Crisis Plan for Public Figures: Build It Before You Need It
A crisis plan for public figures, built in calm: risk list, who decides, contract clocks, locked accounts, monitoring triggers and a drill to test it.
A crisis plan for public figures is a short written agreement, made while nothing is wrong, about who decides, who is told first, who may speak, which accounts and pages you control, and what level of event wakes everyone up. It is not a script. It is a set of decisions you would otherwise make at 2 a.m. with a phone full of notifications and the worst possible information.
Most crisis advice starts after the story breaks. That is too late for a public figure, because the people who shape the first day are the ones around you: an agent, a club or league, a sponsor, a publicist, a lawyer, a family member who has the passwords. If they have never agreed on who does what, the first hours go to arguing about authority while the story sets. This guide is about the standing plan: what to write down, what to lock, what to prepare and how to test it.
I wrote it as a former newsroom editor, so the plan respects the record. It never helps anyone hide accurate, lawful, public-interest information about wrongdoing, and a plan built for that purpose will fail and become a second story. It is general information, not legal advice; your own counsel and your contracts decide what you owe whom. Every scenario below is invented, with generic people, and every rule or policy quoted was read from its source for this guide.
- Write a one-page plan with five parts: a risk list, a circle map of who hears what and when, a decision-rights sheet, an account and asset inventory, and monitoring triggers with named owners.
- Read your contracts as clocks. Notice periods, morals or conduct clauses, disclosure duties and approval rights set deadlines that start before you have decided anything.
- Lock the accounts first. Hardware or passkey sign-in, a carrier PIN and a short list of people with recovery access prevent the crisis that is entirely avoidable.
- Prepare pages and facts that are ready but not published: a fact sheet, a current bio, a statement shell and a place on a domain you own to put a dated update.
- Test it once a year with an invented scenario and a clock. A plan nobody has rehearsed is a document, not a plan.
A crisis plan for public figures is a set of decisions made while calm
The plan exists to remove choices from the worst hour, when you have little time, partial facts and advice pointing in different directions. Every decision made in advance is one fewer under pressure, and every decision not made becomes a negotiation among people who each protect a different interest.
Related readCrisis Communication to Employees: Who to Tell FirstA useful plan is short: past two pages, nobody opens it on the day. Keep contracts, templates and contact lists as attachments. It should also be specific to you. A footballer with a club and a league, a singer with a label and a promoter, and a presenter with a broadcaster sit inside different circles, and the plan follows the circle.
The plan is not a promise that nothing will happen, and it is not a way to prepare a cover story. It is the machinery for getting facts, telling the right people in the right order, and acting on what is false or unlawful while owning what is true.
Start with a risk list of stories that could really happen
Write down the ten events most likely to put your name in front of strangers and rank them by likelihood and damage, with the people who know your life: the agent, the lawyer, the person who runs your accounts. Public figures usually overrate the dramatic risk and underrate the dull one.
The list falls into three families. Things you control: an old post that resurfaces, a remark in an interview, a disclosure missed on a sponsored post. Things done to you: a hacked or impersonated account, a false claim, a leaked message, a pile-on that grows from a clip. And things that arrive through other people: a teammate, a manager or a business partner whose conduct lands on your name.
For each item write four short lines: how you would first find out, what is the first fact you would need, who is the single owner of the first call, and which clause or rule in your contracts it touches. If you cannot answer the last line, that gap is your first task, and the next section deals with it.
Related readProduct Recall Reputation: What Regulators PublishMap the circle: who must hear what, and when
The circle map answers one question for each party around you: do they have a right or a need to hear first, and what can they do to you in the first day? Some parties hold real power, such as a sponsor or a governing body. Others hold information, such as a family member or a former colleague. Nobody should learn about a crisis from the news if they have a contractual or personal right to hear it from you.
