A social media crisis plan is a short document that says who watches your accounts, who decides what gets said, when scheduled posts stop, and what goes out in the first hour. Write it now, while nothing is on fire. It can fit on two pages, and a small team needs it as much as a corporation does.
Below you will find the plan broken into parts you can fill in this week, with timelines from professional PR bodies, real examples, and the pause-posting rule that most small businesses forget.
TL;DR
- A crisis is a serious risk to safety, trust, staff, operations or compliance. A single unhappy customer is a complaint, not a crisis.
- Name a crisis lead, a backup and an approver in writing, and decide who is on call outside business hours.
- Pause scheduled and automated posts as soon as a crisis starts, then reply with a short, factual holding statement.
- Follow a phased timeline: first response in 1 to 2 hours, fact-finding, a full public statement by 24 hours, then monitoring.
- After it settles, run a review and update the plan.
Table of Contents
- What counts as a social media crisis
- Why a small business needs a written plan
- Step 1: Assign roles before anything happens
- Step 2: Set triggers and a pause-posting rule
- Step 3: Follow a timeline for the first 72 hours
- Step 4: Write response templates for likely scenarios
- Step 5: Monitor so you hear about it first
- Examples: what a prepared response looks like
- Step 6: Recover and review
- Practice the plan
- A one-page checklist
- Keeping your marketing under control with Soclo
- Perspective
- FAQ
- Sources
What counts as a social media crisis
Not every bad comment is a crisis. One of the most common mistakes is treating a routine complaint like an emergency, which burns your team out. The opposite mistake is shrugging off something that is spreading.
A useful working definition: a crisis is an online event or conversation that poses a serious risk to customer safety, public trust, employees, business operations or regulatory compliance. The difference from routine negative feedback is scope, speed, severity and business impact. A crisis needs coordinated action across several people, reaches a wider audience, or causes consequences beyond the original complaint.
A quick test for your plan: write three columns of examples.
| Level | What it looks like | Who handles it |
|---|---|---|
| Routine | One customer is unhappy with a delivery or a bill | Whoever answers messages, using your usual complaint process |
| Escalation | A complaint is getting shares, or several people report the same problem | Crisis lead is told, a draft reply is prepared |
| Crisis | A safety issue, a viral false claim, a data problem, an offensive post from your account, or a tragedy that makes your scheduled content look tone-deaf | Full crisis team, scheduled posts paused |
For the routine row, you probably already have a process. If not, our guide on how to handle a customer complaint covers it, and the piece on handling enquiries that come in through social media helps you separate everyday messages from the ones that signal trouble.
Why a small business needs a written plan
Crises are not rare. A survey cited by Nextiva reported that 69% of business owners had experienced a social media crisis over the previous five years, and 95% of leaders said their action plans needed improvement. Treat those as survey figures, not a forecast for your business, but the direction is clear: most teams that face a crisis wish they had prepared.
A small team has one real advantage: fewer people means faster decisions, if everyone already knows who decides. It also has one real weakness: the person who posts is often the owner, who may be on a plane, asleep or at a family event when something breaks. The plan exists to cover that gap.
Step 1: Assign roles before anything happens
The PRSA guide recommends a crisis team with roles such as a crisis manager, a PR lead and a social media manager, plus clear escalation protocols. In a business of one to ten people, one person often wears several hats. That is fine, as long as each role has a name next to it.
Write down:
- Crisis lead. Makes the call on what is a crisis and what gets said. The same PRSA guide quotes Richard Long of MHA Consulting, who says the lead should be chosen on ability, not seniority or politics.
- Backup lead. Takes over when the lead is unreachable.
- Publisher. The person with access to the accounts who posts and pauses.
- Approver. Signs off on anything legal, medical, financial or safety-related before it goes out. Larger organizations build this in formally. The Georgia Tech crisis communications plan, for example, has its crisis communications manager ensure that external talking points are approved by the general counsel's office. If you have no in-house lawyer, name the outside adviser you would call.
That Georgia Tech plan also uses a notification hierarchy in tiers, so the right people are told in the right order. You can copy the idea at small scale: a simple call list with a first, second and third person to contact.
Cover nights, weekends and holidays
Crises do not wait for business hours. Your plan should state how accounts are monitored outside them, even if that means one person checking notifications at set times on weekends. Georgia Tech's plan puts the crisis communications manager on call, which is the principle: someone is always the designated person, and everyone knows who.
Also write down where the logins live, who has two-factor access, and what happens if the lead's phone is the one that holds the authentication codes. The review stage later often finds account access problems; fixing them now is cheap.
Step 2: Set triggers and a pause-posting rule
The most overlooked line in any small business plan is the one about scheduled content. A cheerful promotion landing in the middle of a tragedy, a product recall or a viral controversy can turn a manageable problem into a worse one.
The University of Florida's online communication program says one mistake many organizations make is continuing to publish scheduled content during a crisis. Its advice is to pause scheduled content right away, especially anything that could come across as tone-deaf, and to gather information before responding.
Pausing is not the same as going silent. As Rob Glover is quoted in the PRSA guide, people notice when a brand goes quiet. The point is to stop automated content from clashing with your response, then speak deliberately.
