← University
Crisis Communication During a Disruption
0 of 4

A regional accounting and advisory firm with 3 offices across southern Alberta discovered on a Thursday morning that its central file management system had become inaccessible. The firm employed 47 staff members across its locations and served approximately 1,200 active clients, ranging from individual tax filers to mid-sized manufacturing operations and several non-profit organizations. The system outage initially appeared to be a routine technical failure, but within 4 hours the firm's IT contractor confirmed that the disruption stemmed from a ransomware attack that had encrypted client files, internal communications archives, and the firm's scheduling and billing platforms.

The timing could not have been worse. The disruption occurred 6 weeks before the personal tax filing deadline, during the busiest period of the firm's annual cycle. Client documents submitted electronically over the preceding 3 months remained locked within the compromised system. Staff members at all 3 locations found themselves unable to access work files, communicate through internal channels, or confirm upcoming appointments with clients. The firm's managing partner and operations director faced immediate decisions about what to tell employees who were arriving at their desks to find their workstations frozen, what to communicate to clients who had entrusted sensitive financial documents to the firm, and whether regulatory notification was required given the nature of the data potentially affected.

The firm maintained a general business continuity plan that addressed premises emergencies and key personnel loss, but the plan had not been updated in 2 years and contained only a brief paragraph on communications during a disruption. No media relations protocol existed. The firm had a modest social media presence — a business page with approximately 800 followers and an occasional professional networking account — but no designated spokesperson and no experience managing public attention during an adverse event. Within 24 hours of the initial discovery, a local business reporter contacted the firm's reception line seeking comment on rumours of a cyberattack affecting a professional services provider in the region.

The firm's leadership now confronted overlapping communication challenges: keeping staff informed and functional across multiple locations, notifying clients whose data might be affected, determining what obligations existed toward professional regulators and privacy authorities, managing supplier relationships while payment systems remained offline, and responding to media inquiries without making statements that could create legal exposure or inflame public concern. The decisions made over the following 72 hours would shape whether the disruption remained a difficult but survivable incident or escalated into a reputational and operational crisis that threatened the firm's long-term viability.

Media and Social Media Management During an Operational Disruption

Every organization, regardless of size or sector, will eventually face a disruption that attracts attention beyond its immediate stakeholders. Whether that attention comes from a local newspaper reporter, a concerned citizen on social media, or a national broadcaster covering a regional incident, how an organization manages its communications during a crisis can determine not only its reputation but its very survival. The relationship between operational disruption and public perception has never been more immediate or consequential than it is today, when a single social media post can reach millions of people within hours and traditional media outlets monitor online platforms constantly for emerging stories. For Canadian small and medium-sized businesses, sole proprietors, non-profit operators, and risk managers, understanding media and social media management during an operational disruption is no longer optional expertise reserved for public relations professionals. It has become a fundamental competency that sits at the heart of business continuity planning.

The practice of crisis communication through media channels rests on principles that have evolved significantly over the past two decades while retaining certain timeless foundations. At its core, effective media management during a disruption requires an organization to balance transparency with prudence, speed with accuracy, and stakeholder interests with organizational protection. Canadian organizations operate within a framework shaped by both legal obligations and societal expectations, where the Personal Information Protection and Electronic Documents Act establishes federal requirements for protecting personal information that may become relevant during crisis communications, and where provincial privacy legislation in British Columbia, Alberta, and Quebec creates additional layers of compliance responsibility. As of the date of authorship, these privacy frameworks require organizations to consider carefully what information they disclose publicly, particularly when a disruption involves personal information about employees, customers, or other individuals. Beyond legal compliance, Canadian professional standards across industries from healthcare to financial services emphasize the importance of maintaining trust through consistent, honest communication even when circumstances are difficult.

The distinction between traditional media and social media management during a disruption matters less than many organizations assume. While the platforms differ dramatically in their mechanics, the fundamental principles of crisis communication apply across all channels. What does differ significantly is the pace of response required and the degree of control an organization can exercise over its message. Traditional media relationships typically allow for some degree of preparation time, even if that window has shrunk considerably in the digital age. A reporter calling for comment on a developing story may provide anywhere from thirty minutes to several hours before publication, depending on the nature of the story and competitive pressures. Social media, by contrast, demands near-instantaneous awareness and response capability. A complaint posted at 9:15 a.m. can become a trending topic by noon if it resonates with broader public concerns or if the organization appears unresponsive. Canadian organizations have learned through difficult experience that silence on social media is rarely interpreted charitably by audiences who expect brands and institutions to be present and engaged.

The practical mechanics of media management during a disruption begin long before any crisis emerges. Organizations that succeed in protecting their reputations during difficult periods almost invariably have established relationships with relevant media contacts, clear internal protocols for who may speak on behalf of the organization, pre-approved messaging frameworks that can be adapted to specific situations, and designated individuals who have received media training. For smaller organizations where hiring a dedicated communications professional is not feasible, this preparation may involve identifying which owner, executive, or board member will serve as the primary spokesperson, ensuring that person has basic comfort with being recorded or interviewed, and establishing a simple approval chain for any public statements. The International Organization for Standardization's guidance on business continuity, reflected in documents like ISO 22301, emphasizes that communication is a core capability that must be planned, resourced, and tested like any other element of continuity management. Canadian organizations that have adopted business continuity management systems aligned with these standards typically incorporate media response protocols as part of their overall preparedness framework.

