In short
- Dlaczego pierwsze godziny kryzysu są najważniejsze: W pierwszych godzinach kryzysu powstaje pierwsza wersja wydarzeń, którą media, klienci i pracownicy zapamiętają najmocniej.
- Minuty 0–10: sygnał, właściciel sprawy i cisza na zewnątrz: Pierwsze minuty należą do trzech decyzji.
- Minuty 10–25: fakty, źródła i pierwsza ocena poważności: W kolejnych minutach rozdzielamy to, co wiemy, od tego, co nam się wydaje.
- Minuty 25–40: zarząd, prawnik i podział ról: W tym czasie zbieramy niezbędne osoby: prezesa lub członka zarządu, prawnika, szefa komunikacji, dyrektora obszaru dotkniętego zdarzeniem i osobę odpowiedzialną za obsługę klienta.
The first hours of a crisis are the moment when the board has the least information and the most depends on its decisions. Every minute without a case owner feeds rumour, and every hasty statement costs months of correction later. We show how to organise the first 60 minutes, who does what and what must not be published in that time.
- SignalsMonitoring · Media
- The gate of truthrejects numbers without a source
- AI model councilcompares the ratings
- The man decidesSignature before shipment
- ActionOświadczenie · Rzecznik
Why the first hours of a crisis matter most
In the first hours of a crisis, the first version of events is formed, and it is the one that the media, customers and employees remember most strongly. If we write it, we have a chance to bring order to the matter. If others write it, we will be working against the current. This is not about haste at any price; it is about gaining control of information and decisions within a short time. A company that stays silent for no reason in that window, or says too much, loses control of the pace of the story.
Warto rozumieć, że godzina nie jest miarą ścisłą. Czasem mamy kwadrans, czasem pół dnia. Nazwa „pierwsze 60 minut” oznacza tu porządek działań, który można przeprowadzić w krótkim czasie, gdy wszyscy znają swoje role. Ćwiczy się go tak samo jak ewakuację: nikt nie uczy się jej w trakcie pożaru. Pełny obraz działań organizacji opisujemy w przewodniku po zarządzaniu kryzysowym w firmie.
The cost of inaction in the first hours is qualitative, but very concrete. A company without a case owner wastes time deciding who is to decide. A company that has not secured its evidence cannot later reconstruct the course of events. A company that has not settled on its channels communicates in several places at once and speaks with different voices. None of these costs appears in a budget, yet each shows in how long the matter drags on and how much it wears the team down.
Minutes 0–10: the signal, the case owner and silence outside
The first minutes belong to three decisions. First: who owns the case? One person, named, who coordinates everyone else and answers to the board. Second: who knows about the matter, and who needs to find out? We keep the circle small so that information does not leak out in incomplete form. Third: what do we do externally while we do not yet have the facts? The answer is: nothing ill-considered. We do not join discussions, we do not delete comments without rules, and we do not agree a version in messaging apps that everyone has access to.
Właściciel sprawy powinien mieć uprawnienia do podejmowania decyzji bez czekania na każdą zgodę, w granicach ustalonych wcześniej. W tym czasie zabezpieczamy dowody: zrzuty ekranu, kopie wiadomości, logi systemowe i notatki z rozmów. To rutyna, która procentuje, gdy trzeba będzie odtworzyć przebieg zdarzeń dla prawnika, ubezpieczyciela albo organu. Sposób organizacji zespołu opisujemy w tekście o zespole kryzysowym.
Minutes 10–25: facts, sources and a first severity assessment
In the following minutes, we separate what we know from what we think we know. This is done in three columns: confirmed, probable, unknown. Every sentence in the note has a source: who said it, when and on what basis. It is ordinary discipline, but in a crisis it often disappears, because emotions supply conclusions faster than facts do. A good case owner can say plainly: we do not know that yet.
