Back to Insights

Crisis & Rapid Response

How to Write a Crisis Communications Plan: A Practical Guide

9 min read

A team planning around a whiteboard in an office.

When a damaging event breaks, the difference between a calm response and a chaotic one usually comes down to a single document written long before the event. Knowing how to write a crisis communications plan is what lets an organisation respond at speed instead of improvising under pressure.

This is a practical guide. It covers the components a plan needs, who owns each role, and the sign-off paths that let approvals move promptly. It is not a theory piece, and it assumes you want something you can actually use.

What is a crisis communications plan?

A crisis communications plan is the pre-agreed document and capability that governs how an organisation detects, decides on and delivers its response when a damaging event breaks. It sets out the scenarios you are most exposed to, the triggers that activate a response, who does what, the messages you have approved in advance, and the path those messages take to sign-off.

The aim is simple: take as many decisions as possible out of the moment of pressure and settle them calmly, in advance. A plan is not a binder you file and forget. It is a living capability that someone owns, rehearses and keeps current.

There is one shift worth naming early. The durable record of any event is now what people find in search and what AI assistants say when asked, not just the calls a journalist makes. A modern plan has to account for that digital surface, not only the media. Authoritative .gov guidance such as the Ready.gov crisis communications plan framework still describes the core architecture well, but the channels it has to cover have widened.

Why every organisation needs a written plan (not improvisation)

Improvising under pressure is expensive. Every crisis fought from a standing start means assembling facts, locating sign-off authority and working out which audiences matter, all while the story is already moving and attention is at its peak. The hours lost to that scramble are the hours in which an inaccurate account hardens.

A plan written calmly beforehand changes those conditions. The facts of how you respond are already settled, so the team can focus on the facts of what happened.

The distinction that matters is between a living capability and a document filed and forgotten. A plan nobody has opened in a year is not preparation; it is paperwork. The organisations that come through best treat the plan as something they maintain and rehearse, which is the heart of building a proactive crisis capability before you need it.

The core components of a crisis communications plan

A plan does not need to be long. It needs to be complete. These are the components that earn their place.

Risk assessment and scenario mapping

Start with the events most likely to affect your organisation: operational failures, data incidents, leadership controversy, regulatory action, activist pressure. You cannot plan for everything, but you can plan for the handful of scenarios that are plausible for you.

Activation triggers and severity tiers

Define what counts as a crisis and how it escalates. A clear set of severity tiers stops two failures at once: treating a minor issue as a full crisis, and missing a real one because no one was sure it qualified.

Holding statements and pre-approved key messages

Draft holding statements and key messages in advance, scaled to the matter. These give you something accurate to say promptly while the full picture is still forming.

Stakeholder and audience map

Name who needs to hear what, and on which channels. Employees, customers, investors, regulators and partners each need a tailored message, not a single broadcast.

Monitoring and information environment analysis

Set up monitoring so the first signal of a problem reaches you early, not once it is already trending. This is research and intelligence work, information environment analysis that watches the surfaces where a story actually starts.

Channel plan

Cover owned, earned and paid channels, plus the AI and search record. The plan should say where each audience is reached and how the accurate account stays discoverable.

People mapping a plan on a whiteboard with sticky notes.
People mapping a plan on a whiteboard with sticky notes.

Who owns what: roles and responsibilities

A plan fails the moment a decision stalls because ownership is ambiguous. Clear roles are what prevent that.

A typical crisis team has a small, defined structure: an executive sponsor who carries the authority, a crisis lead who runs the response, a communications owner who manages messaging, a legal liaison, and the relevant operational leads. RACI-style clarity — responsible, accountable, consulted, informed — keeps every task tied to a named person.

One principle matters above the rest. For messaging under pressure, name a single decision-maker. Committees are where speed goes to die; a clear owner with agreed authority is what keeps the response moving.

For organisations that already have a comms or government relations function, the plan should show how a digital execution layer plugs into it, handling the search, social and AI surfaces at tempo while the existing team holds the relationships and strategy. The Harvard Business Review’s work on leading communication through a crisis is a useful reminder that messaging under pressure is ultimately a leadership task, not just a process one.

Sign-off paths: approving messages at speed

The slowest part of most live responses is not writing the message. It is getting it approved.

Agree the approval chain before any crisis, with tiered authority. A routine update should not need the same review as a board-level statement. Tiering the approvals means minor matters clear quickly while the genuinely consequential ones get the scrutiny they deserve.

Document who is authorised to speak and where it applies, and build in the legal or regulatory review step. The UK Government Communication Service’s guidance on communicating in a crisis is a good reference for structuring this in a regulated context.

The aim is approvals that move promptly because the path was settled calmly in advance, through a structured chain rather than an ad hoc one. Pre-approve what you can, so the live decision is narrow.

A business team in a working meeting around a table.
A business team in a working meeting around a table.

Drafting holding statements and key messages in advance

Pre-written, pre-approved statements remove the slowest part of a live response. When something breaks, the team is editing a draft, not starting from a blank page.

Build templates by scenario type. Each template carries the fixed, agreed language and leaves clearly marked variables — the facts you fill in live once they are confirmed. That structure keeps the message accurate while letting it ship at speed.

