Navigating Brand Crisis Management Successfully

Two companies can get hit by the same kind of public incident and end up in very different places a year later. Across 125 reputation events over a decade, shareholder value one year later ranged from a 20% gain to a loss of up to 30% (Aon and Pentland Analytics, 2018).

What moved a company along that range was preparedness and how management behaved in the immediate aftermath. Company size and reputation strength did little to protect against the loss.

Communications teams and legal counsel carry most of the work, with an executive sponsor signing off on the big calls. It gets applied to product recalls, data breaches, executive misconduct, social media backlash and supply chain failures.

What Is Brand Crisis Management?

The discipline coordinates detection, response and recovery during a public incident that threatens brand trust, so the damage to reputation, revenue and stakeholder relationships stays limited.

It spans the work before, during and after an incident. One apology post is a small piece of it.

Where it stops and neighboring disciplines start

Crisis communication is the narrower job of deciding what to say, to whom and when. Hootsuite’s 2026 guide draws the same line, with management as the broader discipline and communication as one part of it.

Public relations runs continuously, whether or not anything is going wrong. Crisis work borrows its channels and contacts from PR.

Issue management handles a developing problem, such as a pending regulation or a recurring complaint, before it becomes a public incident. Business continuity keeps operations running through a disruption, and ISO 22301 covers it as its own management system.

ISO 22361:2022, published in October 2022, acknowledges these overlaps and still treats crisis management as a distinct capability. Its stated audience is top management with strategic responsibility.

Phases of a brand crisis

W. Timothy Coombs, who developed Situational Crisis Communication Theory, splits a crisis by timing.

Most brands spend their budget on the middle row. The first and third rows decide how bad the middle one gets.

When a complaint becomes a crisis

An isolated complaint with limited reach stays a customer-care matter. It turns into a crisis when the conversation grows rapidly, hostility or boycott calls intensify, influential accounts or journalists pick the story up, similar customer stories start to appear, or customer safety is involved (Brandwatch; Meltwater, 2026).

Treating every spike as a crisis has a cost too. Brandwatch warns that a knee-jerk public apology to a passing wave of negative comments can draw attention to a non-issue.

Types of Brand Crises and What Triggers Them

Most brand crises trace back to a product failure, a data breach, executive misconduct, social media backlash or a supply chain failure. Which one it is sets the first priority, the audience that needs to hear from the brand first, and how much blame the public assigns.

Product failure and recall

Johnson & Johnson pulled 31 million bottles of Extra-Strength Tylenol in 1982 after seven people in the Chicago area died from cyanide-laced capsules (History.com, 2022).

The company then reissued the product in tamper-proof packaging, and the episode led to new packaging rules across the drug and food industries (EBSCO, 2023).

The first priority is to stop further harm. Explaining comes after.

Data breach and technology failure

After a breach, customers care about exposure before downtime. They ask whether card details or passwords were exposed, and whether their accounts are still safe. What to do next comes after that.

Attackers cause the incident, yet audiences can still judge the company on negligence, a tension Cytactic’s crisis communication lead Ari Achiaz describes for cyber crises. PwC lists cyber attacks and technology failure among the five most reported disruptions in its 2023 survey.

Executive and employee misconduct

Leadership controversies and discrimination claims land here, and so does off-duty behavior that goes public. The brand gets judged on the values the incident reveals, not on the product.

Astronomer’s CEO and Chief People Officer were caught on a Coldplay concert jumbotron in 2025, and the company answered a few days later with a values statement and an internal investigation (Hootsuite, 2026).

Social media backlash

An off-brand or insensitive post can set it off, and so can a campaign that misreads the mood. A customer complaint that goes viral does the same, as do false claims about the product.

Pepsi pulled its Kendall Jenner ad and apologized in April 2017 after critics said it trivialized protest movements.

Supply chain failure

Excluding the pandemic, supply chain disruptions had the largest impact among the disruptions leaders reported, and they have doubled since 2019, according to PwC’s 2023 Global Crisis and Resilience Survey of 1,812 leaders in 42 countries.

The public-facing version is an empty shelf or a late delivery. The first message has to name what is delayed and when customers can expect it.

How to Build a Crisis Team and Plan Before an Incident

Before anything goes wrong, name a crisis management team (CMT) with one owner per function. Then write a plan that fixes severity tiers, approvers and first messages, and rehearse the whole thing before an incident forces the test.

Confidence tends to run ahead of readiness. PwC’s 2023 survey found that 70% of leaders felt confident they could recover from a disruption, while many lacked the foundational resilience to back that up.