Na tej podstawie oceniamy poważność. Prosta bramka P1, P2, P3 pomaga zdecydować, kto musi być zawiadomiony i jak szybko. P1 oznacza sprawę najpoważniejszą, zagrażającą ludziom, ciągłości działania lub istotnym interesom firmy; P3 to sprawa, którą da się prowadzić w normalnym trybie. Szczegóły podziału opisujemy w artykule o poziomach poważności kryzysu. Ocena nie musi być idealna, musi być zapisana, żeby można ją było zmienić, gdy pojawią się nowe fakty.
| Column | What we enter | Example control question |
|---|---|---|
| Confirmed | Facts with a source and a time | Who confirmed this, and on what basis? |
| Probable | Hypotheses with reasoning | What would we have to check to confirm this? |
| Unknown | Gaps that need to be filled | Who will establish the missing information, and by when? |
Minutes 25–40: the board, legal counsel and the division of roles
During this time, we gather the essential people: the CEO or a board member, legal counsel, the head of communications, the director of the area affected by the incident and the person responsible for customer service. The meeting should be short and concrete. The case owner presents the state of knowledge in three columns, the board confirms the severity assessment and decides who is responsible for what over the next few hours. It is also worth appointing someone to keep a decision log, because after a few hours nobody will remember what was decided and when.
Legal counsel is not a brake on communication but a co-author of it. Their job is to say what must not be said, and what must be. Where personal data, obligations towards regulators or an insurer are involved, legal deadlines can be short. Legal obligations can arise directly from statute, so we check every such deadline with a lawyer rather than relying on memory. Preparing roles before a crisis is one of the elements of a good crisis management plan.
Minutes 40–55: the first statement and channels
Pierwszy komunikat jest krótki. Potwierdza, że firma wie o sprawie, wskazuje, co jest ustalone, informuje o podjętych działaniach i mówi, kiedy pojawi się następna informacja. Zasady i strukturę takiego tekstu opisujemy w artykule o oświadczeniu kryzysowym. Zanim tekst wyjdzie, sprawdzamy trzy rzeczy: czy każde zdanie ma pokrycie w faktach, czy nie narusza obowiązków prawnych i czy da się go bronić w rozmowie z dziennikarzem, który zapyta o szczegóły.
Dobieramy kanały tak, żeby najpierw dotrzeć do tych, których sprawa dotyczy bezpośrednio: poszkodowanych klientów, pracowników i partnerów. Dopiero potem informujemy media i opinię publiczną. Kolejność ma znaczenie, bo nikt nie lubi dowiadywać się o sprawie, która go dotyczy, z portalu informacyjnego. Jeśli sprawa toczy się w sieci, przydatna będzie wiedza z tekstu o planie reakcji na kryzys w social mediach. Na stronie firmy komunikat powinien mieć stały adres, do którego odsyłamy z pozostałych kanałów.
- Check the facts in the statement with the case owner.
- Obtain legal counsel’s opinion and the signature of an authorised person.
- Publish the text on the company website at its permanent address.
- Inform employees and the people directly affected by the matter.
- Pass the statement to the media and name a contact person.
Minutes 55–60: the plan for the coming hours and the update rhythm
The last minutes of the first hour are for closing the loop. We record the decisions in the log, set the dates of the next meetings and agree the rhythm of statements. The key is to settle when and where the next piece of information will appear, even if there are no new findings yet. Silence after a first statement is read as abandoning the matter, whereas a regular, calm update builds an impression of control.
W tym czasie warto też ustalić, jak monitorujemy reakcje: kto obserwuje media, kto sieć, kto skrzynki klientów, kto sygnały wewnętrzne. Wczesne ostrzeganie nie kończy się na pierwszym komunikacie. Więcej o organizacji takiej obserwacji piszemy w tekście o monitoringu mediów i internetu. Jeśli firma nie wie, co się o niej mówi, każda kolejna decyzja jest zgadywaniem, a zgadywanie w kryzysie kosztuje najwięcej.
