How to Respond in the First 60 Minutes of a Reputation Incident. This is Your Test, Can You Do It?

The first hour of a reputation incident is rarely when the most damage is done. It is the hour when the most damage becomes possible. Not because the facts are always catastrophic, but because uncertainty is a vacuum—and the public, employees, customers, partners, and journalists will fill that vacuum with their own assumptions if you don’t fill it with clarity.

In Romania, as everywhere else, narratives form fast. Screenshots travel faster than context. A single post, a customer complaint, an employee message, a leaked email, a short video clip, a minor operational disruption, a delayed delivery, an accusation with no evidence—any of these can trigger a public story before your leadership team has even aligned internally.

Most companies don’t lose customer trust because they made a mistake. They lose trust because they responded slowly, inconsistently, defensively, or as if legal risk were the only risk that mattered. Be aware of that fact!

This is a test – it's your 60 minutes to manage the incident.

The goal of the first 60 minutes is not to “solve the crisis”. The goal is to stabilise reality. You are buying time, preventing speculation, and demonstrating competent control. If you do that well, you protect optionality: you can investigate properly and respond decisively without being forced into public improvisation.

Minute 0–10: Classify the incident and establish one owner of truth

The first mistake companies make is treating every incident as the same type of problem. They go straight into drafting language before they’ve decided what kind of situation they’re in. The first 10 minutes are about classification, because classification determines who must be involved, what speed is required, what channels matter, and what risks are in play.

You need a quick, disciplined answer to one question: is this primarily a customer experience issue, an operational issue, a safety issue, a legal issue, a data/cyber issue, an employee issue, or a reputational attack/misinformation issue? It can be more than one, but you must identify the dominant driver. If you classify incorrectly, you will bring the wrong people into the room, and you may adopt the wrong tone of voice.

At the same time, appoint a single “owner of truth” for the incident—one person accountable for consolidating facts and controlling what is confirmed. In many organisations, the first hour collapses into chaos because multiple leaders start sharing partial information across email and WhatsApp, each with different assumptions.

The company starts contradicting itself internally before it even speaks externally. That is how reputational damage multiplies. If your business has not pre-defined this role, you default to the loudest voice in the room. In the first 60 minutes, that is a risk.

Minute 10–20: Create internal alignment before public messaging

Most reputational errors happen when an organisation speaks externally before it’s aligned internally. The instinct is understandable: someone wants a quick statement to “stop the story”. But if your internal teams are not aligned on the core facts and responsibilities, your statement will either be vague, defensive, or wrong—and a wrong statement is worse than no statement.

Internal alignment in the first hour is not a committee meeting. It is a tight, decision-grade huddle. The objective is to agree, in plain language, on what you know for sure, what you suspect but cannot confirm, what you are investigating, and who is affected. You are not trying to draft the perfect narrative. You are trying to avoid contradictions and prevent over-commitment.

This is where many companies fall into a legal-only trap. Legal counsel is essential, but the organisation must also manage trust. A statement that is “legally safe” but emotionally cold often inflames the situation because it fails the basic human test: does this sound like a responsible organisation or like a company hiding behind policy language? Trust is not protected by legal caution alone. Trust is protected by clarity, accountability, and a credible next step.

Minute 20–30: Decide whether you need to speak now—and where

Not every incident requires an immediate public statement. But every incident requires an immediate decision about whether you will speak and on which channels.

If the issue is already public and spreading, silence will often be interpreted as indifference or guilt, even if the reality is internal verification. If the issue is contained and not public, premature communication can escalate it unnecessarily. The correct answer depends on visibility, velocity, stakeholder risk, and the credibility gap created by silence.

Where you speak matters as much as what you say. A common error is “posting everywhere” with the same generic text. In the first hour, you choose the channel where the issue is actually living. If the incident began on social media, that is where you need a response that reduces uncertainty. If journalists are already calling, you need a media holding line and a designated spokesperson lane. If employees are at risk of hearing the story externally first, you need an internal message immediately because internal silence produces panic, rumours, and leaks.

The principle is simple: you protect reputation by protecting the most exposed stakeholder first.

Minute 30–45: Create a holding statement that stabilises the story

A holding statement is not a press release. It is a stabiliser. Its job is to reduce speculation without pretending you have final answers. Many organisations avoid holding statements because they fear “admitting something”. The reality is that a well-written holding statement does not admit guilt; it demonstrates control.

A credible holding statement does four things. It confirms awareness of the situation. It states what you know as fact without interpretation. It communicates what you are doing next, with a clear action. It sets expectations for updates, including timing if possible. What it should not do is speculate, blame others, overpromise, or use corporate language that sounds like you are trying to win an argument rather than manage reality.

The tone matters. In the first 60 minutes, people are not looking for brand voice. They are looking for responsibility. If someone may be harmed, you lead with human concern. If customers are impacted, you lead with clarity and a practical next step. If it is misinformation, you lead with calm correction and evidence, not aggression.

This is where Lighthouse PR often changes outcomes for leadership teams: by designing language that is both defensible and human, without feeding the story you’re trying to contain.

Minute 45–60: Control the next hour by setting a response rhythm

The first hour is not only about the first message. It is about what happens next. Many organisations post a statement and then disappear, hoping the issue will fade. That creates the worst dynamic: the public sees you speak once and then goes silent again. Silence after speaking looks like a retreat.

Instead, you create a response rhythm. You decide when you will update next, even if the update is “we are still verifying and will provide the next update by X”. You identify who will monitor incoming questions and sentiment. You establish a single internal channel for updates so teams don’t improvise responses to customers and partners. You brief your front line—customer service, reception, and sales—so they don’t contradict your official stance.

You also decide, quickly, what you will not do. In the first hour, companies often waste time debating irrelevant details or trying to argue with the internet. The goal is not to win comments. The goal is to protect confidence among the stakeholders who matter: customers, employees, partners, regulators, and the media.

The fastest ways to make it worse

The reason the first 60 minutes deserves its own discipline is that the failure modes are consistent. One is denial followed by forced correction. Another is overconfidence: making a strong claim before facts are confirmed. Another is “legal language as a shield”, which reads as coldness. Another is inconsistency—multiple spokespeople, multiple versions, internal leaks. Another is a delayed response because too many people must approve, which is effectively a decision to let speculation lead. These are not communication failures. They are governance failures expressed through communication.

The boardroom takeaway

A reputation incident is a moment of scrutiny. In that moment, stakeholders are not only judging the incident. They are judging your competence. The first 60 minutes are your chance to demonstrate that competence quickly: one owner of truth, tight internal alignment, a holding statement that stabilises reality, and a response rhythm that shows you are present.

Crisis communication isn’t about talking more. It’s about reducing uncertainty with discipline.

At Lighthouse PR, we help leadership teams build the structures that make the first 60 minutes manageable: crisis protocols, decision routes, holding statement libraries, spokesperson readiness, and rapid response operating models. When those systems are in place, you don’t improvise under pressure—you execute.

If you want a practical way to test your readiness, a short crisis-response simulation will reveal your real response speed, internal bottlenecks, and message vulnerabilities before the market does. I can promise you will be blown away by the results.

——-

About the Author

Steve Gardiner (exec MBA) is a senior marketing and commercial leader at Lighthouse PR, bringing global experience from Accenture, Electronic Arts, Virgin Media, Telekom, and Etisalat. Latterly, as VP Business at Etisalat, he was responsible for $1.8B in revenue.

Today, Steve applies his strategic, marketing, and growth expertise to support Lighthouse PR clients as part of the agency’s service offering.