When a disruption occurs, the initial hours present the greatest risk and the greatest opportunity for shaping public perception. Research consistently demonstrates that audiences form lasting impressions of an organization's competence and integrity based on its earliest communications following an incident. An organization that acknowledges a problem promptly, expresses appropriate concern for affected parties, and commits to transparent investigation establishes a narrative foundation that can withstand subsequent challenges. Conversely, an organization that appears evasive, defensive, or primarily concerned with protecting itself rather than addressing harm creates a narrative vacuum that others will fill, often unfavorably. The mechanics of this early response require coordination between operational response and communications functions. While operations teams focus on containing the disruption and protecting people and assets, communications personnel or designated spokespersons must gather accurate information, draft initial statements, and prepare for media inquiries that may begin within minutes of an incident becoming publicly visible.

Consider a scenario involving a mid-sized environmental services company operating out of Edmonton that provides hazardous waste transportation and disposal services to industrial clients across Western Canada. On a Thursday morning in late February, one of the company's specialized transport vehicles is involved in a collision on a provincial highway approximately forty kilometres outside the city. The driver sustains minor injuries and is transported to hospital. More significantly, the accident results in a breach of containment for several drums of industrial solvent being transported to a licensed disposal facility. Local emergency responders establish a perimeter, and traffic on the highway is diverted. By 11:00 a.m., aerial footage from a news helicopter shows emergency crews in protective equipment working around the overturned vehicle, with visible liquid on the roadway. The company's operations team is focused entirely on coordinating with emergency responders, notifying regulatory authorities as required under Transportation of Dangerous Goods regulations, and arranging for specialized cleanup contractors. Meanwhile, the company's social media accounts begin receiving concerned questions from nearby residents about air quality and water contamination risks. A local radio station leaves a voicemail requesting comment. Two environmental advocacy organizations post statements criticizing the hazardous waste transportation industry generally and tagging the company specifically. By early afternoon, a national news outlet has picked up the story, and the company's silence is becoming the story itself.

The implications of this scenario reveal several critical dimensions of media and social media management during operational disruptions. The company's operational response may be entirely competent and compliant with all applicable regulations, but its failure to establish a communications response of equal sophistication creates a parallel crisis that compounds the original incident. Every hour of silence allows other voices to define the narrative, attribute motives, and speculate about facts that the company itself is best positioned to address. The environmental advocacy organizations, while pursuing their own legitimate objectives, are filling an information vacuum that the company has created through its absence. Nearby residents, understandably anxious about potential health impacts, are receiving no reassurance from the organization responsible for the situation. Media outlets, unable to obtain comment, are framing the story in ways that may emphasize uncertainty and risk rather than the competent response actually underway. The company's reputation, built over years of safe operations and regulatory compliance, is being eroded in hours because the organization failed to treat communications as a core operational function during the crisis.

What this scenario also reveals is the interconnected nature of traditional and social media management. The questions appearing on the company's social media accounts are the same questions journalists will ask. The concerns expressed by advocacy organizations will inform the framing of news coverage. The absence of a company statement on any platform is noted across all platforms. An organization cannot effectively manage traditional media relations while ignoring social media, nor can it focus exclusively on social channels while declining to engage with journalists. The audiences overlap substantially, and information flows freely between platforms. A statement posted to a company's Facebook page will be quoted in newspaper articles. A quote given to a television reporter will be scrutinized and discussed on Twitter. This interconnection demands an integrated approach to crisis communications where messaging is consistent across channels even as it may be adapted in tone or length for different platforms and audiences.

For Canadian organizations seeking to apply these lessons practically, several concrete steps deserve attention. Establishing a crisis communications protocol before any disruption occurs represents the most important preparatory investment. This protocol should identify by name and role who is authorized to speak on behalf of the organization, who serves as backup if the primary spokesperson is unavailable, and what approval process applies to public statements. The protocol should include template statements for foreseeable disruption scenarios, recognizing that these templates will require adaptation to specific circumstances but provide a starting point that saves precious time during actual incidents. Contact information for key media outlets and journalists covering the organization's sector should be compiled and maintained current, as should access credentials and procedures for the organization's social media accounts. Many organizations discover during crises that only one person knows the password to the company Twitter account, and that person is unreachable. Testing these protocols through tabletop exercises, where leadership walks through a hypothetical scenario and practices making decisions and drafting communications, builds both capability and confidence.