A good test is to ask whether the first hour would also work if the key people were unreachable. If the answer is “no”, the plan relies on individuals rather than on procedure. In that case we begin with deputies, authorities and simple templates, and only then refine the details. We review the next steps after every exercise, so that the plan develops together with the company, its products and its team, rather than remaining a document in a drawer.
What not to do in the first hour of a crisis
The list of prohibitions is short, but its violations are what we see most often. We do not speculate about causes. We do not name culprits before the findings are complete. We do not engage in arguments in the comments. We do not remove content without rules, because a disappearing post is often read as a cover-up. We do not send out statements without the signature of an authorised person. We do not make promises we cannot keep. Each of these mistakes costs more than a delay of a dozen or so minutes.
Emotion is a separate matter. A board that has just received bad news wants to act at once, and energy without direction leads to chaos. That is why, in our method, the first step is always to put facts and roles in order, and only then to act. Don’t guess. Understand. Decide. Win. This is not a slogan but a sequence that protects against a decision taken in anger. The cost of inaction is just as real, because every hour without a case owner hands the initiative to someone else.
- speculation about causes and culprits
- arguments in comments and on profiles
- removing content without rules or a record
- statements without the signature of an authorised person
- promises not backed by facts
How to prepare your company so the first hour stays calm
Spokojna pierwsza godzina jest wynikiem przygotowania. Potrzebne są cztery rzeczy: lista osób z numerami kontaktowymi i zastępcami, ustalone uprawnienia właściciela sprawy, szablony pierwszych komunikatów dla typowych scenariuszy oraz miejsce, w którym prowadzi się dziennik decyzji. Do tego dochodzi praktyka: kilka razy w roku ćwiczymy scenariusz od sygnału do pierwszego komunikatu, najlepiej z zaskoczeniem. Ćwiczenia opisujemy w tekście o symulacji kryzysu dla zarządu.
Jeśli chcesz sprawdzić, na ile Twoja firma jest gotowa, zacznij od prostego pytania: kto dziś, o osiemnastej w piątek, jest właścicielem sprawy i czy o tym wie? W Commplace® pracujemy według modelu lekarskiego: diagnoza, badania, plan, wdrożenie, kontrola. Opisujemy go w ramach crisis management in Commplace®. Jeśli chcesz porozmawiać o Twojej sytuacji, arrange an interview i przejdźmy razem przez pierwszą godzinę na Twoim przykładzie.
Tool radar: one image of the situation instead of ten windows
In a crisis, information is scattered across dashboards, communication channels, documents, and panels. The radar shows 28 tools, of which Commwork®AI collects signals in one place. The radar’s guidance circulates around them, just as the crisis team circulates around the sources. The decision is always made by a human being.
Examples of how these tools help in a crisis (examples for illustration):
- Customer opinions and questions — the Google profile (GBP) shows what people are writing about the company during the crisis.
- Visibility in the search engine — Search Console (GSC) and Ahrefs show how the crisis is changing what people find about a brand.
- The work of the staff — Gmail, Slack and Meet for quick information exchange, Tasks and Docs for a to-do list and a decision log.
- Notes from meetings — Fireflies memorize the arrangements, so no one reproduces them from memory.
Practice: first steps, tables and schedule
This module is an action card for the first hours of a crisis: what to do minute by minute, who does it and how you will know a step is complete. You can print it, adapt it to your company and keep it to hand for the day the phone rings.
