# Crisis Communication to Employees: Who to Tell First

Crisis communication to employees: who hears first, what to share, how to plan for leaks and keep staff from becoming the second story. Worked sequence.

---


Crisis communication to employees works when your people hear the confirmed facts from you before they read them somewhere else, in an order you chose: leadership first, then the people who must act, then the managers who will field questions, then everyone. The message is short, states only what is verified, tells staff what changes for them, and gives them one place to take questions.

Most internal crisis failures are failures of order, not of wording. A rough message that arrives first, with a promise about the next update, beats an excellent one that arrives after a screenshot has circulated. This article sets out the sequence, what to put in each message, how to plan for the leak you should assume will happen, and how to keep your staff from becoming the second story.

Employees talk to customers, former colleagues, recruiters and journalists. Treat them as an audience with its own needs and its own legal protections, not as a channel to be controlled.

<div class="box"><b>The short version</b>
<ul><li>Tell people in tiers, fast: decision-makers, then the people who must act, then managers, then everyone, with the gap between tiers measured in minutes or a few hours, not days.</li><li>Share what is confirmed, what it means for each person's work, what you do not know yet, and when the next update comes. Withhold anything unverified, anything about named individuals that is not yours to share, and anything legal counsel has asked you to hold.</li><li>Assume every internal message will be forwarded or published. Write it so that would not hurt you.</li><li>You can ask staff to route media questions to one person. You cannot lawfully forbid them to discuss working conditions or to report wrongdoing to regulators.</li><li>Staff become the second story when they are surprised, silenced or contradicted. Prevent all three.</li></ul></div>

## Employees should hear before the public does, whenever you control the timing

The default rule is that employees hear first, or at the latest at the same moment as everyone else. When a crisis breaks without warning, you do not control the timing, and the goal changes to getting a short confirmed message to staff before they have seen the story three times in their feeds.

There are three reasons to put staff first. They are the most credible source of information about you, so what they believe spreads. They are the people customers and partners will ask. And they are the group most likely to feel betrayed if they learn about something that touches their own workplace from a news site.

There is a limit. Some situations need a short delay while facts are verified, a person involved is told in private, or counsel confirms a disclosure obligation. If your company is listed, rules on inside information may constrain what can be said to whom and when, and your lawyers decide that, not a communications plan. The delay should be measured in hours and it should be a decision someone owns, not a drift.

What you never do is let staff discover the story by accident while leadership waits for a perfect statement. A holding line to staff such as "we are aware of this, we are verifying the facts, you will hear from us by 3 p.m." costs nothing and keeps the relationship intact. Silence is read as either ignorance or concealment, and both are worse than an honest "we do not know yet."

## The order in which people hear matters more than the wording

Tell people in tiers. Each tier needs something different, and each tier should hear before the next one has time to hear from someone else.

<div class="tablewrap"><table><thead><tr><th>Tier</th><th>Who</th><th>What they need</th><th>Timing</th></tr></thead><tbody>
<tr><td><strong>1. Decision group</strong></td><td>Chief executive, legal counsel, head of people, head of communications</td><td>The full verified facts, the open questions, the decisions to make</td><td>Immediately, by phone or call</td></tr>
<tr><td><strong>2. Action owners</strong></td><td>Heads of the teams that must act: security, customer support, sales, finance, whoever touches the issue</td><td>Their specific task, what to say to outsiders, what to escalate</td><td>Within the first hour or two</td></tr>
<tr><td><strong>3. People directly affected</strong></td><td>Anyone named, implicated or personally touched</td><td>A private conversation before any group message, with support and a named contact</td><td>Before tier 4, never by group message</td></tr>
<tr><td><strong>4. Managers</strong></td><td>Everyone who will be asked questions by their teams</td><td>The staff message early, a short Q&amp;A, the escalation route</td><td>Shortly before the whole company</td></tr>
<tr><td><strong>5. All staff</strong></td><td>Every employee and contractor on the payroll or on site</td><td>The confirmed facts, what changes, where to ask, when the next update comes</td><td>Same day, ahead of or alongside any public statement</td></tr>
<tr><td><strong>6. Close outside circles</strong></td><td>Key customers, partners, investors, former staff you owe a courtesy</td><td>A short, consistent note that matches what staff were told</td><td>Right after tier 5</td></tr>
</tbody></table></div>

Two points in that table are easy to miss. The first is tier 3. A person who is named in a crisis, whether accused, affected or simply central, must not learn it from an all-staff message. They are told privately first, given a human contact, and told what will be said about them. That protects them, and it protects you from the claim that you handled a person badly.