| Party | What they need from you | What they can do in a day | Plan entry |
|---|---|---|---|
| Sponsors and brand partners | A direct, factual call before the story spreads | Pause content, suspend activations, invoke a conduct clause | Named contact and call script, reviewed against each contract |
| Club, league, label or broadcaster | Notice under your agreement and the facts you can share | Issue its own statement, restrict your media, open a review | Who informs them, and what you will not say before they do |
| Agent, manager, publicist | One shared fact sheet, not three versions | Speak to the press, brief sponsors, negotiate timing | Who is the voice, who is the backstop |
| Lawyer | Everything, early, in a protected channel | Advise on exposure, send notices, preserve evidence | How and where privileged material is kept |
| Family and household | A short, honest briefing and a request not to post | Reply publicly, talk to reporters, hold account access | A privacy and posting agreement, and who they call |
| Press and platforms | One contact point and a fact sheet | Publish, correct or amplify; act on reports | Who answers, who files reports, who never replies |
Each row has a named person, a phone number and a written stand-in, because the plan must still work when the agent is on a flight. Agree the call order too: usually the lawyer first, then the party with the shortest contractual clock, then the voice of record, then the household.
Read your contracts as clocks, not as paperwork
Your agreements already contain a crisis plan, written by someone else. They set what you must report, to whom, within what time, and what the other side may do if a matter becomes public. Read them now, with a lawyer, and turn every duty into a line in the plan. Most public figures skip this, and it changes outcomes most, because a contractual deadline does not care how the first day is going.
The pattern to look for is a conduct or morals clause, which lets a sponsor or partner suspend or end a deal because of something you do or something said about you. Clauses differ widely, so read the wording rather than the label. Mark four things in each: what triggers it (a charge or conviction, a verifiable breach, or only the other side's own view that your conduct has caused harm), whether notice and a chance to respond come first, what the other side may do short of ending the deal, and what happens to money already paid. Your lawyer reads what these words mean under the law that governs your contract; this guide does not say what any clause means.
Related readReputation Crisis First Hour: A Checklist in OrderAdd a second class of duty: disclosure. Public figures who promote products are responsible for their own posts. The US Federal Trade Commission says an endorsement should make any material connection to the brand obvious, that free or discounted products count, that the influencer is the one who must make the disclosure, and that it should sit with the endorsement and not in a bio or behind a "more" link. A missed disclosure is an ordinary crisis and an easy one to prevent: add a pre-posting check for paid or gifted content and a person who audits what is live. This is US guidance; ask counsel which rules apply to you.
Lock accounts and identity before anyone tests them
A large share of public-figure crises begin as account problems: a hijacked profile posting something dreadful, a fake account taking donations, a number ported to a stranger. They are cheap to prevent and hard to explain afterward, because the public cannot tell a hacked post from a real one.
The US Cybersecurity and Infrastructure Security Agency publishes mobile communications guidance for highly targeted individuals that the plan can borrow directly. It says FIDO authentication is the strongest form of multifactor sign-in and is effective against bypass techniques, that hardware security keys are the most effective option with passkeys as an acceptable alternative, and that you should take stock of your valuable accounts, email among them, and enroll them in it. It says SMS is not phishing-resistant and is not strong authentication for accounts of highly targeted individuals, that you should disable SMS as a factor once you have another method, and that you should add a PIN and multifactor sign-in to your mobile carrier account to reduce the risk of SIM swapping. It also warns that enrolling in an authenticator app does not automatically remove SMS, and that some services default to SMS during account recovery, so check the recovery path and do not assume SMS is gone.
Related readArrested: What to Do for Your Reputation in Week OneTurn that into an inventory. List every account that speaks in your name or can reach your money: email, each social platform, the website domain and its registrar, the cloud storage with your photos and contracts, the phone carrier, the management and merchandising accounts, and any shared scheduling tool. For each, record who holds the credentials, which sign-in method is on, who else has recovery access and where the recovery codes are kept. The inventory is itself sensitive: keep it in a password manager and share it with two people, not ten.
- Secure the email firstYour primary email resets every other account. Enroll it in hardware key or passkey sign-in before anything else.
- Move the carrier behind a PINAdd a PIN and multifactor sign-in to the carrier account to reduce the risk of SIM swapping.
- Replace SMS codesSwitch each key account to a hardware key, passkey or authenticator app, then turn off the SMS option.
- Cut the recovery treeRemove old phone numbers, old email addresses and former staff from recovery settings, and store recovery codes offline.
- Name two deputiesChoose two trusted people who can act on accounts if you cannot, and agree in writing what they may and may not do.
