The past year has already delivered a masterclass in what happens when crisis management goes wrong. The BBC’s director-general and news chief both recently resigned after the broadcaster was found to have misleadingly edited Donald Trump’s January 6 speech, splicing together sections spoken nearly an hour apart to create a false impression. Meanwhile, the UK government has been grappling with an embarrassing crisis of its own: 262 prisoners were accidentally released in the year to March 2025, a 128% increase on the previous year.
These high-profile failures underscore a sobering reality: even the most established organisations are vulnerable to crises that can irreparably damage their reputation. Recent research reveals that 78% of business leaders have faced a crisis impacting customers within the past 18 months, yet surprisingly, only 50% of businesses have a formal crisis communication plan in place. Whether you’re a startup or an established enterprise, the question isn’t if a crisis will occur, but when – and how prepared you’ll be to handle it.
Understanding the anatomy of a modern crisis
A PR crisis can stem from countless scenarios: a product recall, a data breach, controversial social media content, or supply chain disruptions. In our digital age, these incidents spread rapidly across social channels and news outlets, amplifying their impact exponentially.
Consider KFC’s 2018 finger-lickin’ poor chicken shortage. When the fast-food giant ran out of chicken across hundreds of UK stores, social media erupted with over 53,000 mentions in a single day. However, their clever “FCK” apology campaign (rearranging the brand’s letters to acknowledge their mistake) demonstrated authenticity and humour. By maintaining transparent communication and providing real-time restaurant status updates, they turned a crisis into an opportunity to strengthen customer loyalty.
This illustrates a crucial point: while you can’t always prevent crises, you can control how you respond to them.
Building your crisis preparedness framework
Identifying and categorising potential risks
Effective crisis management begins with anticipating what could go wrong. Conduct a comprehensive risk assessment specific to your industry, considering scenarios including product failures, cybersecurity incidents, legal violations, employee misconduct, controversial marketing content, and supply chain disruptions.
Categorise these risks using a traffic light system. Green indicates minor issues with low business impact, such as isolated negative reviews. Amber signals serious incidents like localised service failures or public complaints from influential figures. Red flags major crises, including large-scale data breaches, product recalls, or significant legal issues threatening your operations and reputation.
Assembling your crisis response team
Speed and coordination are paramount during a crisis. Designate a core team comprising senior leadership, communications professionals, legal advisers, and relevant department heads. Clearly define each member’s role and establish a chain of command for decision-making.
Your team should include someone with executive authority, a communications lead experienced in media relations, and legal counsel. Ensure all team members understand their responsibilities before a crisis occurs and conduct regular training exercises.
Crafting your communication strategy
Internal communications
Your employees need accurate information to respond confident