In short: crisis management is the discipline that coordinates prevention, response and recovery in the face of events threatening a brand's reputation. The most solid framework is Timothy Coombs' Situational Crisis Communication Theory (SCCT): first classify the level of perceived responsibility, then pick a consistent response strategy. Three operational phases — pre-crisis (prevention), crisis (response), post-crisis (recovery) — structure the process.
- Coombs' SCCT is the most-cited framework in peer-reviewed crisis communication literature — Wiley — International Encyclopedia of Strategic Communication
- 59% of executives report having already faced at least one significant crisis, but fewer than half have a formalized plan — Deloitte Global Crisis Management Survey
- Trust in business remains higher than trust in governments and media, but drops sharply after a mishandled crisis — Edelman Trust Barometer 2025
In 2026 crisis management is no longer an art reserved for veteran PR professionals: it is a discipline with mature academic frameworks, objective metrics and replicable processes. This guide presents the dominant theoretical model — Timothy Coombs' Situational Crisis Communication Theory — and integrates it with the three operational phases recognized by the Institute for Crisis Management, ICCO and the peer-reviewed literature. It is a framework-first guide: we do not analyze case by case, but build the theoretical scaffolding that lets you decide, under pressure, what to do and how to say it.
If instead you are looking for the analysis of the most recent real cases — M&S ransomware, OpenAI Raine lawsuit, American Eagle, Jet2, Cracker Barrel — read the complementary article on 5 reputation crises of 2025 and crisis communication lessons for 2026. This piece provides the theory; that one provides the empirical evidence.
Frequently Asked Questions
What is crisis management?
Crisis management is the set of processes, structures and capabilities through which an organization identifies, contains and overcomes events that threaten its reputation, operations or business continuity. According to the Institute for Crisis Management, a crisis is «a significant business disruption that stimulates extensive news media coverage». It spans three dimensions: operational (stopping physical damage), communicative (managing public narrative) and strategic (protecting long-term value). It is not the same as crisis communication, which is a subset of it.
What is the difference between crisis management and crisis communication?
Crisis management encompasses the entire handling of the event — logistics, legal, risk assessment, operational continuity, institutional relations. Crisis communication is its communicative component: messages, spokespeople, channels, timing. You can have excellent communication and poor management (an empathetic CEO with no operational plan), or the reverse (a perfect technical fix, but stakeholders furious at the silence). The academic literature (Coombs, Fearn-Banks, Heath) treats the two disciplines as concentric systems: communication is the how, management is the what.
What is Situational Crisis Communication Theory (SCCT)?
SCCT, developed by Timothy Coombs starting in 1995 and formalized in Ongoing Crisis Communication (Sage, multiple editions), is the framework guiding the choice of response strategy based on the level of perceived responsibility attributed to the organization. It classifies crises into three clusters (victim, accidental, preventable) and maps consistent response strategies (deny, diminish, rebuild). It is grounded in Weiner's attribution theory and supported by dozens of experimental studies published in Journal of Public Relations Research, Public Relations Review and Management Communication Quarterly.
What are the phases of crisis management?
The canonical phases are three: pre-crisis (prevention & preparation) — risk assessment, crisis plan, training, monitoring; crisis (response) — detection, first statement, operational coordination, multi-stakeholder communication; post-crisis (recovery & learning) — reputational rebuilding, plan revision, lessons learned. The model is recognized by ICCO, the Institute for Public Relations and widely replicated across academic literature. Some authors add a fifth phase (learning); others include it in recovery.
How much does a reputation crisis cost?
Data from Oxford Metrica show that a severe reputation crisis can erode up to 22% of market value for listed companies, with an average recovery time of 60-300 days depending on prior preparation. Weber Shandwick estimates that around 63% of a company's market value is attributable to reputation, and its compromise affects talent acquisition, pricing power and access to capital. The cost does not end with the media peak: the reputational tail on search engines and social media can last 18-36 months.
Does an academic framework also apply to SMEs?
Yes. SCCT and the three-phase model are scalable: an SME does not need a dedicated crisis room, but it still has to formalize a minimum plan with a designated spokesperson, list of critical stakeholders, primary communication channels and activation procedures. ICCO (International Communications Consultancy Organisation) documents that the difference between reputational survival and collapse for an SME depends more on having even a rudimentary plan in place than on available resources.
Why you need a theoretical framework (and not just case studies)
Famous case histories — Tylenol 1982, BP Deepwater Horizon 2010, Apple Antennagate, Chipotle, Domino's — are valuable teaching material, but dangerous if read without theoretical scaffolding. The risk is the narrative fallacy described by Nassim Taleb: extracting post-hoc rules from unique events, mistaking correlation for causation. «Johnson & Johnson recalled 31 million packages and survived, so always recall everything» is a dangerous lesson. The context was different: accidental crisis, external responsibility (malicious third-party tampering), consumers already predisposed to defend the brand.
