The First 90 Minutes: A Founder’s Crisis Communications Playbook for Incident Response

In the high-stakes environment of a growing startup, the first 90 minutes following a negative event often dictate the long-term trajectory of the brand’s reputation. Whether the issue is a data security incident, a leadership transition, or a sudden regulatory inquiry, the immediate reaction from the founder sets the tone for both internal teams and external stakeholders. Speed is essential, but it must be balanced with accuracy to avoid the common pitfall of issuing reactive statements that later require retraction. This initial window is not about providing a final resolution, but rather about demonstrating that the organization is in command of the situation.

The primary objective during the first fifteen minutes is internal mobilization and the suspension of all scheduled outbound communications. Founders should immediately activate a pre-designated crisis task force consisting of legal counsel, communications leads, and relevant department heads. Simultaneously, all automated social media posts, marketing emails, and press releases must be paused to prevent tone-deaf content from appearing alongside breaking news. Failing to halt automated systems can make a company appear disorganized or indifferent to the severity of the developing situation.

Once the team is assembled, the focus shifts to establishing a single source of truth regarding the facts of the incident. In a crisis, misinformation often spreads faster than verified data, particularly within internal messaging channels. The leadership team must distinguish between what is known, what is suspected, and what is currently being investigated. This internal clarity prevents the dissemination of conflicting narratives, which can erode trust with the media and investors later in the day.

Founders must prioritize their stakeholder hierarchy to determine who needs to hear from the company first. While the public may be clamoring for information, employees and key investors deserve direct communication before they read about the situation in the headlines. Providing internal teams with a brief, honest assessment of the situation helps maintain morale and prevents unauthorized leaks. It is crucial to remind staff of the company’s media policy, directing all external inquiries to a single designated spokesperson.

The middle of the 90-minute window should be dedicated to drafting the initial holding statement. A holding statement is a brief, neutral acknowledgment that the company is aware of the situation and is actively working toward a resolution. It should not speculate on blame or offer specific details that have not been fully verified by legal or technical teams. The goal of this document is to fill the information vacuum, signaling to reporters and customers that the organization is responsive and responsible.

Navigating the legal implications of a crisis requires a delicate balance between transparency and liability protection. Founders should work closely with legal experts to ensure that any public admission of facts does not unintentionally compromise the company’s standing in future litigation or regulatory reviews. While the impulse to apologize is often strong, the language used must be precise and focused on the actions being taken to rectify the problem. Communications should focus on the process of resolution rather than making definitive claims about the root cause before an investigation is complete.

As the 90-minute mark approaches, the leadership team must decide on the most appropriate channels for distribution. Depending on the nature of the crisis, a direct email to customers may be more effective than a broad social media post. For industry-specific issues, reaching out to key trade journalists can help ensure the company’s perspective is included in initial reporting. The choice of medium should reflect the severity of the event and the primary audience affected by the news.

Monitoring the external reaction is a continuous process that begins as soon as the first statement is released. Founders should utilize real-time sentiment analysis and media monitoring tools to track how the story is evolving across different platforms. This feedback loop allows the communications team to adjust their strategy for the next phase of the response, addressing recurring questions or correcting emerging inaccuracies. Staying proactive prevents the narrative from being shaped entirely by outside observers.

Documentation is an often overlooked but vital part of the crisis playbook. Keeping a detailed log of when information was received, when decisions were made, and when statements were issued is essential for any post-mortem analysis. Regulatory bodies and boards of directors often require a timeline of the response to evaluate the company’s governance and compliance. A well-documented process demonstrates that the leadership acted with due diligence and followed established protocols.

GCPR takeaway — GCPR Communications helps founders navigate these high-pressure windows by providing senior-level strategic counsel and rapid-response frameworks that protect brand equity. Our team works alongside leadership to ensure that every internal and external communication is aligned with long-term business objectives and the highest standards of professional transparency.