Someone who cannot take your account can make one that looks like it. List your official accounts, with exact handles, on a page you own, so platforms, sponsors and reporters can check which is real, and name the person who files impersonation reports.
Decide who can say what, and put it on one page
The decision-rights sheet is the heart of the plan, and it is usually the shortest page. It lists, for five kinds of decision, who proposes, who must be consulted, who decides, and who may veto. The five kinds are: facts (what is confirmed), law (what exposure exists), words (what is said publicly), timing (when and where it is said) and action (what is reported, corrected, paused or cancelled).
Keep the roles apart. A lawyer owns legal exposure. A communications adviser owns how a sentence will be understood and quoted. The principal owns the truth of the facts, since nobody else knows what happened, and the decision to apologize, because an apology the person does not mean is worse than silence. The agent owns the commercial relationships. Say who breaks a tie: the principal on facts and apology, counsel on legal exposure.
Related readContent Creator Crisis Response: A Plan That Protects IncomeThen write the activation card: half a page that says what to do in the first hour. It lists the person who opens the incident, the shared fact sheet and where it lives, the log in which every action is recorded with a time, the rule that nobody posts or deletes anything until the owner of words clears it, and the call order from the circle map. Its job is to make the first hour boring.
Prepare the pages and facts that must exist before the story does
Search engines and AI assistants answer questions about you within minutes of an event. If the only sources they find are the story and angry posts, that becomes the default account. So the plan includes assets that already exist, are accurate and can be updated quickly.
The first is a one-page fact sheet, kept current: your name and the name you are known by, your role, the career facts others get wrong, the accounts you own, and what you do not discuss, such as family. The second is a current bio and photos on a domain you own, so there is a canonical source to quote. The third is a place for dated updates on that domain, created but not linked from the main navigation until needed. When you have something to say, you say it once there, with a date, and every other channel points to it.
The fourth is a statement shell: a short holding message with slots for the confirmed fact, what you are doing and when you will update. It is a frame, not a finished text, and nothing goes out until the slots are filled with facts that are true and checked. The fifth is a one-paragraph briefing note, so each call to a sponsor or partner carries the same facts. None of this hides anything: it puts your accurate account where it can be found. If a story is accurate, the answer is accountability and a record of what changed, not a page designed to push it away.
Related readExecutive Crisis Communication Plan for a Personal CrisisSet monitoring and trigger levels so the right people wake up
Monitoring is useful only if it is tied to a decision. A feed of every mention produces fatigue within a week. Say what is monitored, who reads it, how often, and what signal moves the plan from watching to acting.
The tools are simple. Google Alerts emails you when new Google Search results match a topic you follow, such as mentions of your name, and its options let you choose how often, which kinds of sites, the language and the region. Results about you, a Google tool, shows whether personal details such as your home address, phone number or email address appear in search results, and can send email or app notifications when it finds some; Google says it sometimes denies requests for pages from newspapers and from government or educational institutions, and that removal does not delete the page from the internet. That makes it a privacy-exposure alert, not a way to remove a news story. Add platform notifications for mentions and direct messages on your official accounts, and a weekly look at what an AI assistant says when asked about you. A monitoring service, such as the one described on our monitoring page, does the same work on a schedule if you want it done for you.
Then set levels. Three are enough.
| Level | What it looks like | Who is told | Action |
|---|---|---|---|
| Watch | A critical post with modest reach, or a single wrong fact in a small outlet | Account owner and publicist | Log it, save a copy, check the facts, no public reply |
| Alert | Coverage by an established outlet, a rising pile-on, a hijacked or fake account, or a sponsor query | Whole circle in the call order | Open the incident, start the log, hold all posting, prepare the shell |
| Crisis | A conduct allegation, a legal or regulatory step, a leak of private material, or a sponsor or club formal notice | Lawyer first, then the full circle | Run the decision-rights sheet, brief parties, publish a dated holding position if the facts support it |
Write the thresholds in your own terms: a hundred critical replies is background noise for a person with a large following, while one regional article may be an Alert for a person with a small, local profile.
Related readReputation crisis: what to do after the first weekDrill the plan once with an invented scenario and a clock
A plan is only real after someone has run it against a clock. Once a year, and after any change in your team or contracts, spend an hour on a scenario. This one is invented, with generic parties.