A theoretical framework — in our case Coombs' SCCT — does the opposite: it starts from the objective variables of the crisis (type of threat, reputational history, severity of damage) and prescribes the response. It does not say «do what J&J did»; it says «given this configuration of variables, the strategy that minimizes reputational damage is X». It is the difference between studying clinical cases and studying pharmacology: the competent physician knows both, but in the operating room applies pharmacology.
This evidence-based approach is aligned with the Australian and US tradition of strategic communication: Coombs & Holladay (2010), Kathleen Fearn-Banks, Robert Heath. The peer-reviewed material is consistent and convergent: better a rigorous framework applied poorly than a case study applied well. The first produces correctable errors; the second produces illusions of competence.
Situational Crisis Communication Theory (SCCT) in detail
SCCT rests on a single but decisive question: how much does the public attribute responsibility to the organization for the crisis? Responsibility attribution is the main driver of the public's emotional reaction and therefore of reputational impact. Coombs, drawing on Bernard Weiner's attribution theory, classifies crises into three clusters.
Cluster 1 — Victim
The organization is perceived as a victim of external forces: natural disasters, malicious third-party attacks (cyberattacks, sabotage), unverified rumors. Attributed responsibility is minimal. Examples: an unpredictable ransomware attack, an extreme weather event, a smear campaign with false information.
Cluster 2 — Accidental
The crisis stems from unintentional corporate actions: unforeseen technical challenges, workplace accidents, product defects discovered after launch. Attributed responsibility is moderate. The organization has some role, but without intentionality or gross negligence.
Cluster 3 — Preventable
The crisis stems from negligence, intentional violations or poor risk management. Attributed responsibility is maximum. Examples: financial fraud, concealment of known defects, safety breaches from underinvestment in risk management, illegal conduct by management.
Each cluster maps to optimal response strategies. Coombs identifies three main families: deny (deny responsibility), diminish (reduce perceived responsibility), rebuild (accept and repair). A fourth family, bolstering, is reinforcement (recalling past positive actions, acknowledging victims). The wrong choice amplifies the crisis: using deny in a preventable cluster is the fastest way to lose credibility, as documented by Coombs and Holladay (2004) in an experimental study published in Journal of Public Relations Research.
Matching strategy to cluster: the SCCT decision table
Two operational principles follow from the table. First: reputational history is a multiplier. If a brand has already experienced a similar crisis, the public tends to reclassify a new one into the higher cluster (accidental becomes preventable). This was documented experimentally by Coombs (2004) and replicated in later studies. Second: the response strategy shapes perception. A consistent choice reduces measured reputational damage; an inconsistent one amplifies it. This is not rhetoric: it is an effect replicable in the lab.
The three operational phases: prevention, response, recovery
The three-phase model, consolidated by the Institute for Public Relations and recognized by ICCO, integrates SCCT with a time dimension. Each phase has distinct objectives, actors and outputs.
Pre-crisis — prevention & preparation
This is the most important phase, because it determines how costly the actual crisis will be. It includes risk assessment (mapping plausible crisis scenarios, their likelihood and impact), crisis plan (operational document with roles, procedures, escalation), crisis team training (spokesperson, legal, operations, HR, digital), media training for the CEO and C-levels, simulations (tabletop exercises at least semi-annually). Typical output: a 20-40 page document updated annually, tested with simulations and integrated into the company's information systems. The Deloitte Global Resilience and Crisis Management Survey documents that companies with formalized and tested plans recover market value in half the time compared with those without.
Crisis — response
This is the visible phase, the one the public observes. It includes detection (24/7 monitoring, alert thresholds), crisis team activation (ideally within 1-2 hours), first statement (holding statement within 4-6 hours of the conversation peak), operational coordination (containment of physical/technical damage), multi-stakeholder communication (customers, employees, media, investors, regulators). Coombs recommends the speed rule: responding quickly even with partial information is more effective than waiting for complete information. Silence is read as guilt or incompetence. Typical output: at least 3-5 structured communications in the first 48 hours, with updates every 12-24 hours until the crisis subsides.
Post-crisis — recovery & learning
The phase in which reputation is rebuilt and the experience metabolized. It includes sentiment monitoring (sentiment analysis, share of voice, brand-related searches), visible structural actions (procedure changes, new standards, possible leadership changes), recovery narrative communication (storytelling of change, not celebration), internal lessons learned (formal debrief, plan revision). The reputational tail typically lasts 6-18 months for severe crises; the recovery phase does not end with the end of the media peak.
Operational framework: phases × actions × tools × output
Stakeholder management: who talks to whom
A crisis does not have a single audience. The literature (Fearn-Banks, Ulmer, Sellnow) identifies at least five audiences with different, often contradictory information needs.
- Customers: they want to know if and how they were affected, what they should do, what the company will do for them. Preferred channels: direct email, social, customer service.
