7 min read · 1,370 words
Most corporate communication advice is written for the easy case: announcing good news, launching a product, celebrating a milestone. Almost none of it is written for the moment that actually determines whether people trust your communication function at all — when the news is bad, the facts are still incomplete, and every hour of silence is being read as evidence of something worse than the truth.
I’ve had to draft and approve communication during moments a company genuinely didn’t want made public — a service failure, a leadership departure under difficult circumstances, a number that was going to disappoint the market. The instinct in the room during those moments is almost always to wait until you have the complete picture before saying anything. That instinct is usually wrong, and it’s the single most common mistake I’ve seen leadership teams make under pressure.
Why waiting for complete information backfires
Silence is not neutral. In the absence of information from the company itself, employees, customers, and media fill the gap with speculation, and speculation defaults to the worst plausible interpretation. Edelman’s Trust Barometer research has consistently found that how an organisation communicates during a crisis affects trust recovery more than the severity of the incident itself — companies that communicate early and honestly, even with incomplete information, recover trust faster than companies with objectively smaller problems who stayed silent while gathering facts. Harvard Business Review’s research on trust during a crisis makes a related point: trust built before a crisis is what buys a leadership team the benefit of the doubt during one, which is exactly why the routine, everyday communication habits matter as much as the crisis playbook itself — the same compounding logic I’ve argued applies to category entry points in why B2B brand awareness is the wrong metric to track: what you’ve built before the moment that matters is what actually gets tested in it.
The framework: acknowledge, commit, update
Acknowledge fast, even without full facts. The first statement doesn’t need to explain everything — it needs to confirm you’re aware of the situation and taking it seriously. “We are aware of [X] and are actively investigating” is a complete, honest, defensible first statement, and it needs to go out within hours, not days, of the situation becoming known internally.
Commit to a cadence, not a conclusion. Rather than promising a full explanation you can’t yet deliver, commit to when the next update will come. This does two things: it gives anxious stakeholders a concrete timeframe instead of an open-ended silence, and it protects you from having to walk back a premature conclusion later, which damages trust more than admitting you’re still investigating.
Update even when there’s nothing new to report. If your committed update window arrives and the investigation isn’t complete, communicate that explicitly rather than going quiet again. “We are still investigating and expect to share more by 2026” is a legitimate update. Missing your own committed cadence is worse than the original bad news, because it signals the company isn’t in control of its own process.
| Instinct under pressure | What actually works |
|---|---|
| Wait until the full picture is known | Acknowledge within hours with an honest “we’re investigating” |
| Promise a complete explanation soon | Commit to a specific next-update date, not a conclusion |
| Go quiet if there’s nothing new | Update on schedule even to say “still investigating” |
| Let legal write the entire statement | Legal reviews for risk; communication owns whether it sounds human |
The legal-versus-human tension, and how to actually resolve it
Every crisis statement goes through legal review, and legal’s job is to minimise liability, which often means stripping language until a statement is accurate but unrecognisably cold. The resolution I’ve found workable isn’t fighting legal on content — it’s separating the two jobs explicitly. Legal reviews for factual accuracy and liability exposure; communication owns tone, structure, and whether a human being would recognise the statement as something a person wrote. A statement can pass legal review and still read like it was written to protect the company rather than inform the reader, and that distinction is entirely visible to the audience receiving it. Weber Shandwick’s crisis communication practice makes the same point from the agency side: the statements that recover trust fastest are the ones that sound like they were written by an accountable person, not a legal department.
What I’ve watched fail
The specific failure pattern I’ve seen most often is a company issuing one comprehensive statement, going silent for the two or three weeks an investigation genuinely takes, and then being surprised that the silence itself became the story — “why hasn’t the company said anything since” is a genuinely reportable angle for a journalist even when nothing has actually gone wrong internally during that gap. PRSA’s guidance on trust and transparency during a crisis is explicit on this point: the absence of updates is itself treated as information by an audience, regardless of whether that was the intent.
Does this apply below the scale of an actual crisis — routine bad news too?
Yes, and this is where most of the framework’s everyday value actually lives. A missed quarterly target, a delayed product launch, a leadership change under normal circumstances — none of these are crises, but the same acknowledge-commit-update discipline applies at a smaller scale. The organisations that build a reputation for straight talk on routine bad news are the ones whose genuine crisis communication gets believed, because the audience already has a track record to judge it against. Axios’ coverage of Weber Shandwick’s C-suite research found CEO confidence in their own crisis communication readiness has been declining even as the volume of reputational risk events rises — evidence that most organisations are under-practising this discipline on the routine cases, not just the rare genuine crises.
What this means for you
Build the acknowledge-commit-update cadence into your crisis communication plan before you need it — the middle of an actual crisis is the worst time to be inventing a process. Draft template language for the “we are aware and investigating” first statement now, get it pre-approved by legal in principle, and agree the update cadence as organisational policy rather than a case-by-case negotiation under pressure. Trust built during a crisis runs on the same underlying currency as the trust I’ve argued case studies and reference proof build in emotional branding in B2B: where it works and where it’s theatre — evidence, not sentiment, is what actually reduces risk in someone else’s eyes.
Frequently asked questions
How quickly should a company respond to a developing crisis?
Within hours of the situation becoming known internally, even without complete facts. An honest “we are aware and investigating” statement is far better than silence while gathering the full picture, which reads to outside observers as evasion.
What should a first crisis statement actually say?
Acknowledgment that the company is aware of the situation and taking it seriously, plus a commitment to when the next update will come. It should not attempt to explain the full situation before the facts are actually known.
How often should a company provide updates during an ongoing crisis?
On whatever cadence was committed to in the first statement — and critically, even if there’s nothing substantively new to report, missing a committed update is more damaging than the update itself being uneventful.
How should legal and communications teams divide crisis statement responsibilities?
Legal reviews for factual accuracy and liability exposure. Communication owns tone and whether the statement reads as written by a human being. Treating these as one combined review usually produces a statement that’s accurate but cold.
Does this framework apply to routine bad news, or only major crises?
Both. Missed targets, delays, and leadership changes under normal circumstances all benefit from the same acknowledge-commit-update discipline, and building a track record on routine bad news is what makes genuine crisis communication credible when it matters most.
What’s the longest your organisation has gone silent during a difficult moment, and what did that silence actually cost? I’d like to hear how other communication leads have navigated this.
