The first 90 minutes: a crisis communications operating system for technology leaders

In a technology crisis, speed matters—but unverified speed compounds risk. The operating principle is simple: move quickly on process, cautiously on facts and consistently on empathy.

The operating principle

Name a single incident communications lead, open a time-stamped decision log and establish one source of truth with legal, security, operations and customer support. Record what is confirmed, what is being investigated and when the next update will be issued.

The first holding statement should acknowledge impact, describe the response underway and set an update cadence. Avoid root-cause speculation, absolute security claims and language that minimizes customer experience. Silence creates a vacuum; overconfidence creates a future contradiction.

Put it under pressure

Prepare channel-specific versions for customers, employees, partners, media and social platforms, but keep the factual core identical. Monitor questions and false claims as intelligence—not as invitations to argue online.

After stabilization, publish the accountable narrative: what happened, the material impact, what changed and how recurrence risk is being reduced. Reputation is rebuilt through demonstrated learning, not a victory lap.