- Employees: they want to understand if their jobs are at risk, how to answer external questions, what to communicate to customers and suppliers. Preferred channels: intranet, town hall, CEO email.
- Media: they want fresh information, signed statements, access to authoritative internal sources. Preferred channels: press release, briefing, structured interviews.
- Investors: they want quantified impact, recovery timeline, strategic actions. Preferred channels: regulated financial releases, analyst calls.
- Regulators / authorities: they want procedural compliance, cooperation, official documents. Preferred channels: formal, protocolled communications, hearings.
The consistency principle is key: messages can be modulated by audience, but cannot be contradictory. A reassuring statement to customers that contradicts a release to investors (or vice versa) produces double reputational damage when the two channels cross — which always happens, because journalists, regulators and activists read everything.
KPIs and reputation recovery metrics
Modern crisis management is measurable. The literature (Coombs, Weber Shandwick, Oxford Metrica) proposes quantitative indicators for each phase.
- Response time (minutes/hours from peak to first official statement) — sub-6 hour target for social crises, sub-24 hours for complex crises.
- Share of voice between corporate narrative and critical narrative in reference media, in the first 7, 30 and 90 days.
- Sentiment score (positive / neutral / negative) on social and media, compared with pre-crisis baseline.
- Reputation index (Harris Poll, RepTrak): structured surveys with consumer audiences, compared pre and post.
- Market value (listed companies): drawdown versus baseline, days to recover 50% / 100% of pre-crisis value.
- Search queries: volume of brand + negative keyword searches, persistence over time (typically 6-18 months for severe crises).
- Customer retention: churn rate in the 90 and 180 days after versus baseline.
Monitoring these metrics continuously turns crisis management from rhetorical art into engineering discipline: you measure effectiveness, correct decisions, update the plan. It is the only way to accumulate real organizational competence.
Recurring crisis management mistakes
Literature and annual reports from the Institute for Crisis Management converge on a recurring list of mistakes that turn containable crises into disasters.
- Initial silence: waiting for «complete information» before speaking. Silence is filled with speculation, which is always worse than reality.
- Deny in preventable contexts: denying responsibility in crises where the public assigns maximum blame. Coombs documents that this choice doubles reputational damage.
- Internal focus: releases that talk about the company («our reputation», «our people») instead of victims/customers.
- Multiple spokespeople: inconsistent statements between CEO, legal and PR. A crisis demands one spokesperson, preferably the CEO.
- Abandoning social: responding only via press while the crisis is born and amplified on social. The response must be on the platform where the crisis originates.
- Deleting critical comments: the fastest way to turn criticism into a scandal. Someone almost always takes a screenshot.
- Declaring «closed» too early: announcing the end of the crisis before sentiment has actually recovered. The reputational tail lasts months, not days.
Crisis management and AI: 2026 changes the playing field
Two phenomena make 2026 different from previous years. First: speed of diffusion. A crisis born on TikTok can reach hundreds of millions of views in 24 hours, before most crisis teams have even activated. Acceptable response times have compressed: where a release in 48 hours was timely ten years ago, today it is late. Second: synthetic content. Deepfakes, invented statements, fake AI-generated screenshots complicate monitoring and open disinformation-driven crisis scenarios that require new tools (content provenance, rapid verification, legal takedown).
The Reuters Institute Digital News Report 2025 documents how trust in information found online is declining, with an increasingly skeptical and polarized public. This paradoxically increases the importance of institutional sources: in a noisy environment, a signed, verifiable statement matters more, not less. The media-trained CEO becomes a strategic asset, not a cost.
Do you need to prepare a crisis management plan?
Deep Marketing builds structured crisis plans for brands: risk assessment, crisis manual, spokesperson training, simulations, continuous monitoring and active management during an ongoing crisis. Request a reputation audit or discover our press office and events service to prepare the brand before a crisis arrives. For the practical analysis of the five most relevant cases of 2025, read the complementary guide on crisis communication 2025-2026: five lessons from M&S, OpenAI, American Eagle, Jet2, Cracker Barrel.
Sources and References
- Coombs, W.T. — Situational Crisis Communication Theory (SCCT), Wiley Encyclopedia of Strategic Communication
- Coombs & Holladay — The Handbook of Crisis Communication (Wiley-Blackwell)
- Coombs, W.T. — Ongoing Crisis Communication: Planning, Managing, and Responding (Sage Publications)
- Institute for Public Relations — Crisis Management and Communications
- Institute for Crisis Management — Annual Crisis Reports
- ICCO — International Communications Consultancy Organisation, Crisis Guidelines
- Edelman — Trust Barometer 2025 and Brand Trust Reports
- Deloitte — Global Resilience and Crisis Management Survey
- Oxford Metrica — Reputation Review
- Weber Shandwick — The State of Corporate Reputation
- Reuters Institute — Digital News Report 2025
- Harvard Business Review — Crisis Communication Archive