Nearly every reputational disaster we are asked to repair was survivable on day one. What made it permanent was the response: a denial that turned out to be wrong, a silence that lasted six days, or a statement drafted by four people with different objectives and no single decision-maker.
What follows is the sequence we run. It is deliberately boring. Boring is what works when everyone involved is frightened.
Hour 0 to 1: stop talking and establish facts
The first instinct — to correct the record immediately — is almost always wrong, because at hour zero you do not yet know what the record is. Before anything is said publicly:
- Impose a comment freeze. Nobody on your side responds anywhere, including in comment threads, group chats and internal channels. Internal messages leak, and they leak with the timestamp attached.
- Preserve everything. Screenshots with visible URLs and timestamps, archived copies of every page, full message threads. Do not delete anything, however unflattering. Deletion is discoverable and it looks exactly like what it looks like.
- Establish what is actually true. Not what is defensible, not what is being alleged — what happened. If your advisers do not know, that is the finding, and the response has to be built for that uncertainty.
- Name one decision-maker. One person approves what goes out. Committee drafting is how you end up with a statement that says nothing at three times the length.
Hour 1 to 6: map the spread
Before you decide the response, you need to know the shape of the problem. A single hostile post with no amplification is not the same problem as a coordinated campaign, and treating them the same way is how a contained item becomes a news story.
- Origin. Where did it first appear, and who is the account behind it?
- Amplification path. Who picked it up, in what order, and did anything cross from social into an indexed publication?
- Indexing status. What is already appearing in search for your name? This is the part that outlives the news cycle.
- Organic or funded. Coordinated campaigns have signatures: synchronised timing, recycled phrasing, accounts created in the same window. If it is funded, the strategy changes completely.
- Legal exposure, in parallel. Counsel assesses at the same time, not afterwards. Sequential advice loses you a day you cannot spare.
Hour 6 to 24: position and publish
By the end of the first day you should have one position, expressed in one set of words, published somewhere you control.
The statement itself follows a simple test: would this read badly in six months if every fact currently unknown turns out to be the worst version? If yes, rewrite it. The most common failure in executive crisis response is a categorical denial issued before the facts are in.
A statement that acknowledges uncertainty is survivable. A statement that is later contradicted by evidence is not.
Publish it on your own domain, not only as a press statement. An owned page is indexable, controllable and permanent, and it becomes the citation that later coverage — and later AI summaries — links back to. Then align everything else to those exact words: board, investors, staff, clients, and any lawyer speaking on your behalf.
Hour 24 to 48: displace and correct
Now the search work begins, and it is largely mechanical.
- Removals where grounds exist. Platform policy breaches, non-consensual imagery, doxxed personal data, copyright. These are complaint routes, not legal ones, and they are much faster.
- Corrections with publishers. Factual errors, pursued politely and with evidence, are often fixed. The correction usually will not travel as far as the error, but the corrected page is the one that stays indexed.
- Authority assets pushed hard. Your owned statement, your profiles, any legitimate coverage of your position. The goal for the end of week one is that the incident is not the first result — not that it has disappeared.
Week 2 to 12: rebuild
Rebuilding is slow and unglamorous and it is what determines the outcome. Substantive publication resumes — commentary, interviews, owned material — not about the incident, but about the work. Over roughly ninety days the incident falls to the bottom of page one and then off it. Monitoring stays on, because these matters recur more often than people expect.
The three mistakes
- Denying before you know. The correction that follows becomes the story, and it ranks better than the original.
- Silence past forty-eight hours. Absence does not read as dignity. It reads as confirmation, and it leaves the entire record to be written by whoever is talking.
- Legal-only response. A demand letter to a publisher with no communications strategy behind it frequently produces a second article about the demand letter.
None of this requires improvisation on the night. It requires having decided the sequence in advance — which is the entire argument for keeping a protocol warm before you need it.