The first 24 hours of a corporate crisis: a communications checklist

In short: The first 24 hours of a corporate crisis decide whether the company looks in control or caught out. The essentials are a verified fact sheet, a holding statement in Arabic and English at the same moment, one prepared spokesperson, a clear order for informing stakeholders, and live social media monitoring.

The first hour: facts, team and decision rights

A crisis rarely arrives with complete information. A site fire, a data breach, a product recall or a viral video each starts with partial facts and fast-moving rumor. The first task is not to write anything public. It is to agree who decides, and what is actually known.

• Convene a small crisis cell: one decision maker who can approve statements, plus legal, communications, operations and HR.
• Open one fact sheet with three columns: confirmed, unconfirmed, being checked. Public statements draw only on the first.
• Start a log of time, decision and owner.
• Pause scheduled content. A cheerful promotion published mid-crisis does lasting damage.

The holding statement: early, short and true

A holding statement is a brief, approved message issued before all the facts are in. It shows that the company knows, cares and is acting, and it tells people when they will hear more. The crisis communication principles of the Centers for Disease Control and Prevention in the United States begin with "be first, be right, be credible." A holding statement does the first two: it is fast, and it is limited to what is verified. It covers:

• What happened, in plain words, without minimizing it.
• Concern for the people affected, before the company's own position.
• What the company is doing now.
• When and where the next update will come.
• One contact route for media and one for affected people.

Prepare scenario templates in advance, cleared by legal, so the first version needs only the facts. Publish the Arabic and English versions together, never hours apart.

The spokesperson and the stakeholder map

Route every media question to one spokesperson or to the press office. Choose by severity: a senior executive when safety or livelihoods are at stake, a communications lead for operational matters. If that person is not comfortable with hostile questions in both languages, name a second spokesperson for the other language and brief both from the same fact sheet. Rehearse short answers to the ten hardest questions aloud.

Each stakeholder group then needs a message, a channel, an owner and a time. A typical order:

• People directly affected and their families, through direct contact.
• Employees, before the public or at the same moment.
• Regulators and authorities, according to the rules that apply.
• Customers, partners and suppliers, with practical information.
• Investors and lenders, through the formal disclosure route where one applies.
• Media and the public.

Some steps carry legal duties. Companies listed on the Egyptian Exchange must disclose information that could materially affect their share price immediately, and listed companies in Oman have disclosure obligations overseen by the Financial Services Authority and the Muscat Stock Exchange. Where personal data is involved, Egypt's Personal Data Protection Law No. 151 of 2020 and Oman's Personal Data Protection Law (Royal Decree 6/2022) both require the regulator to be notified of a breach, within 72 hours under the current rules. Requirements vary by sector and authority, so confirm them with counsel. This is general guidance, not legal advice.

Arabic and English parity

In Egypt and the Gulf, a crisis plays out in two languages at once: Arabic-language media, government and the wider public on one side, international partners, investors and expatriate staff on the other. Journalists compare the versions, and any gap, such as a softer admission in one or a missing figure in the other, becomes a second story about the company's honesty.

• Draft both versions from the same fact sheet, side by side.
• Keep facts, figures, dates and commitments identical. Tone can adapt; substance cannot.
• Fix key terms in advance: the company's name, the incident's name, job titles and place names.
• Have one reviewer fluent in both languages check the pair, then publish both at the same moment.

A literal rendering of an English corporate apology often reads as cold in Arabic, so the Arabic version should come from a native Arabic writer.

Social media: monitor, correct, hold the line

Start monitoring in the first hour, in both languages and in the dialects people actually use, since Egyptian and Gulf posts about the same incident rarely share keywords. Track the company name and its misspellings, brand and executive names, and the incident location. One person reports to the crisis cell at fixed intervals: what is being said, what is false and what is gaining speed. Correct factual errors calmly by pointing to the official statement, and do not delete critical comments that break no platform rules, because deletions get screenshotted.

What not to say:

• "No comment." It reads as hiding something.
• Speculation about cause, scale or cost.
• Blame on employees, contractors or "external factors" before an investigation.
• Promises, or admissions of liability, that the decision maker and counsel have not approved.
• Humor, a defensive tone, or anything said "off the record."

The 24-hour checklist and the after-action review

• Hours 0 to 1: convene the crisis cell, open the fact sheet and log, pause scheduled content.
• Hours 1 to 2: publish the holding statement in Arabic and English, brief employees, start monitoring.
• Hours 2 to 6: contact affected people, notify regulators where required, brief the spokesperson.
• Hours 6 to 12: give the first substantive update at the promised time, even if the investigation continues.
• Hours 12 to 24: issue a second update, adjust messages and FAQs, and plan the next 72 hours.

Within two weeks of the situation settling, hold an after-action review with the crisis cell. Rebuild the timeline from the log, note where the Arabic and English versions drifted and which stakeholders heard late, then update the plan, templates and contact lists. Keep the review on decisions and systems, not blame, or people will hide problems next time.

Volt Communications, Bayan Group's corporate communications brand, handles PR and crisis communication in Arabic and English for companies in Egypt and the Gulf, both in preparing for an incident and while one unfolds.