A pause rule you can paste into your plan
When the crisis lead declares a crisis, the publisher pauses every scheduled post and every automated queue on every channel within 15 minutes. Only crisis communications go out until the lead lifts the pause in writing.
Then add three lines:
- Who can pause? Anyone on the team who spots a problem should be allowed to pause first and ask questions later.
- Which channels? List every platform, plus any ad campaigns, email sends and website banners that could keep running.
- Who can resume, and on what condition? Usually the lead, after checking each queued post against the current situation, since an item written a week ago may now read badly.
Pausing also applies to events that are not your own crisis. A major disaster or tragedy in the news can make a scheduled joke or sale post look careless. The same rule works: pause, review the queue, resume what still fits.
If you use automation to keep your channels consistent, build the pause into how you set it up. Our guide to safely automating social posting with human review explains why approvals matter, and they matter most when the news changes between the day you scheduled something and the day it publishes.
Step 3: Follow a timeline for the first 72 hours
The CIPR's 2024 Crisis Communication and Social Media Best Practice Guide sets out phases you can adapt:
| Phase | When | What happens |
|---|---|---|
| Initial response | First 1 to 2 hours | Spot it, alert the lead, pause scheduled posts, acknowledge briefly |
| Fact-finding | Next 2 to 4 hours | Find out what actually happened, who is affected, what is true and what is rumor |
| Public response | 4 to 24 hours | Full statement across all channels |
| Monitoring and adjustment | 24 to 72 hours | Watch reactions, answer questions, correct errors |
| Resolution and recovery | After that | Announce the outcome, rebuild trust, review |
The PRSA guide gives a similar rhythm: an initial statement within the first hour, then a detailed response within 24 hours. Audience expectations are not far off. Sprout Social's 2025 Index, as cited by Shopify, found that nearly three in four consumers expect an initial response within 24 hours or sooner.
Prepare a holding statement
You will not have facts in the first hour. A holding statement fills the gap without overreaching. Prepare a fill-in-the-blanks version now:
We are aware of [issue]. We take this seriously and are looking into it now. We will share an update by [time]. If you are affected, please contact us at [channel].
Three rules keep it safe: say only what you know, give a time for the next update, and give affected people somewhere to go. One fashion brand dealing with a viral false claim used a holding statement that did not overreach, and it kept a single shared source-of-truth document so that nobody on the team published contradictory statements. That document habit is worth copying whatever your size: one page, one owner, updated whenever facts change.
What the full statement should contain
For the 4 to 24 hour window, the CIPR guide says to post one statement across all your channels that acknowledges the issue, gives factual information, explains what you are doing, expresses concern for the people affected, and considers whether an apology is appropriate. The tone should be calm, empathetic and professional. It also advises against arguing, getting defensive, or deleting critical comments unless they break your own policies.
Step 4: Write response templates for likely scenarios
Your plan should include drafts for the crises your business is most likely to face. Think about your own risks, not generic ones:
- A product or service failure that affects customers
- A wrong or offensive post going out from your account
- A viral false claim about you
- A staff member or partner in the news for the wrong reasons
- A data or payment problem
- A major world event that makes your planned content inappropriate
For each one, draft a holding statement, the facts you would need to confirm, who must approve, and what you would do with scheduled content. These do not have to be perfect. They need to exist so that the first hour is editing, not writing from scratch.
Also list your "never" items: no arguing in comments, no speculation about cause, no blaming customers, no promotional posts until the lead lifts the pause.
Step 5: Monitor so you hear about it first
A plan is only useful if someone notices the problem. Set up alerts for your brand name, product names and your own handle, and check mentions, tags and direct messages regularly. The PRSA guide mentions real-time monitoring with AI tools as part of preparation. For a small business, even a daily search of your name on each platform and a notification setup on your phone is a real improvement over none.
Write down what counts as an escalation signal: a sudden spike in mentions, the same complaint from several people, a post from a large account, or a reporter's message. When any appears, the monitor tells the lead.
Examples: what a prepared response looks like
Pausing everything. After Delta Connection Flight 4819 had a landing accident in Toronto in February 2025, Delta activated emergency protocols, including halting regular social media activity so as not to look indifferent and to focus on the crisis and on supporting passengers. That is the pause rule at corporate scale.
Keeping people updated. When a Florida high school received an anonymous tip about a potential shooting and bomb threat, the county sheriff's office updated social media every 10 to 15 minutes, even without new information, so that the public knew the situation was being watched. The office's spokesperson said planning ahead was crucial and everybody knew their role. You will probably not need updates that often, but the lesson holds: say when the next update is coming, then deliver it.
Responding in the audience's language. A TikTok video about the clothing rental company Nuuly gained over 8 million views. The company responded within days by using the trend itself, and earned praise for speed and humor, according to RLF Communications' analysis. The lessons it draws: watch the conversation, take a beat to make a game plan, and match your delivery to your audience. Note that humor suits some situations and is a serious mistake in others, such as anything involving harm to people. Your crisis lead decides.
Step 6: Recover and review
The crisis is not over when the comments slow down. The CIPR guide says the reputational and relationship impact can continue long after things appear calm, and that organizations should focus as much on relationships as on reputation.
