What Should a Company Do in the First 24 Hours of a Crisis?

In the first 24 hours, a company should establish what is factually known, stand up a single decision-making structure, protect people and legal position, acknowledge the situation publicly if it is already visible, and communicate with employees before external audiences learn more than they do.

Almost every avoidable reputational injury in a crisis traces back to one of two errors made on the first day: speaking beyond what the facts support, or saying nothing while others define the story. The discipline of the first 24 hours is holding the narrow space between those failures.

Verification precedes language. Before any statement is drafted, leadership should know what happened, when it happened, who is affected, what is still unknown, and who owns the answer to each open question.

A written, timestamped fact log — maintained by one person, updated continuously, shared with counsel — prevents the most common failure mode in fast-moving events: different executives working from different versions of reality.

Crises fail organizationally before they fail publicly. Legal, operations, human resources, investor relations and communications each hold part of the picture, and each will act reasonably in isolation while producing a collectively incoherent response.

One accountable decision-maker, one briefing rhythm, one approval path for anything that leaves the building. Everything else is coordination theater.

A holding statement is not an admission. It confirms awareness, expresses appropriate concern, describes the immediate action underway, and commits to a next update at a stated time — nothing more.

Silence in a visible event is itself a message, and it is read as either indifference or concealment. The objective on day one is not a complete account. It is credible presence.

Employees should not learn about their own organization from a news alert. Neither should regulators, major customers, or board members.

Map the order in which audiences will be informed — workforce, directly affected parties, regulators and partners, investors, media, community — and assign a named owner to each. Sequencing is where trust is either preserved or quietly spent.

Some day-one choices are effectively permanent: the first public characterization of the event, the decision to name or not name individuals, the tone taken toward those harmed, and the promises made about what the organization will do next.

Those decisions deserve senior judgment rather than speed. Most other things can be corrected. These cannot.