Crisis team roles

• The executive sponsor makes the final call on decisions that affect revenue or long-term reputation (Brandwatch).
• The spokesperson is the single public voice, chosen and media-trained before anything happens.
• Legal counsel reviews statements for liability and compliance exposure.
• The communications lead owns the official message and fields media inquiries.
• Whoever runs social is usually the first to spot the issue, and drafts the immediate replies.
• The marketing lead pauses or edits any related campaign.

Name a deputy for every approver, so a statement is never stuck waiting for one person who cannot be reached.

What the crisis plan contains

Keep it short. A plan that fits on a few pages gets used, and a policy manual gets ignored.

• Risk assessment of likely incidents, such as product flaws, compliance issues and public backlash
• Severity tiers with escalation criteria
• Chain of command and approval path
• Pre-approved holding statements
• Stakeholder map
• Response-time benchmarks, monitoring duties and a post-crisis review step

ISO 22361:2022 runs 36 pages and splits the topic into six areas, from core concepts and building the capability to crisis leadership, decision-making under pressure, crisis communication, and training and learning from crises. A small brand can use those six headings as a crisis audit checklist instead of buying a consultant’s template.

Simulations and media training

PwC found that organizations with an integrated resilience programme are significantly further ahead on exercising and testing than those without one.

Ward and Smith’s crisis communications guidance offers a quick readiness check:

• The team can assemble in under 15 minutes
• Holding statements and distribution channels are ready
• Members know their roles without looking them up
• Monitoring can be live within an hour
• The team rehearses the process on a schedule

A crisis simulation exercise that fails the first item teaches more than one that passes everything. Media training for the spokesperson belongs in the same calendar slot.

How to Detect a Brand Crisis Early

Monitoring should cover social, news and search, and track conversation volume, sentiment and the accounts driving the story. Each alert then maps to a tier in the crisis plan.

Warning signs to track

Social platforms are where most crises surface first. In Sprout Social’s Q2 2026 Pulse Survey of 2,250 social media users in the US, UK and Australia, social media ranked as the top place consumers hear about a brand controversy, ahead of news articles, friends and family, and the brands themselves.

• Mention volume spikes
• Negative sentiment rising faster than normal
• The same complaint repeating across channels
• Influential accounts sharing the story
• Boycott hashtags, or keywords such as “boycott” and “scam” (Brandwatch suggests tracking both)
• Journalists asking for comment

Tie each signal to a number. A spike in topic volume or negative sentiment moves an incident from minor to emerging, and the plan names who gets the notification.

Tools for crisis monitoring

Google Alerts is enough for a brand with a distinctive name and no budget. If the name is a common word, the results drown in noise, and paid listening earns its price through volume and sentiment alerts, not dashboards.

What monitoring misses

Closed groups and direct messages sit outside public listening. Meltwater’s guidance also adds AI assistants to the watch list, since an answer about a brand during a crisis can draw on news coverage and online discussion.

Some incidents start offline. The United Airlines incident began with a passenger’s phone video, and no keyword alert catches an event before someone posts it.

How Fast Should a Brand Respond to a Crisis?

Acknowledge within the first hour, and say only what is verified. No controlled study fixes that window. Hootsuite’s 15-20-60-90 timeline puts the first public acknowledgment at 15 minutes, while Meltwater’s guidance ties it to having enough verified facts to speak responsibly.

What consumers say about speed

84% of respondents in Sprout Social’s Q2 2026 Pulse Survey said a brand’s response speed directly affects their view of the crisis.

That figure measures stated perception, not sales or sentiment after a real incident. It’s a reason to move early, with some care.

Hootsuite’s response timeline

• At 15 minutes, acknowledge the situation publicly
• By 20 minutes, share a preliminary statement with confirmed facts
• At 60 minutes, give a detailed update on the steps being taken
• By 90 minutes, deliver a comprehensive briefing and commit to regular updates

This is Hootsuite’s framework as of its August 2026 guide, and Hootsuite sells the software built around it. Treat the checkpoints as a target, not a rule.

Speed versus verified facts

Silence lets critics and reporters define the story, and a short acknowledgment costs little. Against that, responding to an inaccurate version of events can amplify it or force a later correction, per Meltwater.

United Airlines shows another way to get it wrong, with a statement that is neither careful nor warm. CEO Oscar Munoz’s early statements drew wide criticism, and he did not apologize to the removed passenger until Tuesday, per Reuters. That day shares fell as much as 4.4%, erasing roughly $950 million to $1 billion in market value at the low, before closing the day down 1.1%, a loss of about $250 million (Reuters; Yahoo News, 2017).

