Crisis Management: Definition, Phases and Online Response

What is crisis management?

Crisis management is the process an organization or a person uses to prepare for, respond to and recover from an event that threatens their safety, operations, finances or reputation. It combines decisions (what to do), communication (what to say and to whom) and recovery (how to restore trust and normal operations). Good crisis management starts long before anything goes wrong and continues well after the headlines fade.

A modern crisis usually has an online side too. What people find when they search your name, what spreads on social media and what AI assistants repeat about you can shape the outcome as much as the event itself. This guide explains the phases of a crisis, who should be involved, how the digital side works and the practical steps to take. It is general information, not legal advice. Media Removal is not a law firm; for decisions with legal consequences, speak with a licensed attorney in your jurisdiction.

Crisis management, crisis communication and reputation management

These three terms overlap, but they are not the same thing:

• Crisis management is the whole effort: identifying risks, deciding how to respond, protecting people and operations, and leading the organization through the event.
• Crisis communication is one part of it: the messages, spokespeople and channels you use to inform employees, customers, partners, regulators and the public. A written crisis communication plan sets this up in advance.
• Reputation management is the longer-term work of shaping how you are perceived, including what ranks in search results. During and after a crisis, online reputation management is how you repair the first page people see.

International guidance frames crisis management as a strategic capability and addresses it to top management. ISO 22361:2022, the international standard that sets out crisis management guidelines, covers crisis leadership, decision-making by crisis teams, crisis communication, and training and learning from crises (ISO 22361:2022 scope). In other words, it is a leadership responsibility, not a task you hand to the press office once things go wrong.

The phases of a crisis

Every crisis is different, but most move through recognizable phases. The U.S. Centers for Disease Control and Prevention describes a communication rhythm of four phases (preparation, initial, maintenance and resolution) and recommends evaluating your communication throughout (CDC CERC Introduction). The model was built for public health emergencies, but the same structure can be adapted to business and reputation crises.

1. Preparation

Before anything happens, you identify the scenarios most likely to hurt you, assign roles, prepare draft messages and agree who approves what. For an online reputation, preparation also means knowing what currently ranks for your name and setting up monitoring. A documented crisis management plan captures all of this in one place.

2. Initial response

The first hours set the tone. The goal is to confirm the facts, protect anyone at risk, stop further harm and make a first, accurate statement. The CDC’s guidance lists six principles that apply here: be first, be right, be credible, express empathy, promote action and show respect (CDC CERC Introduction). Being fast matters because the first source of information often becomes the one people trust, but speed never justifies saying something you cannot stand behind.

3. Maintenance

Once the initial wave passes, the work shifts to regular updates, answering questions, correcting rumors and tailoring messages to each audience. This is where many online crises are won or lost: false claims either get corrected at the source or start to harden in search results, reviews and AI summaries.

4. Resolution and recovery

When the immediate threat is over, you review what happened, update your plans and repair lasting damage. For a reputation, recovery often takes longer than the crisis itself, because negative articles and threads can keep ranking for months.

Who should be on a crisis team

A crisis team should be small enough to decide quickly and broad enough to see every risk. The exact roles depend on the size of the organization, but most teams cover these functions:

• Crisis lead: a senior decision-maker with authority to approve actions and statements without waiting for a committee.
• Legal counsel: reviews statements, assesses liability, preserves evidence and advises on regulatory duties, litigation and defamation claims.
• Communications lead and spokesperson: drafts messages and speaks for the organization. U.S. federal preparedness guidance recommends deciding in advance who will speak to the media and preparing that person with talking points (Ready.gov).
• Operations: fixes the underlying problem, whether that is a product defect, a service outage or a security incident.
• HR and internal communications: keeps employees informed, because staff are both an audience and a possible source of leaks.
• Digital and search monitoring: tracks what is being said on social media, review sites, forums, news sites and AI assistants, and flags content that may qualify for removal.

Individuals, such as executives or public figures, rarely have a full team. In that case, the essential trio is a trusted advisor, a lawyer and someone who understands how search and platforms work. If you are weighing outside help, our guide on how to choose a crisis management firm covers what to ask.

The online dimension of a crisis

A crisis that once lived in a single news cycle now leaves a lasting footprint. The places that matter most are:

• Branded search results: the first page of Google for your name or company is where clients, investors and employers form a first impression.
• Social media: posts and videos can spread in hours. Our guide to social media crisis management covers platform-specific tactics.
• Review sites and forums: a wave of negative reviews or a Reddit thread can keep ranking long after the event.
• AI assistants and AI Overviews: tools like ChatGPT and Google’s AI Overviews summarize what they find, so a negative story can be repeated in answers about you. See our page on AI Overview reputation management.

What removal can and cannot do

It helps to be realistic about removal from the start. Search engines and platforms decide what they take down, under their own policies and the law:

• Search engines remove from search, not from the web. Google says it can only remove things from Google Search results; to take content off the site that hosts it, you need to contact the site owner (Google Search Help). Google lists specific categories it may remove, such as exposed contact details, government ID numbers and doxxing content.
• Platforms are generally not liable for what users post. In the United States, Section 230 of the Communications Act provides that a provider or user of an interactive computer service is not treated as the publisher or speaker of information provided by someone else, subject to exceptions the statute lists, such as federal criminal law and intellectual property (47 U.S.C. § 230). That is why removal usually runs through a platform’s own policies, a request to the author or publisher, or a court order against the person who posted the content.
• False statements may give you legal options. If content is false and damaging, it may be defamatory. Our guides on defamation laws, libel vs. slander and reporting defamation explain the basics.

When content cannot be removed, the alternative is to reduce its visibility by publishing and strengthening accurate, authoritative content so it ranks above the damaging results. This is negative content suppression, and it is a complement to removal, not a substitute for it.