First steps: what to do in order
| When | Action | Who | How you will know it is done |
|---|---|---|---|
| 0–5 min | Appoint the case owner and write down their name | The board member who first heard about the matter | Everyone knows who is coordinating |
| 5–10 min | Narrow the circle of those in the know and agree a single communication channel | Case owner | Information circulates in one closed place |
| 10–20 min | Gather the facts: what we know, what we do not know, how we know it | Case owner and the area director | There is one sheet with three columns |
| 20–30 min | Secure the evidence: screenshots, emails, documents, recordings | Communications team and IT department | The evidence is in one place, with a date |
| 30–40 min | Call a short meeting: CEO, legal counsel, communications, area director | Case owner | Everyone knows their role and the time of the next meeting |
| 40–55 min | Write the first short statement and choose the channels | Head of communications and legal counsel | The statement is ready and awaits board sign-off |
| 55–60 min | Set the update rhythm and the time of the next meeting | Case owner | The team knows when it will hear new information |
Who decides who performs and when
| Decision or task | Who decides | Who performs | Deadline |
|---|---|---|---|
| Activating crisis mode | The board member named in the procedure | Case owner | Within 5 minutes of the signal |
| Assessing the severity of the matter | Case owner with the board | Head of communications | Within 25 minutes |
| Securing the evidence | Case owner | IT department and communications | Within 30 minutes |
| Approval of the first statement | President or member of the board of directors | Head of communications and legal counsel | Within 55 minutes |
| Pausing scheduled posts and advertising | Head of marketing | Social media team | Within 15 minutes |
| Briefing for customer service and reception | Case owner | Internal communication | Within 45 minutes |
30-day schedule
The Gantt chart shows which stage starts when and how long it lasts. The days are given as an example: adjust them to the size of the company.
The first hour in five moves
Signal: what it means and how to respond in the first hour
| Signal | What does it mean | Reaction |
|---|---|---|
| A call from a journalist asking about an incident | The matter is already outside the company | Ask for a response deadline and call back within the hour with an agreed version |
| A sudden rise in social media mentions | The topic is gaining momentum | Activate crisis mode and pause planned posts |
| A report from an employee about an incident at the company | A possible threat to people or data | Secure people and evidence first, then notify the board |
| A message from a regulator or institution with a deadline | A formal matter with legal consequences | Notify legal counsel at once and check the deadlines with them |
| No information, but plenty of rumours within the company | The information gap is widening | Send a short internal message with the time of the next update |
Checklist for the first 60 minutes
- Appoint the case owner and write down their name.
- Close the circle of people and agree one secure communication channel.
- Pause scheduled posts, advertising and newsletters.
- Set out the facts in three columns: we know, we do not know, we are checking.
- Secure the evidence: screenshots, emails, documents and recordings.
- Assign the matter a severity level according to the agreed scale.
- Call together the CEO, legal counsel, communications and the area director.
- Write the first statement on a single page and agree it with legal counsel.
- Brief customer service and reception on what they are to say.
- Set the time of the next meeting and the update rhythm.
The most common mistakes and what to do instead
| Error | The result | Instead |
|---|---|---|
| Several people answer outside questions at the same time | Different versions of events emerge, and the media set them side by side | Direct all questions to one person and one address |
| The team agrees the version in a general chat | Messages leak out in incomplete form | Set up a closed channel for the crisis team only |
| You delete critical comments without rules | The matter acquires a second thread: the company is hiding the truth | Set moderation rules and record what was removed, with the reason |
| You wait for all the facts before issuing any statement | Others fill the silence, and the company loses the initiative | Write a short statement with what you know and the time of the next update |
| The CEO answers journalists’ questions alone, unprepared | Sentences are uttered that are hard to take back | Agree three key sentences and appoint a spokesperson |
Ready-made sentences to use (to be adapted by a lawyer)
Uruchamiam tryb kryzysowy. Właścicielem sprawy jestem ja. Spotkanie za dwadzieścia minut w zamkniętym kanale, proszę o gotowość.
Dziękuję za pytanie. Zbieramy informacje i odpowiemy dziś do godziny 15. Prosimy o kontakt pod jednym adresem.
Wiemy o zdarzeniu i zajmujemy się nim. Bezpieczeństwo ludzi jest naszym priorytetem. Kolejną informację podamy dziś o 17.
Jeśli klient pyta o zdarzenie, powiedz, że firma zajmuje się sprawą i że nowa informacja pojawi się dziś na stronie. Nie podawaj domysłów.
