The framework, explained

What it is#

The crisis communication checklist is the list a communications lead keeps ready for the day something goes badly wrong: a product fault, an accident, a data breach, a damaging allegation. It has three parts. Prepare covers what must exist before any crisis. Respond covers the first hours and days. Recover covers what happens once the immediate pressure has passed. A crisis plan is the fuller document the checklist sits on.

The crisis communication cycle

  1. 1
    Prepare

    Team, contacts, scenarios, holding statements, approvals, rehearsal

  2. 2
    Respond

    Facts, safety, the first statement, one voice, regular updates

  3. 3
    Recover

    Corrective action, reputation tracking, return to normal communication

  4. 4
    Learn

    After-action review; the plan is updated

  5. 1
Learning feeds the next round of preparation.

Where it comes from#

The checklist draws on the professional bodies and on research. The Chartered Institute of Public Relations' Crisis Communications Network made Drafting a Crisis Communication Plan its first skills guide, exploring the stages of a crisis and the steps to include in a plan1; the guide covers defining a crisis, mapping stakeholders, preparing messages, running simulations and reviewing after the event2. The Public Relations Society of America advises preparing a holding statement in anticipation of media enquiries, drafted with legal counsel and leadership3. The UK Government Communication Service's crisis communications operating model, published in May 2023, formalises the structures, roles and responsibilities of communicators in a crisis and describes itself as a living structure, updated as lessons emerge4; the GCS also publishes guidance on crisis communication5.

On how to respond, W. Timothy Coombs's situational crisis communication theory, set out in Corporate Reputation Review in 2007, advises matching the response to the level of crisis responsibility stakeholders attribute to the organisation and the reputational threat, and groups crises into victim, accidental and preventable clusters6. The international standard ISO 22361:2022 gives guidance on building and continually improving a strategic crisis management capability, including crisis communication, and is aimed at top management7. Throughout, the professional codes apply: IPRA's code of conduct commits members to honesty and accuracy8.

How to fill it in#

Matching the response to responsibility

Victim cluster

The organisation is also a victim: inform, instruct, show care

Accidental cluster

Unintended and low control: explain, correct, reassure

Preventable cluster

The organisation is to blame: apologise, take corrective action

After Coombs's situational crisis communication theory.
  1. Work through Prepare now, while nothing is wrong, and date each tick.
  2. Rehearse at least once a year with a realistic scenario; update the plan with what broke.
  3. When a crisis starts, open Respond and work down it; the first lines are about facts and safety, not statements.
  4. Keep a decision log of what was known, decided and said, and when.
  5. Close with Recover: the after-action review is part of the response, not an optional extra.

A worked example#

Illustrative: the fictional Ourika Roasters finds a batch of bags labelled with the wrong roast date.

The crisis team meets within the hour. Facts first: which batch, how many customers, any safety risk (none). Scheduled promotional posts are paused. A holding statement, already drafted for product issues, is adapted and approved: what happened, what customers should do, when the next update will come. Café staff hear first, then subscribers by email, then social and press. Because the error is the roaster's own (a preventable crisis), the brand apologises plainly, replaces the bags and explains the fix to its labelling check. The after-action review a week later adds a second label check to the process and updates the plan.

Common mistakes#

  • Writing the plan during the crisis Holding statements and approvals belong in Prepare3.
  • Speaking before the facts are checked A wrong first statement becomes a second crisis.
  • Employees last They hear it from the news and repeat it with their own errors.
  • Denial where the organisation is to blame Responsibility shapes which response protects reputation6.
  • No review Without an after-action review, the next crisis repeats the last one2.

Further reading#

  • The CIPR's crisis plan guide1, 2; PRSA on the first hour3.
  • The GCS operating model4 and guidance5.
  • Coombs on situational crisis communication theory6; ISO 223617; the IPRA code8.
  • On IMC Report: public relations and the message house.

Sources

Every claim worth checking, with somewhere to check it.

  1. New skills guide: CIPR launches guide to drafting crisis communication plansChartered Institute of Public Relations (CIPR) · accessed 2026-10
  2. Drafting a Crisis Communication Plan (CIPR Skills Guide, Crisis Communications Network)Chartered Institute of Public Relations (CIPR) · accessed 2026-10
  3. 5 Steps for Navigating the First Hour of a CrisisPublic Relations Society of America (PRSA) · accessed 2026-10
  4. Crisis Communications: Operating ModelGovernment Communication Service (UK) · 2023-05
  5. Crisis communication (guidance)Government Communication Service (UK) · accessed 2026-10
  6. Protecting Organization Reputations During a Crisis: The Development and Application of Situational Crisis Communication Theory (W. Timothy Coombs), Corporate Reputation Review 10(3), 163–176CiNii Research, National Institute of Informatics (bibliographic record) · 2007-09
  7. ISO 22361:2022 Security and resilience: Crisis management, Guidelines (catalogue entry)AFNOR Editions · 2022-10
  8. Code of ConductInternational Public Relations Association (IPRA) · accessed 2026-10