The second is tier 4. Managers are where your message either holds or fragments. If they hear at the same moment as everyone else, the first questions arrive before they have answers. Give them the message ten to thirty minutes early with three or four prepared answers and an instruction to escalate anything else, not to improvise.

Where staff work across time zones or shifts, sequence tiers 4 and 5 by region.

## A worked sequence for the first five days

The following is a scenario with invented, generic parties. It is not a real case. Assume a company of about 400 people with offices in two cities and some remote staff. On a Monday at 10:00, a news outlet tells the company it will publish a story on Wednesday about complaints raised against a former senior manager. The company has verified some of the complaints and not others, and an external review is under way.

<div class="tablewrap"><table><thead><tr><th>When</th><th>Action</th><th>Who</th><th>Audience</th></tr></thead><tbody>
<tr><td><strong>Mon 10:30</strong></td><td>Crisis call; confirm facts; appoint one owner for staff messages and one spokesperson for media</td><td>Decision group</td><td>Tier 1</td></tr>
<tr><td><strong>Mon 12:00</strong></td><td>Counsel sets what cannot be said; draft staff message and Q&amp;A</td><td>Counsel, communications, people team</td><td>Internal only</td></tr>
<tr><td><strong>Mon 12:30</strong></td><td>Brief the team heads who must act: their task, the outside line, what to escalate</td><td>Chief executive</td><td>Tier 2</td></tr>
<tr><td><strong>Mon 15:00</strong></td><td>Private conversations with anyone directly affected, with a support contact named</td><td>People team</td><td>Tier 3</td></tr>
<tr><td><strong>Mon 15:30</strong></td><td>Brief managers with the holding note and a short Q&amp;A</td><td>Communications</td><td>Tier 4</td></tr>
<tr><td><strong>Mon 16:00</strong></td><td>Send the holding note to all staff: aware, verifying, next update Tuesday 11:00</td><td>Chief executive</td><td>Tier 5</td></tr>
<tr><td><strong>Tue 11:00</strong></td><td>Full staff message and live Q&amp;A; media guidance restated; reporting channel reminded</td><td>Chief executive, people team</td><td>Tier 5</td></tr>
<tr><td><strong>Tue 15:00</strong></td><td>Short note to key customers and partners that matches the staff message</td><td>Account owners</td><td>Tier 6</td></tr>
<tr><td><strong>Wed morning</strong></td><td>Staff reminded the story is out today; managers get the final Q&amp;A an hour before publication</td><td>Communications</td><td>Tiers 4, 5</td></tr>
<tr><td><strong>Wed to Fri</strong></td><td>Daily check-in note even if the only news is "nothing has changed"; log questions staff are asking</td><td>People team</td><td>Tier 5</td></tr>
<tr><td><strong>Fri 16:00</strong></td><td>Review: what questions were asked, which rumors travelled, what to change in next week's cadence</td><td>Decision group</td><td>Tier 1</td></tr>
</tbody></table></div>

Staff hear within six hours of the company learning of the story, well over a day before it is published. The Monday message is a holding note that commits to a time for the next update, the most valuable sentence in the sequence. Nothing in it depends on anyone staying quiet.

If the same news arrived with no warning, with the story already live at 10:00, the same tiers apply and the gaps compress: tiers 1 and 2 within the hour, the holding note to everyone within two or three hours.

## What to tell staff, and what to hold back

A good staff message answers four questions in the order a worried person asks them: what happened, what does it mean for me, what do you not know yet, and where do I go with questions. Anything beyond those four tends to make the message longer without making it more useful.