When a disruption occurs, the practical sequence of communications activities follows a recognizable pattern that organizations can prepare for in advance. The first priority is information gathering, which requires close coordination with operational response teams. The communications function cannot craft accurate statements without understanding what has happened, what is being done about it, and what remains uncertain. This information gathering must be rapid but disciplined, distinguishing between confirmed facts and preliminary reports, and identifying what can be stated publicly without compromising ongoing response efforts or creating legal exposure. The second priority is initial acknowledgment, which may occur before comprehensive information is available. An organization can acknowledge that an incident has occurred and that response is underway without providing details that are not yet confirmed. This acknowledgment serves the crucial function of establishing the organization's presence in the conversation and signaling that information will be forthcoming. The third priority is substantive communication that addresses stakeholder concerns directly, provides accurate information about what has occurred, describes what the organization is doing in response, and commits to ongoing updates. The fourth priority is sustained engagement, recognizing that crisis communications is not a single statement but an ongoing dialogue that may continue for days, weeks, or months depending on the nature and severity of the disruption.

The question of who should speak on behalf of an organization during a crisis deserves careful consideration. Conventional wisdom often suggests that the most senior leader should serve as spokesperson, and there are circumstances where this is appropriate, particularly when the disruption involves significant harm or raises fundamental questions about organizational values and leadership. However, senior executives are not always the most effective communicators, and they may be needed for other critical functions during a crisis. For many disruptions, a well-prepared communications professional or operations manager may be more effective. What matters most is that the spokesperson has sufficient authority to speak credibly on behalf of the organization, sufficient knowledge to address likely questions accurately, and sufficient composure to remain calm and professional even when facing aggressive or hostile questioning. Media training, which involves practicing interviews in realistic conditions with feedback from experienced coaches, can dramatically improve spokesperson effectiveness and should be considered a worthwhile investment for any organization that faces meaningful media exposure risk.

Social media management during disruptions presents unique challenges that deserve specific attention. The speed of social media means that organizations often learn of public concern through social channels before receiving any traditional media inquiry. Monitoring tools and protocols that track mentions of the organization, key executives, and relevant keywords should be established in advance and activated immediately when disruptions occur. Response protocols should address tone and voice, recognizing that social media audiences often expect a more conversational and less formal register than traditional press communications. However, the substance of messaging must remain consistent across channels, and social media responders must resist the temptation to engage in arguments or respond emotionally to criticism. A helpful framework distinguishes between inquiries deserving response, criticism deserving acknowledgment, and attacks deserving no engagement. Genuine questions from concerned stakeholders should receive prompt, helpful answers. Substantive criticism of organizational conduct should be acknowledged respectfully, with commitment to address legitimate concerns. Bad-faith attacks, trolling, and attempts to provoke emotional responses should be recognized for what they are and not rewarded with engagement that amplifies their visibility.

Quebec's legal environment creates specific considerations for crisis communications that warrant attention even in a nationally-focused discussion. The Civil Code of Quebec establishes a framework for reputation protection and liability that differs in some respects from common law provinces. Defamation principles, while broadly similar in outcome, derive from different legal foundations and may create different considerations for what can safely be said publicly about third parties during a crisis. Quebec's Charter of Human Rights and Freedoms provides constitutional protection for reputation that has no direct equivalent in other provinces. Organizations operating in Quebec or communicating with Quebec audiences should be aware of these distinctions, which may affect how aggressively the organization can respond to what it perceives as unfair criticism or inaccurate reporting. As of the date of authorship, these distinctions rarely change the fundamental approach to crisis communications but may affect specific tactical decisions about response content.

The financial services sector, the healthcare sector, the construction industry, resource extraction operations, professional services firms, and non-profit organizations all face sector-specific considerations in crisis communications that overlay these general principles. Regulated industries must consider how regulatory bodies will perceive public communications and ensure that nothing stated publicly contradicts regulatory filings or creates additional compliance concerns. Healthcare organizations must navigate patient privacy requirements even when individual patients may be publicly discussing their experiences. Construction and resource extraction operations often face stakeholder relationships with Indigenous communities, environmental groups, and local governments that require tailored communication approaches beyond general media management. Non-profit organizations must consider donor confidence and mission alignment in every public communication. These sector-specific considerations reinforce rather than replace the foundational principles of crisis communications and remind organizations that media management must be integrated with overall stakeholder relationship management rather than treated as an isolated function.

The connection between media management during a disruption and an organization's longer-term reputation and operational success cannot be overstated. Organizations that communicate effectively during crises often emerge with enhanced reputations, having demonstrated competence, integrity, and genuine concern for stakeholders under difficult circumstances. Organizations that communicate poorly may find that the reputational damage outlasts the operational disruption itself, affecting customer relationships, employee recruitment and retention, regulatory relationships, and access to capital and insurance for years afterward. For Canadian small and medium-sized businesses, sole proprietors, non-profit operators, and risk managers, this reality demands that crisis communications capability receive the same serious attention as other elements of business continuity planning. The investment required is modest relative to the potential costs of failure, and the capabilities developed for crisis communications often prove valuable in everyday operations as well. An organization that has prepared thoughtfully for communicating during disruptions is typically better at communicating under normal circumstances as well, building the relationships and reputation that provide resilience when difficulties inevitably arise.

Continue with University access

This lesson is part of a $79 course. Purchase the course or sign in with an active membership to keep reading.

See purchase options