A short acknowledgment that commits to nothing unverified beats both a silent hour and a confident wrong statement.

The first day, in order

1. Confirm what is known, what is unknown and which tier applies.
2. Convene the crisis team and name one owner for every outbound message.
3. Secure brand accounts, then pause scheduled posts and paid promotions.
4. Publish the holding statement where the conversation is happening, and state when the next update comes.
5. Give employees, customer care and executives one shared version of the facts.
6. Keep monitoring, publish the promised update on time and log each decision with a timestamp for the post-crisis review.

A missed update time erodes credibility faster than a cautious first statement.

Which Response Strategy Fits Which Crisis?

Match the strategy to how much blame the public assigns. Inform and adjust when the brand is a victim, diminish when it is an accident with a clean record, rebuild when the crisis was preventable, and deny only against rumors and challenges (Coombs, 2007).

That rule comes from Situational Crisis Communication Theory (SCCT), published in Corporate Reputation Review, volume 10, issue 3.

Blame clusters and where each one starts

Natural disasters, workplace violence, product tampering and rumors sit in the victim cluster, where blame on the brand is weak. Challenges, technical-error accidents and technical-error recalls make up the accidental cluster, where blame is low but present. Human-error accidents, human-error recalls and organizational misconduct fall in the preventable cluster, and blame there runs high.

The cause sets the cluster, not the category. A recall traced to a technical breakdown sits in the accidental cluster, while a recall traced to human error sits in the preventable one.

How crisis history and reputation shift the choice

A history of similar crises and a negative prior reputation push a brand toward the stronger response. Coombs’s guidelines move a victim crisis carrying that baggage from inform-only to diminish, and an accident crisis from diminish to rebuild.

Researchers disagree about the upside. Early experiments by Coombs and Holladay found a Velcro effect, where only a negative relationship history changed how much blame people assigned, and several studies failed to find a halo for a good reputation (SAGE Encyclopedia of Corporate Reputation).

Their 2006 study in the Journal of Communication Management did produce a halo, but only for organizations with very favorable reputations, and it worked as a shield against reputational damage. The gap between the studies is how favorable a reputation has to be, so plan around the Velcro effect and treat any halo as a bonus.

Response strategies compared

When a public apology fits

An apology fits a preventable crisis where the public already holds the brand responsible. It also fits an accident that follows earlier incidents of the same kind, and any case where affected people are identifiable and something concrete can be offered to them.

It misfires on a rumor or a challenge the brand can refute with evidence, and on a victim crisis with a clean record, where informing the public does the job.

Safety comes first either way. Coombs and Holladay’s SCCT research found that telling people how to protect themselves has to come before any reputation message.

Crisis Communication Channels and What Each One Carries

Social posts, the press release, the dark site, email and internal updates all carry a crisis message, and each has its own job. The holding statement is the first message sent through them.

The holding statement

A holding statement acknowledges the situation without admitting or denying facts, and often runs two to three sentences, according to 5WPR. Legal reviews it before release, and it becomes the baseline every later statement is measured against.

It should say what is known, what is not yet confirmed, who is affected and what the brand is doing now. Speculation about the cause stays out, and so do promises about outcomes and any language that admits liability before the facts are in.

Social posts and the press release

64% of consumers in Sprout Social’s Q2 2026 Pulse Survey said it is important for brands to respond publicly on social media rather than through a press release or website statement.

The acknowledgment and the short updates go out as social posts, while the press release holds the detailed, quotable version that journalists and regulators can cite.

Platform fit matters. Hootsuite’s 2026 guide suggests TikTok is a poor place to explain a serious product issue, while LinkedIn suits messages from leadership.

For larger incidents, keep a stable source of truth on an owned channel and have social posts point there for substance. No two channels should publish different versions of what happened.

The dark site

Pre-built and non-public, a dark site goes live when a crisis needs a dedicated information hub. Publishing it takes hours, not days, because the pages already exist.

It holds pre-approved statements, news releases, photos, background documents, FAQs and contact details (Axia PR). It can live on a separate domain, in a section of the main site, or as a full replacement of it. The cost is a second site to register, host, maintain and health-check, with the SSL certificate already in place (Comprend, 2019).

Comprend’s advice matches mine. A single page on the live site handles a smaller issue, and a full dark site earns its cost only when an outage or breach could take the main site down. KFC UK’s 2018 page listing which nearby restaurants had chicken shows the format at its simplest (CNBC, 2018).

Email and internal updates

Email carries the detailed explanation that does not fit in a post, aimed at customers who are directly affected (5WPR).