<figure class="fig">
<figcaption><b>Anatomy of the all-staff message</b></figcaption>
<ol class="fig-steps">
<li><b>State what is confirmed</b>One or two plain sentences on what has happened, using only facts you have verified. No adjectives, no characterizations of people.</li>
<li><b>Say what you do not know</b>Name the open questions and say who is working on them. Admitting a gap is more credible than a confident guess that is corrected tomorrow.</li>
<li><b>Tell people what changes for them</b>Whether their work, schedule, systems, customers or contracts are affected, and if the answer is "not at all," say that.</li>
<li><b>Give the rule for outside contact</b>Ask that media and public inquiries go to one named person, and explain why. Do not tell staff what they may or may not say about their own working conditions.</li>
<li><b>Name the channel and the next update</b>One mailbox, one chat room or one named person for questions, and the exact time of the next message.</li>
<li><b>Acknowledge the human side</b>Say that this is hard to read, offer support services where you have them, and name a person, not a department.</li>
</ol>
</figure>

### What to share

Share verified facts about the event, the actions the company has taken, the steps staff themselves should take (for example, changing passwords after a security incident), and anything that changes their work. Share the approved line for outside questions. Where there is an external review or investigation, share that it exists and roughly how it will run, not what it will find.

### What to hold back

Hold back anything unverified, because a retraction is a second crisis. Hold back detail about named individuals that is not yours to disclose, including health, disciplinary and family details, and anything that could identify a complainant. Hold back what counsel has asked to be held, and tell staff plainly that something is being held for legal reasons rather than pretending it does not exist. Hold back speculation about motives or about whoever started the story.

<aside class="callout">
<span class="callout-label">Warning</span>
<h4>Never tell staff something you expect to be corrected</h4>
<p>If an internal message says one thing and the public record later shows another, the internal message is the evidence. Say "we are verifying" rather than offering a version you may have to withdraw. A staff message that turns out to be wrong damages trust with the people you most need.</p>
</aside>

Write as a senior colleague talking to adults, and avoid promises you cannot keep, such as "there will be no impact on jobs".

## Plan for the leak: write every message as if it will be published

Assume that any message sent to more than a few dozen people will reach someone outside the company, quickly. The practical response is not to work harder at preventing it, which rarely succeeds and often backfires, but to change what a leak costs you.

Write each internal message so that, if it appeared on a news site in full, it would be accurate, calm and fair to everyone mentioned. That discipline removes most of the damage, because a leak of an honest message is a non-event while a leak of a message with spin, or one that contradicts the public statement, is a second story.

Keep the audience as small as the purpose allows. Drafts of the staff message circulate among the decision group only, and the version staff see is final. Where a message is legally privileged, counsel decides how it is handled and who sees it.

Make the internal message and the public statement consistent on every fact. A staff message that is fuller than the public line is acceptable if it contains nothing that contradicts it. A staff message that is inconsistent with the public line, even by one number, is the one a journalist will quote.

Do not make a leak hunt your first response. It tells staff the company cares more about the source than the problem, and it creates the story of an employer surveilling its people. If a leak exposes genuinely confidential material, such as customer data or privileged advice, handle it through counsel.

## What you cannot tell employees to do

The instruction that goes wrong most often is a blanket request for silence. Employers may set sensible rules for who speaks to the media on the company's behalf. They may not turn that into a ban on employees discussing their own working conditions or reporting concerns to the authorities. The rules differ by country, so the following is an outline, not advice, and your own counsel decides.

In the United States, the National Labor Relations Board states that covered employees may act together to improve pay and working conditions, with or without a union, and treats employer interference with those rights as an unfair labor practice. Its page on [employee rights](https://nlrb.gov/rights-we-protect/rights) is the primary source. In practice this means that a policy or message that forbids staff from discussing pay or working conditions with each other, or that threatens discipline for doing so, can create a legal problem of its own. The NLRB page refers to covered employees, so check with counsel whether the rule applies to a given role.