Assume a mid-career professional with a sponsor, a governing body, an agent and a lawyer. At 9:00 a.m. a stranger posts a cut clip, captioned as if the person insulted a fan. By 9:30 a mid-sized account has shared it. Run the plan.
| Time | Event | What the plan should produce |
|---|---|---|
| 9:00 | Clip posted; alert fires from account mentions | Publicist logs it as Watch, saves the clip and the page, notifies the principal |
| 9:30 | Wider sharing; first sponsor message arrives | Raised to Alert; call order starts with the lawyer; posting is frozen |
| 11:00 | Sponsor and governing body call | Agent calls both with the same brief; the clause on conduct is checked for notice duties |
| 13:00 | Reporter asks for comment; full footage found | Facts written, confirmed and unconfirmed separated; voice of record answers once |
| Next morning | Story continues in a smaller form | Dated update posted on the owned page; wrong claims corrected through the right route; log reviewed |
After the drill, count what failed. Usually it is a wrong phone number, a stand-in who did not know it, a clause nobody had read, or an account only one person could open. Add the notes to the plan with a date.
Where this plan stops and the others begin
This plan covers preparation and authority; neighboring problems have their own methods.
A holding statement must be replaced within a day by a fuller account, and the shell above is only its starting frame. When the reaction is a mass one, the verdict on the criticism (deserved, disproportionate or false), not the volume, decides whether you apologize, contest or stay quiet. Rebuilding trust once the news cycle has ended is a slower program of real change, a dated record and outside proof, and it begins where this plan ends. Companies add disclosure duties to markets and regulators, which this guide does not describe. Actors and models add casting, agency and image-use agreements; adapt the circle map to those parties.
Next step: write the plan in one week
The sequence below usually takes about a week of part-time effort, and each step leaves you better protected even if you stop.
Related readI Posted Something I Regret and It Is Going Viral- Day 1: lock the email and phoneEnroll your main email in hardware key or passkey sign-in and set a PIN with your carrier.
- Day 2: build the circle mapList every party in the table above with a name, number and stand-in, and agree the call order.
- Day 3: read the contractsWith your lawyer, list every notice duty, conduct clause, disclosure duty and approval right, with its deadline.
- Day 4: write the decision-rights sheetName who decides facts, law, words, timing and action, and who breaks a tie.
- Day 5: prepare the assetsWrite the fact sheet, update the bio, and create the dated-update page on your own domain.
- Day 6: set monitoringCreate alerts for your name, switch on Results about you notifications, and write the three levels.
- Day 7: run a short drillWalk the invented scenario above with the people who would be on the call, and fix what fails.
If a story is already moving, skip the preparation and start with the first hour: save the record, freeze posting, call your lawyer, and do not reply in public until you know what is true. Our crisis desk can work alongside your team from the first call.
Reputation Partners works with public figures and their teams on the standing side of this as well as the live side: the inventory, the monitoring and the pages that sit behind the plan. We do not promise any outcome in search or in the press, and we will not help hide accurate, lawful reporting. We help you know what is out there, correct what is wrong, and keep your own account complete and findable.
Questions people ask
Who should have a copy of the crisis plan?
The principal, the agent or manager, the lawyer, the communications lead and one household member who has account access. Keep the full plan to that group. Give sponsors and club contacts only the part that concerns them, such as the call order and the contact for notices. A plan shared with ten people leaks, and a leaked plan is a story of its own.
How often should a public figure update a crisis plan?
Review it once a year, and again whenever you sign or renew a major contract, change agent, lawyer or publicist, switch phone carrier, or open a new public account. Check phone numbers and stand-ins every few months, because the commonest failure is a contact who has changed. After any real incident, revise it within a week while details are fresh.
Can I prepare a plan that includes removing bad coverage?
You can prepare routes for what is false, outdated or unlawful: a correction request, a platform report or a legal letter. You cannot plan to remove accurate, lawful reporting about real conduct, and a plan that depends on it will fail. Build for accountability and a complete record instead.
Should the plan include an apology?
It should say who decides, and on what basis. An apology is right when you did something wrong, you understand what it was, and you can state a concrete change. It is wrong when the facts are disputed, when you are unsure what happened, or when counsel has advised that it affects a legal matter. Decide the test in advance, not the words.