Internal updates matter as much. Hootsuite’s guide notes that misinformation spreads inside a company as easily as outside, so staff need to know what they can and cannot say about the crisis on personal accounts, and an employee social media policy written in advance gives that instruction somewhere to live.

How to Rebuild Brand Trust After a Crisis

Start by confirming the root cause. Then take a corrective action the public can verify, and review the response afterward so the crisis plan gets better. Verified change repairs more than words do.

Customers give a second chance when the fix is visible. 51% of consumers in Sprout Social’s Q2 2026 Pulse Survey would consider buying from a brand within a few months of a crisis being properly addressed.

Root cause and corrective action

Corrective action has to be something an outsider can check. Volkswagen’s January 2017 US settlement put the company under an independent compliance monitor and required injunctive relief to prevent future violations (US Department of Justice and EPA, 2017).

A court-ordered monitor is the heavy end. The light end is a named owner, a date and a public update when the fix ships.

The post-crisis review

The review looks at how quickly the issue was detected and answered, where it traveled beyond the first channel, and how tone shifted after each statement. It also looks at where approvals or handoffs slowed the team (Meltwater, 2026), and what the incident cost in refunds, suspended campaigns and lost traffic (Brandwatch).

Hootsuite recommends a stakeholder debrief that includes social, customer care, legal and leadership. Fold each finding back into the plan with an owner and a date.

Recovery indicators

Mention volume and sentiment move first, and trust lags behind them.

Watch for mention volume heading back toward the pre-crisis baseline, and for the negative share of sentiment falling and staying down after each update. Trust can be benchmarked against the Edelman Trust Barometer.

Edelman’s 2025 special report, Brand Trust, From We to Me, found that trust now counts as much as price and quality in purchase decisions. That makes it worth tracking directly.

Customer return is the hardest signal to read early. The usual methods for measuring brand loyalty, repeat purchase among them, work here too.

Sources disagree on timing because they measure different things. Sprout measures stated purchase intent, while Hootsuite’s 2026 guide says reputation recovery can take weeks or years. Intent returns before reputation does.

What Real Brand Crises Show About Response Choices

Starbucks in 2018, Maersk in 2017, Volkswagen from 2015 to 2017 and KFC UK in 2018 point to a single variable, whether the brand’s public position held up against facts others could check.

Starbucks, 2018: an apology with a dated action

Two Black men were arrested at a Philadelphia store on April 12, 2018. CEO Kevin Johnson apologized in a written statement late Saturday and followed with a video message, met the men on Monday, and announced the store closures on Tuesday (Fortune, 2018). More than 8,000 US stores closed for an afternoon on May 29 for racial-bias training (AP).

The announcement tied the apology to an action with a date. Critics had something to hold the company to.

Maersk, 2017: openness during an outage

A NotPetya malware attack, disguised as ransomware, shut down Maersk’s IT in June 2017. The company posted public updates on Twitter while engineers rebuilt its systems in 10 days, with losses put at $250 million to $300 million (chairman Jim Hagemann Snabe, World Economic Forum, January 2018).

Customers stayed understanding, and Snabe credited the openness with easing the fallout (SC Media, 2018). Openness limited the reputational damage. It did not erase the financial loss, and Snabe admitted the company had been only average on cybersecurity before the attack.

Volkswagen, 2015 to 2017: a long denial before the apology

On September 18, 2015, the EPA issued a notice of violation over defeat devices in US diesel cars. On September 22, VW acknowledged the software exists in cars worldwide, and CEO Martin Winterkorn apologized in a video. He resigned the next day, saying he knew of no wrongdoing on his part.

In January 2017, VW agreed to plead guilty to three felony counts, including obstruction of justice for destroying documents, and it entered the plea in March 2017. The US penalties, criminal and civil together, came to $4.3 billion (US Department of Justice).

The apology came within days of the EPA notice. The failure sat earlier, because VW executives had told US regulators for more than a year that the test discrepancies were technical glitches, as The New York Times reported in September 2015.

A fast apology cannot repair a long denial. Bloomberg reported in January 2017 that VW’s global sales had not suffered significantly, so the bill arrived as penalties and legal exposure rather than lost customers.

KFC UK, 2018: tone matched to the harm

KFC UK switched its delivery provider to DHL in February 2018, and hundreds of restaurants closed when chicken stopped arriving. On February 23 it ran full-page apologies in The Sun and Metro showing an empty bucket with its letters rearranged to read FCK (HuffPost, 2018).