Securities rules add a second limit. Rule 21F-17 of the Securities and Exchange Commission (SEC) provides that no person may take any action to impede an individual from communicating directly with the Commission staff about a possible securities law violation, including by enforcing or threatening to enforce a confidentiality agreement. The text is published by Cornell's Legal Information Institute as [17 CFR 240.21F-17](https://www.law.cornell.edu/cfr/text/17/240.21F-17). A staff message that tells people not to speak to anyone outside the company, or that cites confidentiality agreements with no carve-out for regulators, risks breaching it.

In Great Britain, the government's [whistleblowing guidance for workers](https://www.gov.uk/guidance/whistleblowing-guidance-for-workers) says workers are protected from detriment for whistleblowing, employees are also protected from unfair dismissal, and that a provision in an agreement, including a non-disclosure agreement, that prevents a whistleblowing disclosure is not legally enforceable. It lists who a worker may tell, from the employer and a legal adviser to a prescribed person such as a regulator, with protection for media disclosures limited to narrower circumstances. That guidance covers Great Britain only, and Northern Ireland has different rules. Acas explains the same routes in its page on [how to make a whistleblowing disclosure](https://www.acas.org.uk/whistleblowing-at-work/how-to-make-a-whistleblowing-disclosure).

<aside class="callout">
<span class="callout-label">Rule</span>
<h4>Ask for routing, not for silence</h4>
<p>Ask staff to send media and public inquiries to one named person, and explain why. Do not forbid discussion of working conditions, and do not suggest that confidentiality agreements stop anyone reporting wrongdoing to a regulator or authority.</p>
</aside>

The practical wording is simple. "If a journalist or member of the public contacts you about the company, please pass them to the head of communications, and let her know. This is so one person gives accurate information. It does not limit anything you are legally entitled to say or do." The last sentence costs nothing and removes the legal exposure.

This is information, not legal advice. Employment, securities and data protection law differ by country and by role, and the company's counsel should review any instruction to staff before it goes out in a real crisis.

## How to keep staff from becoming the second story

Staff become news in four ways: they are surprised, they are silenced, they are contradicted, or they are treated badly. Each has a specific prevention.

**Surprise.** Staff who learn about the crisis from a news site feel the company chose not to tell them. Prevent it with the tiered sequence above and a promised time for the next update. A time-stamped commitment turns a vacuum into a schedule.

**Silencing.** A gag instruction is a story on its own, particularly one that appears to cover wrongdoing. Prevent it with the routing request above, and do not follow up with threats. If a particular employee is disclosing genuinely confidential material such as customer data, deal with that individually through counsel and the proper process.

**Contradiction.** If staff are told one thing and customers another, someone will notice. Prevent it by drawing both messages from a single approved fact sheet, and by updating the sheet before any message is changed. When something changes, tell staff first or at the same moment as everyone else.

**Mistreatment.** Staff become the second story when a person who raised a concern, or who is simply associated with the crisis, is moved, excluded or disciplined in a way that looks like retaliation. Prevent it by having the people team check any action affecting a complainant, a witness or an employee who has spoken publicly before it is taken, and by asking counsel whether the action could be read as detriment for a protected disclosure.

Finally, the social media question. A company can reasonably ask staff not to speak on its behalf or post unverified claims about the matter. It is a mistake to try to block employees' personal accounts or to demand removal of posts about their own working conditions. Give people accurate material to share, and make it easy for them to say "I'm not able to speak for the company" without feeling they are lying. Long-term monitoring of what is being said about you, including by current and former staff, belongs in a [reputation monitoring](/reputation-monitoring) routine, so that you see a rumor on day one rather than day ten.

## Decision table: what to do when it goes wrong

Plans meet reality in the first hours. The table below sets out the situations that most often break an internal sequence and the response that keeps the company on solid ground.