Wiemy o sytuacji i pracujemy nad nią. Prosimy, aby nie komentować jej publicznie. Pytania kieruj do właściciela sprawy.
Na ten moment ustaliliśmy fakty, role i pierwszy komunikat. Kolejne spotkanie o 14. Do tego czasu każdy sprawdza swoje zadania.
Glossary of terms
Additional questions
Does a statement have to be published straight away in the first hour of a crisis?
Not always. Establishing the facts and roles matters more. If the matter is already public, it is worth publishing a short statement with the time of the next update. If it is not, you can prepare the statement and wait for the board’s decision.
Who should be the case owner in the first response to a crisis?
A member of the board, or someone close to it, with the right to take quick decisions. They do not have to be a communications expert. What matters is that they have the time and the mandate. Name them in the procedure in advance.
What should you do when information is missing in the first hour?
Write down what you do not know, and name the person who is checking it, with a deadline. In the statement, say plainly that the matter is being investigated and give the time of the next update. Do not fill the gaps with guesses.
How can a company rehearse a fast crisis response?
Run a trial alarm during working hours, with a ready action card and a stopwatch. Measure how long it takes to appoint the case owner and assemble the team. After the trial, improve the card and repeat it in a few weeks.
Read more in this topic
- Ocenę w dwudziestej minucie ułatwiają wcześniej opisane poziomy poważności kryzysu.
- Kogo zaprosić na spotkanie, podpowiada tekst o tym, jak ustalić skład zespołu kryzysowego.
- Pierwszy komunikat możesz oprzeć na zasady oświadczenia kryzysowego opisanych w osobnym artykule.
- Kartę najlepiej wypróbować podczas ćwiczenia dla zarządu, zanim przyjdzie prawdziwa sprawa.
- Rozmowy z redakcjami w pierwszych godzinach opisuje tekst o tym, jak układać media relations in crisis.
- Dalsze etapy sprawy pokazuje kryzys wizerunkowy w pięciu krokach, czyli lista kontrolna po pierwszej godzinie.
Sentence patterns and legal guidelines are informational material, not legal advice: check with a lawyer. Match the deadlines and roles to your company.
Network of experts: who works with whom when you need to decide quickly
Crisis management is the work of many roles at once: observation, risk analysis, preparing a communication, leadership. This network shows how such roles are connected by a single system so that the team does not waste time passing on information.
The network of virtual experts works together: one system, many roles
- How to read the screen: Each point represents one role in the system, and the lines show which roles are exchanged in the conclusions.
- Observation: The roles named OSINT-CRISIS and OSINT-SOCIAL concern the tracking of media and networks (OSINT is the observation of open sources).
- Approval: The roles prepare the proposals. A statement, a post on social media, or an apology are approved by the person.
How Commwork®AI shortens the first hours of a crisis
Commwork®AI guides a company from instruction to decision. In the first hour of a crisis it does what the board has no time for: it collects signals from eight layers of monitoring, sorts them and proposes a severity assessment in the P1, P2, P3 gate. A council of five AI models assesses the matter independently, and a sixth model synthesises the conclusions, showing differences of opinion rather than hiding them. The board gets a picture of the situation, not a pile of notifications.
W praktyce widok decyzyjny zawiera sygnał, ocenę, opcje, właściciela, termin i status. Nic nie jest wysyłane ani publikowane bez podpisu człowieka, więc szybkość nie odbywa się kosztem kontroli. Dowodem jest zapis: kto, kiedy i co zatwierdził. Więcej o systemie przeczytasz na stronie Commwork®AI.