Legal duties that can shape your response

Some crises come with legal obligations and deadlines. A crisis plan should flag them early so they are not missed in the rush:

• Data breaches: the Federal Trade Commission notes that all states, the District of Columbia, Puerto Rico and the Virgin Islands have laws requiring notification of security breaches involving personal information, and its guide covers securing systems, fixing vulnerabilities and notifying the right parties (FTC data breach guide).
• Public companies: under SEC rules adopted in 2023, registrants must disclose material cybersecurity incidents on Form 8-K, generally within four business days after determining that the incident is material (SEC press release 2023-139).
• Defamation claims have time limits. If you are considering legal action over false statements, the deadline to sue is often short. See our guide to the defamation statute of limitations and how to sue for defamation.
• Lawsuits can backfire. In states with anti-SLAPP laws, a defendant sued over protected speech can often ask for an early dismissal before costly discovery begins and, if the motion succeeds, may recover attorney’s fees and costs (RCFP anti-SLAPP guide). Read about anti-SLAPP laws before you file.

Rules vary by state and country. A lawyer should review any statement that admits facts, discusses a pending case or names another person.

How to manage a crisis: practical steps

When a crisis breaks, this sequence keeps the response controlled. For a printable version, use our crisis response checklist.

1. Confirm the facts. Establish what happened, who is affected and what is still unknown. Do not speculate in public.
2. Protect people first. Safety, affected customers and exposed data come before reputation.
3. Convene the crisis team. Bring in the lead, legal counsel and communications, and agree who approves statements.
4. Preserve evidence. Take dated screenshots and save URLs of harmful posts, reviews and articles before they change or disappear. This matters for platform reports and for any legal claim.
5. Issue a first statement. Say what you know, what you are doing and when you will update. Acknowledge concern without admitting facts you have not verified.
6. Brief internal audiences. Employees, partners and key clients should not learn the news from social media.
7. Map the online footprint. Search your name and brand, check the main social platforms, review sites and AI assistants, and list every damaging result in order of visibility.
8. Act on what qualifies. Report content that breaks platform rules, request corrections from publishers and assess legal routes for false or private content.
9. Update regularly. Keep a steady rhythm of updates and correct misinformation at its source.
10. Review and rebuild. When the immediate threat ends, run a debrief, update your plan and start the work of strengthening accurate content in search.

Common mistakes to avoid

• Silence for too long. A vacuum fills with speculation. A short holding statement is better than none.
• Statements that are not true or not checked. A correction later costs more credibility than a careful first message.
• Arguing with critics in public. Heated replies are screenshotted and can become the story.
• Threatening lawsuits without advice. Legal threats can draw more attention to the content and, in states with anti-SLAPP laws, a lawsuit over protected speech can expose you to paying the other side’s fees.
• Deleting your own posts without a record. It can look like a cover-up and may destroy evidence you need.
• Stopping when the news cycle ends. Search results and AI answers keep the crisis alive long after people stop talking about it.

For real-world lessons, see our breakdown of PR crisis examples.

How Media Removal can help

Media Removal works on the online side of a crisis: what people find when they search your name or your company. Our reputation crisis management service follows the same order described in this guide: assess the damage, stabilize, suppress what cannot be removed and monitor the result.

• Crisis assessment: we map what is spreading, where it ranks and how exposed you are.
• Removal where there are valid grounds: through platform reporting, publisher outreach and legal channels. This is our content removal work. The final decision always rests with the platform, the publisher or a court, so we tell you honestly what is and is not removable.
• Suppression and rebuilding: strengthening accurate content so it ranks above the damage in search and informs AI answers.
• Monitoring: watching the results after the crisis so problems are caught early.

We do not promise outcomes or timelines that depend on third parties, and we do not replace your lawyer. If you are facing a crisis now, we respond the same day. You can request a quote and tell us what is happening; every client signs an NDA, and so do we.

Frequently asked questions

What is crisis management in simple terms?

Crisis management is how an organization or person prepares for, responds to and recovers from an event that threatens their safety, operations or reputation. It covers the decisions you make, what you communicate and how you rebuild trust afterward.

What are the phases of crisis management?

A common model uses four phases: preparation before anything happens, the initial response in the first hours, a maintenance phase of updates and corrections, and resolution, when you review what happened and repair lasting damage. This is the rhythm the CDC describes in its crisis communication guidance.

Who should lead a crisis response?

A senior decision-maker with authority to approve actions and statements quickly should lead, supported by legal counsel, a communications lead or spokesperson, operations and someone who monitors search and social media.

Can negative content about a crisis be removed from Google?

Sometimes. Google removes specific categories from its search results, such as exposed personal information or doxxing, and platforms remove content that breaks their rules. Removing a result from Google does not delete it from the website that hosts it. When removal is not possible, suppression can reduce how visible the content is.

How long does an online reputation crisis last?

The news cycle may pass in days, but damaging results can keep ranking in search and appearing in AI answers for months or longer. How long recovery takes depends on how widely the content spread and whether it can be removed or only suppressed.

Do I need a lawyer during a crisis?

If the crisis involves possible liability, regulatory duties, a data breach, pending litigation or false statements about you, involving a licensed attorney early is wise. This guide is general information and not legal advice.

Sources

• CDC, Crisis and Emergency Risk Communication (CERC): Introduction
• Ready.gov, Crisis Communications Plans
• ISO 22361:2022 Security and resilience, Crisis management, Guidelines (scope, via EVS)
• Google Search Help, Remove select personal info from Google Search
• 47 U.S. Code § 230 (Cornell LII)
• FTC, Data Breach Response: A Guide for Business
• SEC, press release 2023-139 on cybersecurity incident disclosure
• RCFP, Introduction to the Anti-SLAPP Guide