Two things make these statements durable. First, consistency across channels: the same core message everywhere, adapted in tone but not in substance. Second, accuracy that holds up in the record AI assistants and search engines later draw on, because that record outlives the news cycle.

Where legal exposure overlaps with the communications response, the drafting needs to sit close to counsel. This is where crisis work and litigation communications meet, and the holding lines have to satisfy both audiences at once.

Testing, rehearsing and maintaining the plan

A plan you have never tested is a hypothesis, not a capability.

Run tabletop exercises and simulations that pressure-test the parts most likely to fail under stress: ownership and sign-off. A drill surfaces the gap where two people both think the other has authority: far better to find that in a rehearsal than in the real thing.

Review the plan on a regular cadence as platforms, audiences and risks shift. After any incident, run a post-incident review and feed what you learned back into the document. The plan should keep pace with the environment rather than drifting out of date.

The mindset is continuous capability, not a one-off artefact. A short, current, rehearsed plan beats a long one nobody has opened.

The digital crisis plan: search, social and AI assistants

The final component is the one most older plans miss entirely. Your plan must address what shows up in Google during and after a crisis, and what ChatGPT and other assistants say when someone asks about your organisation.

That record is the lasting one. A story may fade from the headlines quickly; the search results and AI answers about it can persist long after. So reference-source accuracy matters: the well-structured, authoritative material those systems draw on has to exist and be correct.

Social platforms move fastest of all, and each has its own dynamics. The work of managing reputation on X/Twitter during a crisis looks different from steadying the search record, and the plan should treat them as distinct channels with distinct owners.

AI assistants add a further layer, because they synthesise rather than link. Knowing what to do when ChatGPT is wrong about your company is now part of crisis readiness, not a separate concern. Proactive material built beforehand is what shapes the durable record — you cannot construct it from scratch while a story is breaking.

How Morris McLane runs this in practice

Writing the plan is one thing; executing it on live digital surfaces is another. Our crisis communications service is the execution layer that turns the document into an operating capability, working alongside your existing comms or government relations team.

In practice that means a few concrete strands:

  • Always-on monitoring and information environment analysis across search, social and the AI assistants, so the first signal reaches you early and you can see how a story is forming rather than only that it has.
  • A pre-built digital response playbook: holding lines, owners and channel-by-channel actions staged in advance, so the live decision is narrow and the response ships through an agreed path rather than an ad hoc scramble.
  • Owned and paid amplification to make the accurate account discoverable where audiences actually look, paired with reference-source and structured-data work so the durable search and AI record reflects the facts.
  • Counsel-aligned drafting where legal exposure overlaps, keeping the holding lines defensible for both the public and the courtroom.

The result is a plan that does not just sit in a binder, but runs at the tempo a live event demands.

The short version

A crisis communications plan is the pre-agreed document and capability that lets you respond at speed instead of improvising. Write it calmly, around the scenarios you are actually exposed to. Define the components, name who owns each role, and settle the sign-off paths in advance so approvals move promptly. Then test it, maintain it, and extend it to the search and AI record that now outlives any news cycle.

If you want that capability built and run rather than just advised on, our crisis communications service sets out how we work alongside your existing team, at the tempo the situation demands.

Frequently asked questions

What is a crisis communications plan?

A crisis communications plan is the pre-agreed document and capability that sets out how an organisation detects, decides on and delivers its response when a damaging event occurs. It covers risk scenarios, activation triggers, roles, pre-approved messages and sign-off paths, so the response is structured rather than improvised under pressure.

What are the main components of a crisis communications plan?

The core components are a risk and scenario assessment, clear activation triggers and severity tiers, a stakeholder and audience map, pre-approved holding statements and key messages, defined roles and responsibilities, agreed sign-off authority, and a monitoring set-up. Increasingly it should also address the search and AI-assistant record that outlives the news cycle.

Who should be responsible for the crisis communications plan?

Ownership is usually shared across a small crisis team: an executive sponsor, a crisis lead, a communications owner, a legal liaison and relevant operational leads. The key is mapping responsibilities clearly in advance so that no decision stalls because it is unclear who owns it, and so a single decision-maker can approve messaging at speed.

How do you set up sign-off paths so approvals do not slow the response?

Agree the approval chain before any crisis, with tiered authority so routine updates do not need the same review as a board-level statement. Pre-approve holding statements and key messages where you can, and document who is authorised to speak and which legal or regulatory review applies. The aim is approvals that move promptly because the path was settled calmly in advance.

How often should a crisis communications plan be reviewed?

A plan written once and filed away ages quickly as platforms, audiences and risks change. Treat it as a continuous capability: review it on a regular cadence, rehearse it through tabletop exercises, and update it after any incident so the document keeps pace with the environment rather than drifting out of date.

How is a digital crisis communications plan different?

A digital crisis plan accounts for the fact that the durable record of an event is now what people find in search and what AI assistants say when asked, not just the immediate news coverage. It adds information environment analysis to catch early signals, a channel plan spanning owned, earned and paid, and attention to reference-source accuracy so the lasting record is shaped deliberately.

Related service Crisis & Rapid Response Explore

More in Crisis & Rapid Response

Get in touch

Tell us a little about the situation — narrative, exposure, timing. We'll reply promptly with initial thoughts and next steps. Confidential, always.