- an alert from eight layers of monitoring in one view
- a proposed P1, P2, P3 assessment with reasoning
- a comparison of the assessments of five AI models, highlighting the differences
- a decision log with signatures and deadlines
- draft statements for human approval
The first 60 minutes of the crisis: what the management is doing
Scope: PR i komunikacjaSeriousness: P2Updated: today 08:00Layers of monitoring: 8 out of 8On call: Management + NavigatorDecision indicators today · goal · change · 12 of 30 followed
Action axis 30-day plan · owner · status
Risk map interesariusz × obszar · 8 pól wysokich
Preparedness today and the goal
Forecast of tension Monte Carlo simulation (random, thousands of runs) · P50 below target in about 6 days
A lot of mentions 14 days · daily participation
Map of stakeholders influence × interest
Radar of readiness 6 areas
Sources of signals 7 days
Channels the share of mentions · tone
Signals in time 14 days
Decisions to be made they assess: the AI model council and a human being
| # | Signal | Evaluation | Options | Owner | Deadline | Status |
|---|---|---|---|---|---|---|
| 1 | A journalist asks about an allegation from an anonymous source | P1 | Written reply, interview, no comment | Marketing | in 2 days | Ready |
| 2 | Investors ask for clarification | P2 | A note to the market, one-to-one conversations | IT Department | in 2 days | Ready |
| 3 | The spokesperson is unprepared for difficult questions | P2 | Training, mock questions, adviser support | Navigator Commplace | in 3 days | In the process |
| 4 | Inconsistent statements from two company representatives | P3 | One version of the message, a briefing, a correction | Marketing | in 2 days | Awaiting signature |
| 5 | The draft statement awaits approval from the lawyers | P3 | A short version now, the full version after approval | The spokesperson | tomorrow 09:00 | Awaiting signature |
The Council of Five Models conformity of the assessment
Who is responsible for what matrix of responsibility
Journal of events today, from the oldest
- Employees learn about the matter from the media
- Signature of a person: message ready for dispatch
- Investors ask for clarification
- The barrier of truth rejected the number without a source
- A video of the incident is circulating online
- The lawyer marked the sentence for correction
- The draft statement awaits approval from the lawyers
Response time actually / purpose
Cost of the options index, uncertainty range P50–P80
Minimum
Recommended
Extended
The Readiness Calendar 12 months · exercises and reviews
The screen, graph and values are examples. The decision about further steps is always made by the person.
Test your first hour
In the conversation, we will go through your roles, authorities and statement templates. You will receive a diagnosis of the gaps and an action plan for the coming quarter.
- Preliminary diagnosis of the situation
- Recommendation of the scope with justification
- Clear plan of stages, owners and deadlines
Frequently Asked Questions (FAQ)
What should you do first when a crisis breaks?
Appoint a single case owner and limit the circle of people who know about it, then set out the facts in three columns: confirmed, probable, unknown. Only on that basis do you assess severity and prepare the first statement. Calm order matters more than speed.
Do you have to publish anything in the first hour?
Not always. If the matter concerns customers, employees or the media, a short statement is usually needed. If it has not gone beyond a narrow circle, publishing may amplify it. The board decides on the basis of the severity assessment and legal advice, not out of nerves.
Who should be the case owner in a crisis?
Someone who has the authority to take decisions and the time to do so. They do not have to be the CEO. What matters is that they are named, before the crisis, and have a deputy in case of absence. Without that, decisions stall.
How should you rehearse the first hour of a crisis?
Several times a year we run a scenario from the signal to the first statement, ideally without telling the team the details beforehand. Afterwards we write down what worked and what did not, and update the plan. This practice exposes gaps faster than even the most carefully written procedure.
Can AI run the first hour of a crisis on the board’s behalf?
It can speed up the collection of signals, the sorting of facts and the preparation of drafts, but decisions and publication remain with a human. We believe responsibility cannot be delegated to an algorithm. That is why, in our system, nothing goes out without the signature of an authorised person.
It is worth reading further
Source: compilation by Commplace®. Examples and animations are illustrative; they do not constitute legal advice or guarantees of results. The increase in the indicator after the action itself does not prove that the action caused it.
