Every reputation is built slowly and tested suddenly. A crisis is the test. Crisis communication is the discipline of protecting a brand and its stakeholders when something goes wrong in the open, and the asset on the line is trust. Business is currently the most trusted institution, at 64% among the general public in the 2026 Edelman Trust Barometer, ahead of both government and media. A crisis is the moment that trust is either spent well or squandered. The brands that come through are the ones that are prepared before the test, not the ones that are improvised during it.
Crisis communication is not spin, and it is not damage control invented after the fact. It is a reputation infrastructure: built in advance, rehearsed, and executed under pressure.
What crisis communication is
Crisis communication is the set of messages, decisions, and channels an organization uses to protect its reputation and its people during and after a threatening event. It runs across three phases: before (preparation), during (response), and after (recovery and learning). It is narrower than public relations in general and distinct from operational crisis management, which is the logistics of resolving the incident itself. Crisis communication is the reputation-facing half: what the public, employees, and stakeholders are told, and how.
The frameworks worth knowing
Two mnemonics circulate widely, and it helps to know them while treating them for what they are. The 5 C's of crisis communication are usually given as concern, commitment, competency, clarity, and confidence. The 5 R's are commonly regret, responsibility, resolution, restitution, and reform. They are useful checklists for tone, not evidence-based methods, and no two sources define them the same way. Treat them as reminders, not doctrine.
The framework with research behind it is Situational Crisis Communication Theory, developed by W. Timothy Coombs. Its core insight is that the right response depends on the type of crisis, specifically how much responsibility the public assigns to the organization. Coombs groups crises into three clusters: victim, where the organization is also a victim, as in a natural disaster, a rumor, or product tampering, and blame is low; accidental, where the harm was unintended, as in an equipment or product failure, and blame is moderate; and preventable, where the organization knew better, as in negligence or misconduct, and blame is high.
Coombs is blunt about two findings that matter. Preventable crises do the most reputational damage, and when the organization is genuinely at fault, the rebuild strategy of real apology and corrective action restores reputation best. Denying your way out of a preventable crisis does not work; it deepens the damage.
Preparation is the whole game
SCCT adds a point most brands ignore until it is too late: a strong pre-crisis reputation buffers the damage, and preparation buys the time a live crisis never gives you. The practical form is a standing capability, not a file in a drawer. A brand-newsroom model, a small rapid-response team already used to working together with pre-approved message frameworks, can track sentiment in real time and act before a traditional approval chain would even convene. The work that saves you happens before the crisis: the plan, the team, the templates, and the monitoring.
What good and bad look like
The canonical good example is Johnson & Johnson's 1982 Tylenol response. The company pulled product nationally, communicated openly and fast, and put customer safety visibly ahead of short-term cost. It met a victim-cluster crisis, product tampering, with more accountability than the attribution strictly required, and the brand recovered. The cautionary pattern is the mirror image: a preventable crisis met with denial, delay, or a technically true statement engineered to obscure fault. That combination turns a solvable incident into a reputation that trails the brand through search for years, and it is where crisis response overlaps with the DON'Ts of reputation management.
Crisis communication does not end when the news cycle does
A crisis leaves a search footprint. The coverage, the reviews, the social threads, and the AI answers that later summarize the brand all outlast the event. Recovery is a reputation-management problem in its own right: resetting what page one and the assistants say once the immediate response is done. Many crises also start upstream, as a customer-experience or quality failure caught too late, which is why a customer experience audit is part of preventing the next one.
The Board's View
Treat crisis communication as pre-funded infrastructure, not an emergency line item. The question is never whether a crisis will come; it is whether the team, the plan, and the authority to act fast already exist when it does. Boards that fund the capability in calm periods pay far less for it than boards that discover the gap mid-crisis.
The applied playbooks nearest this pillar already live in their own disciplines: Crisis PR vs. Reputation PR covers securing the coverage that resets a narrative, and the social media crisis playbook covers real-time response on the platforms where crises now surface first.
Board Questions to Ask
- Do we have a crisis communication plan, and when was it last rehearsed?
- Who is authorized to speak in the first hour, and does that require sign-off we cannot reach in time?
- If a crisis hit today, how much of our response is decided in advance versus improvised?
- Six months after a crisis, who owns cleaning up what search and AI say about us?