When it is resolved, the CIPR recommends you:
- Announce the resolution publicly and explain what you did.
- Thank the community for constructive feedback.
- Hold a post-crisis review with your crisis team and update the plan.
- Plan how to rebuild trust, for example with a positive campaign or by offering resolutions and compensation where appropriate.
A review should document gaps, successes and lessons. Multilogin's guide, citing CDC crisis communication guidance, suggests looking specifically at account access problems, approval delays, unanswered questions, inaccurate posts and handoff issues. Those are exactly the failures a small team hits.
Once you are ready to resume normal posting, do it in steps. Review the paused queue, delete or rewrite anything that no longer fits, and restart with useful, low-key content before returning to promotions. If you need help rebuilding a calendar afterward, planning a year of marketing in an afternoon is a good place to restart, and keeping posting when you have no time helps you hold the rhythm once things are calm.
Practice the plan
A plan nobody has rehearsed fails on the day. Richard Long, quoted in the PRSA guide, recommends realistic crisis simulations every six months. For a small team, that can be a 30-minute exercise: the lead reads a scenario, and the team walks through who pauses what, who drafts, who approves and how fast. Time it. Fix whatever slowed you down, whether that is a lost password or an unclear approval step.
A one-page checklist
- Crisis lead, backup, publisher and approver named, with phone numbers
- On-call arrangement for nights and weekends
- List of every account, ad campaign and scheduled queue, and who has access
- Crisis definition with examples at three levels
- Pause rule, including who can pause and who can resume
- Timeline for the first hour, 4 hours, 24 hours and 72 hours
- Holding statement and scenario templates
- Approval path for sensitive claims
- Monitoring setup and escalation signals
- Post-crisis review date and format
- Simulation schedule, twice a year
Keeping your marketing under control with Soclo
A crisis plan works best when your everyday marketing is already organized: one place for content, schedules and approvals, so you know exactly what is queued to publish. Soclo is an AI-driven platform where you describe what you want in plain English and it generates posts, ads and videos in your voice. Soclo Autopilot handles scheduling and posting, and you stay in control of approvals and spending.
If you manage ads across networks, Ads & Ads Watch gives you budget controls in the same app. You can start on the Free plan at £0 per month, and paid plans start with Starter at £7.99 per month; see the pricing page for current plans and credits.
Perspective
Most crisis advice assumes a communications department. Our customers are owners, freelancers and creators who are also the person who posts, answers messages and runs the ads. For them, the biggest crisis risk is not a lack of a clever statement. It is automated content going out while the world has moved on.
That is why we built Soclo around control. You describe a campaign in plain English, the platform creates the content in your voice, and Autopilot keeps the schedule going so consistency does not depend on you being at your desk. You stay the one who approves the content and the spending. We think automation and judgment belong together: let the tool handle the routine, and keep a human decision at the moments that matter.
Our advice is to put your crisis plan next to your content plan. Know what is queued, know who can stop it, and review the queue regularly, not only when something goes wrong. A team that already sees all its scheduled content in one place can act in minutes, which is what the first hour demands.
simeon
FAQ
Should I stop all scheduled posts during a social media crisis?
Yes, pause them as soon as you declare a crisis, especially anything promotional or lighthearted. The University of Florida's program names continuing to publish scheduled content as a common mistake. Pausing is not silence: post a holding statement, then review each queued item before resuming.
How quickly should I respond to a social media crisis?
Aim for a short acknowledgment within the first one to two hours, and a fuller public statement within 24 hours. The CIPR guide's phases and the PRSA guide's timing both point to this. If you have no facts yet, a holding statement that promises a time for the next update is better than silence.
Do I need a crisis plan if I am a one-person business?
Yes, and a short one is enough. Name a backup person you trust, record where your logins are, write your pause rule and draft a holding statement. A solo operator is the person most likely to be unreachable at the wrong moment, so the plan matters more, not less.
How is a crisis different from a bad review or complaint?
A complaint is usually one person and one problem you can fix with your normal process. A crisis involves serious risk to safety, trust, staff, operations or compliance, spreads quickly or widely, and needs several people acting together. When in doubt, tell your crisis lead and let them decide.
Should I delete negative comments?
Generally no. The CIPR guide advises against deleting critical comments unless they violate your policies, and against arguing or getting defensive. Reply calmly with facts and point people to a channel where you can help them directly.
Sources
- Social Media Crisis Management Guide, ICUC Social
- Social Media Crisis Management: Real-Time Response Strategies, PRSA
- Georgia Tech Crisis Coordination and Communications Plan
- Social Media Crisis Communication and Management, University of Florida
- Crisis Communication and Social Media Best Practice Guide, CIPR (2024)
- 7 Strategies to Survive a Social Media Crisis, Nextiva
- How to Build a Social Media Crisis Management Plan, Shopify
- Viral Misinformation Crisis in Fashion, Influencers Time
- In a crisis, speed and clarity are the message, PR Daily
- Nuuly Posts a Crisis Response That Earns Public Praise, RLF Communications
- Social media crisis plan: mistakes to avoid, Multilogin