The hardest part of a small-business incident is not the operational response — it is the words. Who calls the customer whose shipment is delayed? Who tells the staff that payroll will run two days late? Who posts the public statement when the Fire Marshal shows up at the loading dock? If those answers are not pre-written, they get improvised in real time by whoever picks up the phone. A Crisis Communication Plan replaces improvisation with a one-page playbook anyone in leadership can execute.
The five audiences, in order of who hears it first
Most small businesses start their public statement first and forget the staff. Reverse the order. Employees hear it before the press; affected customers hear it before the general public; regulators hear it before the press; and only then does a public statement go out — not before, not later. Time-stamping each message before it lands prevents the worst version of an incident: a confused employee posting on social media an hour before leadership has any statement ready.
1. Employees and their families
Internal first. A short text message or call — 'we are aware of X, this is what we know, this is what we're doing, more by lunchtime.' Do not wait for the full story to inform your own team. The single biggest reputational risk in any small-business incident is an employee finding out about their own company from a news alert.
2. Affected customers and partners
Direct outreach to anyone whose contract or shipment is affected, before the news cycle starts. Tone: candid, specific, time-bound. 'Service for customers on the west-coast fulfillment path will be delayed two to four days. We will email a revised estimate by Friday EOD.' If you can give a date, give it. If you cannot, say 'we will give you a revised estimate by Friday EOD' — committing to the communication is more useful than guessing the answer.
3. Regulators, insurance, legal counsel
Some incidents trigger mandatory reporting windows — workplace injuries, data breaches (state-by-state), environmental releases. The Crisis Communication Plan must name the role who calls each one, with the contact list in the binder. Reporting late — even by 24 hours — converts a fixable incident into a regulatory one.
4. Press and the general public
For most small businesses, the press arrives only after the customer-facing channels fail — so the public statement should reuse what you have already told customers. One paragraph, one paragraph, one paragraph: what happened (facts only), what you are doing about it (action), what to expect next (time-bound). Skip the speculation, skip the apology tour, skip the legal language. A press statement that takes longer than three paragraphs is a press statement that someone will quote out of context.
Drafts and channels before the incident
Pre-write six message templates — one per major incident class (operational outage, workplace injury, data incident, public complaint, weather-related closure, supply chain disruption). Each template is three paragraphs with placeholders. Pulling and editing a draft takes 15 minutes; writing one from scratch takes 90. The Crisis Comms Plan is the binder for those drafts, the contact lists, the social media accounts you can post from a phone, and the authority matrix for who can speak on behalf of the company.
Spokesperson discipline
Designate a single spokesperson. The owner is not automatically the right choice — the right choice is whoever is composed on the phone at 9 PM with a reporter on deadline. Name a primary and a backup. Anyone else who is asked a question by a customer, a vendor, or a reporter should answer with one sentence: "Let me make sure you get the right information. X is our spokesperson — sending you their contact." This protects the company from off-the-cuff statements more than any training ever will.
After the first 72 hours
The plan covers the acute phase; the rest of the recovery runs off the Business Continuity Plan and the Disaster Recovery Plan. The Crisis Comms role does not end — it stays active until customers are at full service and the public narrative has stabilized. A standing 48-hour debrief, written down, closes the loop and feeds next year’s draft revisions.