Every crisis manual you have read says some version of the same thing: get out in front of it. Speak early, fill the vacuum, never let someone else tell your story first. It is good advice. It is also how a great many institutions manage to make their crisis worse before the first afternoon is over.
Remember United Airlines in April 2017. A passenger, Dr David Dao, was forcibly removed from a flight at Chicago O’Hare because the airline wanted his seat for commuting crew, and passengers’ videos went viral. United did speak quickly. Its chief executive, Oscar Munoz, apologised for "having to re-accommodate" customers, and a letter to employees described the passenger as disruptive and belligerent. The following morning United’s shares fell about four percent, erasing roughly 900 million dollars of market value within hours. By mid-afternoon Munoz had issued a second, fuller apology, calling the event horrific. The stock closed down just over one percent, but the first phrase was the one people remembered.
United’s problem was not speed. It was that the words went out before anyone had decided what United actually thought about what had happened on that plane.
What trauma surgeons know
R Adams Cowley, who built the Shock Trauma Center at the University of Maryland, gave emergency medicine one of its most famous ideas. "There is a golden hour between life and death," he said, adding that a critically injured patient may not die immediately, but that something irreparable may already have happened. What happens earliest is what you cannot undo.
In that hour, trauma teams do not hold a briefing. They assess, stabilise, decide who is in charge, and act. Talking to the family comes after they know what they are dealing with.
Crisis work is the same. What you establish in the first hour (who decides, what you know, who must be told) determines what you are able to say for the next three weeks.
Establish the facts
The first job is brutally simple: separate what you know from what you suspect and what you have merely heard. Write it down, with the source and the time. Almost every damaging early statement is a suspicion that was promoted to a fact because someone wanted to sound in control.
Why does this matter so much? Because of how fast the wrong version travels. Soroush Vosoughi, Deb Roy and Sinan Aral studied roughly 126,000 news cascades on Twitter between 2006 and 2017, spread by about three million people. False stories were 70 percent more likely to be retweeted than true ones. True stories took about six times as long to reach 1,500 people. And it was humans, not bots, doing the spreading.
There are two lessons there, and most people only take the first. Yes, silence will be filled by someone. But if your first statement contains an error, you become the false story, and your correction will move at the speed of truth, which is to say, slowly.
Your first statement should contain nothing you will have to take back.
Know whose clock you are on
What the "get out in front of it" school forgets: the public is often not the first audience you owe an account to. Regulators are, and their clocks start sooner than you think.
In India, the directions issued by CERT-In in April 2022 require service providers, intermediaries, data centres, companies and government bodies to report cyber incidents within six hours of noticing them. By the end of your first hour, a sixth of that window is gone. Under the European Union’s General Data Protection Regulation, a personal data breach must be reported to the supervisory authority without undue delay and, where feasible, within 72 hours. In the United States, listed companies must file a disclosure within four business days of determining that a cybersecurity incident is material, under rules the Securities and Exchange Commission adopted in July 2023.
So the first hour has to answer a question most press offices never ask: who is legally, contractually or morally entitled to hear this from us before they hear it on the news? Regulators. Lenders and insurers. Partners. Your own staff. And, above all, the people who were harmed.
The regulator who learns about your crisis from television is now part of your crisis.
Decide who is in charge
The second job is to decide who decides. One person with authority to make calls, a small group around them, and one voice for the outside world. Crises go wrong when five senior people each believe they are running the response, and the organisation speaks with all five of their voices at once.
BP is the cautionary tale. The Deepwater Horizon explosion in April 2010 killed eleven men. On 30 May, its chief executive, Tony Hayward, told a reporter he was sorry for the disruption to people’s lives and then added that he would like his life back. He apologised days later, but the line defined him, and BP announced in July that he would be replaced. Months afterwards, Hayward told the BBC that BP’s contingency plans had been inadequate and that the company had been making it up day to day.
That admission is the real lesson. The gaffe was a symptom. The improvisation began in the first hour, when no one had decided in advance how a crisis of that scale would be run.
Compare Johnson and Johnson in 1982. Seven people died after taking cyanide-laced Extra-Strength Tylenol capsules bought in the Chicago area. The company recalled 31 million bottles at a cost of about 100 million dollars. Tylenol’s share of the painkiller market fell from 35 percent to 7 percent, and by mid-1983 it was back to 30 percent. The case is taught as a communications triumph. It was a decision triumph. James Burke, the chief executive, later said the company’s credo, which ranks customers ahead of shareholders, gave him what he needed to persuade shareholders to fund the recall. The statement was easy because the decision was right.
Do you know, today, which principle your organisation would reach for in the first hour? If not, that is the work to do now, not then.
Know what people will see first
Only then do you turn to the statement, and you should treat it as a first impression, because it will be one. The psychologists Janine Willis and Alexander Todorov found that people judge trustworthiness, competence and likeability after seeing a face for one tenth of a second, and that those snap judgments closely match the ones they make with no time limit at all.
Your holding statement is that face. It does not need to say much. It needs to say what you know, what you are doing about it, who you are thinking of, and when you will speak next. And then you keep that promise.
Researchers have a name for telling the bad news yourself before someone else does: "stealing thunder." Laura Arpan and David Roskos-Ewoldsen studied it in 2005, and An-Sofie Claeys has since argued in Business Horizons that organisations in crisis should never hesitate to do it. We would add one condition. You can only steal thunder with facts you are sure of.
What the first hour is for
Very little of it is visible. You establish the facts and how you know them. You check which clocks are running. You decide who decides. You agree which principle governs the response. You tell the people who must hear first. Only then do you speak in public.
The statement is the last thing you do in the first hour, not the first.