The ad thanked staff and franchise partners and sent readers to a page of restaurants that had chicken. Humor worked because the harm was inconvenience. The same tone after an injury or a data loss would read as contempt.

What separated the outcomes

Each recovering brand attached its apology to something checkable. Starbucks committed to a date and a store count. Maersk narrated its progress while it rebuilt, and KFC simply told customers which restaurants had chicken.

Volkswagen’s record contradicted its public position for more than a year. Four cases are not a sample, but the pattern is hard to miss. Acknowledgment came within days in every case, and follow-through decided the rest.

When a Crisis Plan Fails

Having a plan on file does not mean it holds up once an incident starts.

Approvals slower than the conversation

Brandwatch advises that community managers should not sit under policies that force them to wait for approval during a crisis. The gap is easy to see. While a statement moves through social, PR, legal and leadership, the public conversation carries on without the brand.

Legal review is the usual bottleneck, and holding statements do need it before release (5WPR). The fix is pre-approval, done in calm weeks, not a faster lawyer.

A plan followed too rigidly

Emily Flathers, senior marketing manager at Alfred Coffee, told Hootsuite that following a plan too rigidly, especially without a second opinion, can make things worse.

Her rule is to stay nimble and bring a manager or director in as soon as an incident starts to heat up.

Team fatigue and tone

The Drum’s guide to social media crisis challenges has a checklist that reads as plain common sense until a night shift goes wrong.

• Keep corporate language off social feeds, which are mostly personal
• Show empathy before anything else
• Do not get goaded into replying to abusive posts
• Give tired team members regular breaks, since they make more mistakes

A plan nobody maintains

ISO 22361:2022 frames crisis management as a capability to plan, establish, maintain, review and continually improve.

A plan last edited before the most recent reorganization lists approvers who may have left.

When the plan is bigger than the brand

Severity tiers, approval chains and role charts assume several people. A one-person business cannot staff a crisis team, and a plan that pretends otherwise gets ignored.

The scaled-down version is one person who decides, one pre-approved holding statement reviewed by counsel, and a Google Alert or listening topic on the brand name. One outside advisor or agency on call rounds it out.

Brand Crisis Management FAQ

Should the CEO be the public face of a crisis?

Not by default. A trained spokesperson handles routine updates, and executives step in as spokespeople when severity rises.

Name both roles in the plan before an incident, so nobody debates it during one.

Does a public apology create legal liability?

It can, which is why counsel reviews the wording before release. Laws vary by jurisdiction, so a blanket answer does not exist.

A statement can express concern and describe next steps without assigning fault before the facts are confirmed.

How should a brand respond to a false claim or rumor?

Verify first, then correct with evidence on a channel the brand controls. SCCT treats rumors and challenges as the one place where denial fits.

Hootsuite’s 2026 guide adds that AI-generated fakes belong on the monitoring list too.

Should a brand turn off comments during a crisis?

No. Brandwatch and Hootsuite’s Emily Flathers both report that locking comments makes the situation worse.

Keep replies short and empathetic, and move cases that need detail, such as refunds, into private messages.

Can a well-handled crisis improve a brand’s reputation?

Yes, when the response is honest and backed by action. Aon and Pentland Analytics list honesty and transparency among the top drivers of recovery, and some companies in their study ended with a net gain in value.

Speed and tone alone do not produce that result.

Where to Start When No Crisis Plan Exists

In the first week, name one decision owner, pre-approve one holding statement, and set an alert on the brand name. The order matters because each step depends on the one before it.

Nobody approves the statement if there is no owner, and an alert without a statement only tells you a crisis has already started.

The trade-off is a first message generic enough to fit several incident types, plus alerts that will sometimes fire on a minor complaint. Both cost less than drafting wording and assigning approvers while the story spreads.

• Author
• Recent Posts

Bogdan Sandu

Bogdan Sandu is a seasoned designer who has been designing websites since 2008.

Renowned for his expertise in logo design and visual branding, Bogdan has developed a multitude of logos for various clients.

His skills extend to creating posters, vector illustrations, business cards, and brochures. Additionally, Bogdan's UI kits were featured on marketplaces like Visual Hierarchy and UI8.

He also wrote in the past years on sites like Design Your Way, WebDesignerDepot, WPDean, Designmodo, Speckyboy, Slider Revolution, and more.

Latest posts by Bogdan Sandu (see all)

• The YouTube Logo History, Colors, Font, and Meaning - 10 November 2026
• Monthly Retainer Billing for Freelance Designers: How to Get Paid on Time, Every Month - 10 November 2026
• How Design Studios Lose New Clients Between the First Email and the Signed Proposal - 10 November 2026