The first six hours of a reputation crisis decide the next five years of brand value. The second six hours decide whether the response was strategy or theatre. The first six weeks decide whether the response is forgotten or studied.
This is the playbook senior crisis counsel actually runs. The structure mirrors what we use on retainer activations — slightly redacted for client confidentiality, but operationally accurate.
Hour 0 to 1: Stabilize
1. Capture the artifact. Screenshot, archive, save the URL through archive.org, save the timestamp. If the artifact is video or audio, save the raw file with hash. Evidence chains live or die in this hour.
2. Confirm the scope. How big is the spread? Who is amplifying? What is the original source vs. a re-share? The early shape of a crisis tells you whether this is a 6-hour fire or a 6-week siege.
3. Activate the cell. Senior counsel, internal comms lead, CEO chief of staff. No mass meetings. Three people, one decision-maker, one line.
4. Pause adjacent campaigns. Marketing emails sent in the next 12 hours get re-read in the context of the crisis. Pause them. We have seen one auto-scheduled “We’re so excited about our anniversary!” email destroy a crisis response inside an hour.
Hour 1 to 6: Draft
5. Holding statement draft. Short. Acknowledging the situation. Committing to facts. No speculation. No “no comment” — that headline writes itself badly.
6. Spokesperson identified. Often the CEO. Sometimes deliberately not. Choose with intention, not by default.
7. Media tree primed. The journalists who will write the next story. They are calling you whether or not you call them. Get to them first with a holding statement.
8. Platform takedowns filed. If the artifact violates platform TOS — fake identity, synthetic media, harassment — file the formal report with evidence.
9. Counter-narrative outline. Not the counter-narrative. The outline. The full story is a 6-day exercise.
Hour 6 to 24: Move
10. Holding statement live. Where it can be cited. Owned channel, then earned channel.
11. First wave of media engagement. 3 to 5 outlets, on background. Background calls before any on-the-record.
12. Internal communication. Employees see this on their phones; tell them what’s happening before the journalist does.
13. Customer / client communication. Top 25 customers / clients hear from you directly before they hear from anyone else.
14. SERP defense pre-stage. Authored content drafted but not yet published. Timing matters.
Day 2 to 6: Shape
15. The full counter-narrative. Where it lives, who carries it, what the citation footprint looks like. Owned property, earned property, third-party endorsement.
16. On-the-record interviews. Selectively. The first three set the framing for the cycle.
17. Sentiment monitoring. Aperture-grade. Where the conversation is moving, who is amplifying, what is being repeated.
18. Wikipedia / Knowledge Graph reconciliation. Whatever the story becomes, it ends up in the Wikipedia talk page within days. Make sure the article reflects sourced facts, not crisis-cycle speculation.
Week 2 to 6: Repair
19. SERP repair sequence. Multi-month, multi-asset. Authored long-form, contributor placements, owned-media. Move the negative articles below the fold.
20. The “What we learned” piece. Often written by the CEO, often the most-cited piece for the next year. Builds the bridge from crisis to recovery.
21. Quarterly review. Every crisis is a free penetration test. What almost worked against you? What did you learn? Where are you still exposed?
What goes wrong
- The legal team running the response. Legal is necessary but insufficient. Legal protects exposure; comms protects narrative. They are different jobs.
- Slow internal comms. Your employees should never see the news on their phones before they see it from you.
- Apologizing for the wrong thing. An apology that misses the mark is worse than no apology.
- “No comment” headlines. These write themselves badly. Always have something to say, even if it’s “We are investigating, here are the facts we know.”
- Counter-attacking the source. Sometimes warranted. Almost never on hour 4.
The 6-hour rule, defended
If you are on a Rapid Response retainer with us, senior counsel is on the line within 60 minutes and a holding statement is drafted in 90. The reason is not magic — it’s that the structure was already in place: media tree, owned-property publishing pipeline, takedown-counsel relationship, evidence-chain protocol. You don’t build any of that during a crisis.
Take the 90-sec audit — the model surfaces your crisis-readiness gap if you have one — or book a strategy call to walk through your own scenario.