When a cyber or AI incident occurs, organisations will get technical advice early, often closely followed by legal.
Those perspectives are essential for containing the initial crisis, understanding risk and meeting legal obligations.
But legal and technical guidance alone won’t provide a clear path through the reputational challenges that follow.
Despite an organisation’s best efforts, decision‑making can quickly become fragmented in a crisis; the very moment that being aligned is critical.
Legal advice often prioritises minimising exposure and liability, while technical teams are focusing on getting the initial crisis under control.
Without an agreed and tested communication approach, these priorities can unintentionally slow decisions, dilute messages, and increase fear and frustration.
The result? Highly cautious communication that sounds robotic, is delivered too late, or focuses more on what cannot be shared, rather than what needs to be acknowledged.
While it can be tempting to say nothing (often to try and avoid getting into further trouble), this approach unintentionally undermines trust and risks, creating the impression that your organisation is evasive or – worse – doesn’t care.
It will be the perceptions of your response that will have a far greater reputational fallout – and will take much longer to repair – than the initial incident itself.
Communication can’t be treated as a final step once the crisis has passed and you have all the information. It is a strategic function that will help your organisation balance its response, keep your internal team and stakeholders in the loop, and remain credible under pressure.
When you’re trying to wing it in the moment, things can go horribly wrong.
Organisations that don’t have a communications plan often discover that reputational harm comes not from the technical response to an incident, but because the communication surrounding it was delayed, inconsistent or unclear when it mattered most.
The time to build your reputation firewall is now, long before you ever have an issue.