<div class="tablewrap"><table><thead><tr><th>Situation</th><th>Response</th><th>Why</th><th>Risk if ignored</th></tr></thead><tbody>
<tr><td><strong>Staff message leaks before you send it</strong></td><td>Send the final version at once, with a one-line note that it is now going to everyone</td><td>Your version should be the one that circulates</td><td>A screenshot of a draft becomes the story</td></tr>
<tr><td><strong>A journalist contacts an employee directly</strong></td><td>Remind staff of the routing line; do not contact the employee to question what was said</td><td>Routing is reasonable, chasing is not</td><td>Looks like surveillance</td></tr>
<tr><td><strong>An employee posts criticism of the company</strong></td><td>Have the people team talk to them privately, listen first, and check counsel before any action</td><td>The post may concern working conditions</td><td>A disciplinary action becomes the second story</td></tr>
<tr><td><strong>An employee posts a fact the company has not confirmed</strong></td><td>Say in the next update what is and is not confirmed; do not demand deletion by name</td><td>Correcting in public is calmer than pursuing a person</td><td>The post spreads with a retaliation angle</td></tr>
<tr><td><strong>Managers give conflicting answers</strong></td><td>Issue a one-page Q&amp;A and a hotline to the owner of staff messages within hours</td><td>Inconsistent answers read as concealment</td><td>Rumor fills the gap</td></tr>
<tr><td><strong>You learn a fact in your message was wrong</strong></td><td>Correct it to staff first or simultaneously, in plain words</td><td>Staff will check</td><td>Trust loss lasts longer than the crisis</td></tr>
<tr><td><strong>Staff ask about job security and you do not know</strong></td><td>Say what you know, what you do not, and when you will know</td><td>A false reassurance is later quoted</td><td>Early resignations, a leak from the people who feel misled</td></tr>
<tr><td><strong>Someone raises a concern about wrongdoing</strong></td><td>Acknowledge it, route it to the proper process, protect the person from detriment, and involve counsel</td><td>The law may protect the disclosure</td><td>A legal claim and a second story</td></tr>
</tbody></table></div>

When something goes wrong, the response is to be faster, plainer and more consistent, not tighter or more controlling.

## If this is happening to you now

<div class="box hot"><b>If this is happening to you now</b>
<p>Write the holding note to staff first: aware, verifying, next update at a stated time. Then work down the tiers. If you need an outside team to run the sequence, staff messaging and the public record together, the <a href="/crisis-management">crisis desk</a> at Reputation Partners can mobilize quickly and works under confidentiality.</p></div>

## Questions people ask

### How soon should employees be told about a reputation crisis?

As soon as you can state something verified, and in any case before they would learn it elsewhere. If the facts are not settled, send a short holding note that says you are aware, you are verifying, and exactly when the next update will come. A same-day holding note is better than a full explanation the next morning.

### Should we tell employees before telling the media?

Whenever you control the timing, yes, or at the same moment. Staff are your most credible audience and will be asked about the story first. If a journalist has set a deadline, schedule the staff message ahead of publication, so that no employee sees the story before hearing from you.

### Can we forbid employees from talking about the crisis?

Not as a blanket rule. You can ask that media inquiries go to one named person, and that staff do not speak on the company's behalf. In the United States the NLRB protects covered employees discussing working conditions, and in Great Britain a clause that prevents a protected disclosure is not enforceable. Ask counsel in your country.

### What if a leak happens anyway?

Assume it will and write each message so it would be fair if published. If a draft leaks, send the final version immediately. Avoid a hunt for the source, which turns the leak into a story about surveillance. Treat genuine leaks of customer data or privileged advice through counsel and the proper process.

### Do contractors and remote staff hear at the same time?

Yes, where the crisis touches them. People outside the payroll talk to the same customers and journalists. Sequence by region and shift so no group learns last, and give remote staff the same live question session as office staff, not just an email.

### Who should deliver the message?

The most senior person who is credible and available, usually the chief executive, with the people team present for questions. Managers deliver the local follow-up. A message from a communications function alone reads as a press release, which is what staff do not want to receive.

### What should we say about someone who is accused or involved?

Say only what is verified and necessary, and tell the person involved privately before any group message. Do not characterize guilt or motive, do not disclose personal details, and do not identify a complainant. Say that a process is under way and what staff can expect from it.