting facts you have not verified.


  • Do not blame a junior employee or outside partner

    Early blame often looks evasive and may be unfair.


  • Do not let multiple teams write separate statements

    One issue needs one approved message set.


  • Do not argue with critics

    Correct facts when needed, but do not get pulled into emotional back-and-forth.


  • Do not hide from affected people

    If customers, employees, or community members face real impact, direct communication should come early.


  • Do not overpromise

    “This will never happen again” is rarely something you can prove in the first hour.


The public often judges the response before it judges the full event. Careless wording can make a contained problem feel like a cover-up.


Wide-angle view of a quiet hallway with an emergency information board and taped update sheet.
A visible update point keeps the response focused after the first statement goes out.

Build the plan before the crisis


The first 60 minutes go better when the team has already agreed on roles, approval paths, and message templates. A plan does not remove pressure, but it prevents panic from becoming the process.


At minimum, prepare:


  • A crisis contact list with backups

  • A severity scale

  • Holding statement templates

  • Internal message templates

  • Channel access rules

  • Media inquiry process

  • Customer support scripts

  • Legal and safety escalation rules

  • After-hours approval process

  • A recordkeeping plan


Practice once or twice a year with realistic scenarios. Use uncomfortable examples. A vague practice drill teaches very little. A realistic one shows where decisions get stuck.


The best first-hour response feels steady, not rushed. It says, “We see the issue, we care about the people affected, we are checking the facts, and we will keep you updated.”


That is what people need most in the first hour of a PR crisis: not perfection, but proof that responsible adults are awake, organized, and acting.





Comments


bottom of page