The First 72 Hours of a Reputation Crisis: A Tactical Playbook

A reputation crisis is not the moment something damaging becomes public — it is the 72 hours that follow. What happens in that window determines whether the story peaks on day three and fades, or compounds for months across search and AI results.

This playbook is a hour-by-hour framework for the people who have to act when the call comes in.

Hour 0–6: stop the bleeding and establish control

The single most common mistake in the first hours is ad hoc communication — improvised statements, individual replies, and internal speculation that becomes the story. Freeze all non-essential public communication immediately. Convene a small crisis team with a single decision-maker and a single drafter of external language. Establish one internal source of truth: a live document recording what is known, what is unknown, what has been said, and what must not be said.

Do not issue a public statement in this window unless a failure to speak creates more risk than speaking — for example, an active safety issue or a regulatory disclosure obligation. Silence in hour three is almost always safer than a wrong statement in hour one.

Hour 6–24: assess, document, and triage

Map the actual situation, not the feared one. What is the source and authority of the damaging content? Is it accurate, partially accurate, or false? Where has it spread — search, social, news, AI summaries — and how fast? Who are the affected audiences — customers, investors, employees, regulators — and what do they need to hear?

Document everything: screenshots, URLs, timestamps, reach estimates, and any coordination signals. This evidence is what makes lawful removal, legal action, and AI-engine correction possible later. Triage each item into one of four buckets: remove (policy-violating or unlawful), correct (inaccurate), contextualize (accurate but incomplete), or monitor (low-authority and fading). Do not treat every negative item as a crisis-level threat.

Hour 24–72: coordinated response across channels

With the situation mapped, execute a single coordinated response rather than separate reactions on each channel. On owned channels, publish the authoritative position — clear, factual, and brief. On earned channels, brief a small number of trusted journalists with the facts and the documentation; do not blanket-pitch. On review and social platforms, respond consistently and only where response reduces harm. On AI channels, submit correction or feedback requests referencing the authoritative position, because AI summaries are already forming from whatever is indexed.

Keep the response proportional. Over-reacting — legal threats, mass takedown demands, aggressive public statements — generates a second wave of coverage about the reaction, which is often more durable than the original story. The goal of the 72-hour window is containment, not victory.

What makes the 72-hour window decisive

Three things. First, speed of documentation: evidence captured early is what unlocks removal and legal remedies later. Second, discipline of communication: a single, consistent position prevents the inconsistencies that prolong a story. Third, channel coverage: treating AI and search as first-class channels — not an afterthought — stops the crisis from hardening into permanent search and AI visibility.

The post-crisis transition

After 72 hours, the work shifts from containment to recovery: continued monitoring for resurgence, suppression of any content that has hardened into search results, AI-representation correction, and a structured review of what the incident revealed about monitoring and response gaps. The organizations that recover fastest are the ones that treat the first 72 hours as a process — run from a playbook, not improvised under pressure.