Capture the foundational incident details and media inquiry context to inform strategic response positioning and urgency triage.
Crisis Incident Reference ID
Primary Incident Classification
Data Security Breach
Operational Disruption
Financial Irregularity
Executive Misconduct
Product Safety Failure
Environmental Incident
Workplace Safety Event
Regulatory Non-Compliance
Supply Chain Disruption
Other
Incident Detection Timestamp
Media Query Received Timestamp
Media Outlet/Journalist Name
Journalist's Publication Reach & Influence Tier
Tier 1 - Global Wire Service (e.g., Reuters, AP, Bloomberg)
Tier 2 - National Business Media (e.g., WSJ, FT, NYT)
Tier 3 - Industry Vertical Publication
Tier 4 - Regional/Local Press
Tier 5 - Independent Blogger/Freelance
Journalist's Response Deadline
Original Media Query Text (verbatim or summary)
Has the journalist indicated they are on deadline for breaking news?
Crisis Severity Score (1=Minor, 5=Catastrophic)
Media Urgency Score (1=Routine Inquiry, 5=Immediate Publication Threat)
Current Narrative Control Status
We control the narrative (no external leaks)
Narrative contested (some external speculation)
Narrative lost (misinformation spreading)
Narrative unknown (insufficient intelligence)
Has the incident been referenced on social media or public forums?
Have internal stakeholders been formally notified?
Systematically verify incident facts, quantify operational impact, and assess stakeholder exposure to ensure statement accuracy and proportionality.
Fact Verification Matrix
Fact Statement | Verification Status | Verified By (Name/Role) | Verification Timestamp | Evidence Source/Methodology | |
|---|---|---|---|---|---|
Incident occurred as described | Unverified | TBD | Forensic analysis pending | ||
Customer data was accessed | Partially Verified | CISO Team | 6/15/2025, 2:30 PM | Server logs show anomalous queries | |
Are all critical facts verified and documented?
Estimated Number of Affected External Stakeholders (customers, partners, public)
Estimated Number of Affected Internal Stakeholders (employees, contractors)
Categories of Affected Stakeholders (select all applicable)
Retail Customers
Enterprise Clients
Employees
Contractors
Suppliers/Vendors
Shareholders/Investors
Regulatory Bodies
General Public
None
Operational Impact Assessment by Business Function
No Impact | Minimal Impact | Moderate Impact | Severe Impact | Complete Disruption | |
|---|---|---|---|---|---|
Customer Service Operations | |||||
Core Product/Service Delivery | |||||
Financial Processing | |||||
Supply Chain Logistics | |||||
Employee Productivity | |||||
Brand Reputation |
Has the incident resulted in quantifiable financial loss?
Technical Root Cause Analysis Summary (non-technical language for PR use)
Is the technical root cause fully understood and remediated?
Containment Status
Expected Full Resolution Timestamp
Develop and refine the public-facing narrative, ensuring alignment with verified facts, stakeholder expectations, and brand voice under crisis conditions.
Proposed Public Statement (Main Body)
Proposed Statement Tone & Voice
Empathetic & Accountable
Factual & Neutral
Confident & Reassuring
Apologetic & Remedial
Assertive & Corrective
Key Message Pillars (3-5 core messages)
Does the statement include an explicit apology?
Does the statement include forward-looking commitments or promises?
Anticipated Q&A Matrix
Potential Question | Approved Response | Response Confidence Level | Requires Legal Pre-Approval? | Escalation Contact for Follow-up | |
|---|---|---|---|---|---|
How many customers were affected? | We are finalizing our investigation and will communicate precise numbers within 48 hours. | Medium | Yes | Chief Privacy Officer | |
Who was responsible for the breach? | We are focused on remediation and prevention, not attribution at this time. | High | |||
Recommended Distribution Channels
Official Company Blog
Press Release via Wire Service
Social Media (Twitter/X)
Social Media (LinkedIn)
Social Media (Facebook)
Direct Email to Affected Stakeholders
CEO Video Message
Employee Town Hall
No External Distribution (Internal Only)
Proposed Statement Release Date/Time
Will this statement be part of a multi-phase communication strategy?
Conduct comprehensive legal and regulatory risk assessment to ensure public statements do not create unintended liability, violate disclosure obligations, or misalign with formal regulatory filings.
Legal Risk Assessment by Jurisdiction
No Risk | Low Risk | Medium Risk | High Risk | Critical Risk | |
|---|---|---|---|---|---|
Data Privacy Violation Risk | |||||
Securities Law Disclosure Risk | |||||
Contractual Breach Risk | |||||
Consumer Protection Risk | |||||
Employment Law Risk | |||||
Competitive Intelligence Leakage Risk |
Does the incident trigger mandatory regulatory disclosure obligations?
Is the company subject to public securities reporting requirements?
Has a Material Adverse Effect (MAE) been triggered?
Does the proposed statement contain any forward-looking statements?
Could the statement be construed as admitting legal liability?
Have all statements been reviewed for privilege and work-product protection?
Cross-Border Communication Considerations
No cross-border implications
EU jurisdiction implications (GDPR)
UK jurisdiction implications
APAC jurisdiction implications
Multi-jurisdictional coordination required
Embargoed/sanctioned territory considerations
Legal Hold & Preservation Orders: Status and Implications for Public Commentary
Are there pending or threatened lawsuits related to this incident?
I confirm that the proposed statement aligns with all internal legal guidance and does not waive any legal defenses
Final executive clearance and accountability documentation. All approvals must be secured before external release.
Has the VP of Global Communications reviewed and approved the final statement?
Has the Chief Legal Counsel reviewed and approved the final statement?
Has the CEO or designated executive spokesperson been briefed and approved the statement?
Final Clearance Status
Final Clearance Timestamp
Does this require Board of Directors notification or approval?
Post-Release Monitoring Plan (media tracking, stakeholder feedback loops, escalation triggers)
Is this statement cleared for immediate release?
Crisis Response Team Lead Name & Role
24-Hour Contact Number for Post-Release Inquiries
I confirm that all required clearances have been obtained and the statement is approved for release according to corporate crisis communication protocol