A crisis team needs explicit authority, not just a list of senior names. Identify who verifies facts, who decides operational action, who approves statements and who communicates with affected people. Provide backups so the process still works when the usual decision-maker is unavailable.
01
Assign decisions rather than job titles
Map the likely issue to customer service, operations, technical security, legal advice and communications. One person can fill several roles in a small organization, but responsibilities should remain distinguishable. A spokesperson should not be expected to diagnose a technical failure, and legal review should not silently become ownership of every operational task.
02
Define escalation and evidence handling
Agree on triggers such as credible threats, exposed personal information, safety allegations, widespread service failure or significant factual errors. Use secure channels for sensitive material. NIST's assessment guidance emphasizes planned responsibilities and authorized activity; the same discipline helps avoid improvised access or undocumented technical work during an incident.
- Name a primary and backup for each decision.
- Keep current contact routes accessible to authorized team members.
- Record confirmed facts, uncertainty and the next review time.
- Separate public updates from confidential investigative notes.
03
Rehearse a missed handoff
Test a scenario in which customer support sees a viral allegation after office hours. Who preserves it, checks whether service is affected and authorizes an initial acknowledgment? Practice the handoff without publishing a real statement. Correct missing authority and inaccessible contact details before an actual incident exposes those gaps.
Frequently asked questions
Must the CEO approve every update?
No. Predefine which decisions require senior approval and which can be delegated. Excessive approval layers can delay routine factual updates without improving accuracy.
What if the facts are incomplete?
Say what is confirmed, what is being checked and when another update is expected. Do not fill uncertainty with speculation or let an unverified internal theory become a public claim.
Continue with your next step
Related guides on this topic
Sources and policies
Check the current policy before submitting a request.
You do not have to figure out the next step alone.
Share the URLs and explain your concern. We will review the context and explain which options are worth assessing.
Request a confidential reviewOr call (307) 429-2531Educational information, not legal advice. Outcomes depend on the facts and decisions made by third parties.