{"id":5810,"date":"2025-07-16T12:42:29","date_gmt":"2025-07-16T02:42:29","guid":{"rendered":"https:\/\/insight.thomsonreuters.com.au\/business\/?p=5810"},"modified":"2025-07-16T12:42:30","modified_gmt":"2025-07-16T02:42:30","slug":"how-to-lead-the-narrative-during-a-cyber-crisis","status":"publish","type":"post","link":"https:\/\/insight.thomsonreuters.com.au\/business\/posts\/how-to-lead-the-narrative-during-a-cyber-crisis","title":{"rendered":"How to lead the narrative during a cyber crisis"},"content":{"rendered":"\n

Marina Mara, International Media, Brand, and Reputation Advisor, recently spoke at the Thomson Reuters industry event<\/a> entitled ‘Cybersecurity & Breach Response Bootcamp’ about the critical role executives play in steering the narrative and preserving trust when cyber incidents strike.<\/p>\n\n\n\n

Drawing from two decades of experience in high-stakes communications, Marina shares how to lead the public-facing response with clarity, credibility, and confidence, ensuring that reputational risk doesn\u2019t become a second crisis.<\/p>\n\n\n\n

What is a cyber crisis?<\/h2>\n\n\n\n

A cyber crisis is not merely an IT concern but an executive-level threat with the potential for PR catastrophe. A single breach can erode investor confidence, cause customer attrition, and thrust an entire leadership team into the spotlight. Reputations can crumble at the speed of a tweet.<\/p>\n\n\n\n

CEOs and senior decision-makers can no longer afford to treat cybersecurity as a technical function\u2014it\u2019s a business continuity threat, a trust crisis, and, above all, a reputational reckoning. It\u2019s not a matter of if, but when. And when it happens, your response’s speed, clarity, and strategic precision will define your company\u2019s legacy for years to come.<\/p>\n\n\n\n

The CEO\u2019s role in a cyber crisis<\/h2>\n\n\n\n

A breach doesn\u2019t just expose technical weaknesses; it reveals cracks in leadership. The world isn\u2019t just watching how quickly your IT team patches the system; it\u2019s watching how you, as the face of the company, respond under pressure. The wrong response\u2014or worse, no response\u2014can inflict long-lasting damage. Silence invites speculation, and delay signals instability. Defensiveness raises red flags.<\/p>\n\n\n\n

What you need to remember is that customers expect transparency. Investors demand stability. Regulators require accountability, and in the end, the media will define the narrative\u2014unless you do it first.<\/p>\n\n\n\n

Why many companies fail<\/h2>\n\n\n\n

A cyber crisis is not the time to improvise; it\u2019s a high-stakes stress test for leadership. Yet, too many organisations unravel under pressure due to fragmented messaging, siloed teams, overly legalistic statements, and reactive decision-making that amplifies confusion rather than containing it.<\/p>\n\n\n\n

What often begins as a technical breach quickly metastasises into a reputational crisis, not because of the incident itself, but because of how it\u2019s handled. Inconsistent internal alignment, a lack of pre-approved messaging, and unclear roles lead to paralysis. The result? Public silence, media speculation, and stakeholder mistrust.<\/p>\n\n\n\n

This isn\u2019t just a PR misstep\u2014it\u2019s a reputational time bomb. And in today\u2019s hyper-connected media landscape, the fallout doesn\u2019t stay confined to the IT department; it plays out across newsfeeds, boardrooms, and share prices in real time. The companies that fail aren\u2019t necessarily the ones that get breached\u2014they\u2019re the ones that lose control of the narrative.<\/p>\n\n\n\n

The playbook for reputational survival<\/h2>\n\n\n\n

Contrary to popular belief, crisis communications isn\u2019t about spinning a story; it\u2019s about controlling the narrative before it controls you. The foundation is preparation, not a theoretical document gathering dust, but a living, rehearsed, and leadership-approved plan. Without a plan, even seasoned leadership teams risk hesitation, internal conflict, and reputational freefall.<\/p>\n\n\n\n

In the heat of a breach, clarity doesn\u2019t emerge\u2014 it must already exist.<\/p>\n\n\n\n

Speed is leverage<\/h3>\n\n\n\n

The first 24 hours shape the entire trajectory of the crisis. That doesn’t mean issuing a rushed statement; it means having a high integrity holding message ready to go. Delays create a vacuum, and vacuums are often filled by speculation and misinformation.<\/p>\n\n\n\n

Alignment is non-negotiable<\/h3>\n\n\n\n

In a cyber crisis, disjointed voices from legal, IT, comms, and leadership don\u2019t just create confusion; they undermine trust. Stakeholders expect clarity and cohesion, and anything less signals internal instability.<\/p>\n\n\n\n

Execution beats reaction<\/h3>\n\n\n\n

Crisis-ready leaders don\u2019t scramble; they execute. In the pressure cooker of a cyber breach, instinct isn\u2019t enough. What separates resilience from reputational collapse is a well-rehearsed protocol that\u2019s already been stress-tested behind closed doors. Reaction is emotional. Execution is operational.<\/p>\n\n\n\n

When leaders have clarity on roles, messaging, and next steps, they project stability and control\u2014two critical currencies in a trust crisis. It\u2019s not about thinking fast; it\u2019s about thinking ahead.<\/p>\n\n\n\n

The human element<\/h3>\n\n\n\n

Corporate jargon won\u2019t calm a panicked public. In moments of uncertainty, people want to hear from a strong and reassuring spokesperson with a human voice, not a legal team. We\u2019re seeing a surge in what senior PRs call the \u2018non-apology apology\u2019\u2014a statement that ticks compliance boxes but feels hollow. Often written by committees or lawyers, these responses fail to resonate because they lack ownership and emotional intelligence.<\/p>\n\n\n\n

In addition, many CEOs avoid apologising altogether. They\u2019ll discuss corrective action, but struggle to express genuine remorse, when a well-delivered, authentic apology can demonstrate strength, compassion, and control.<\/p>\n\n\n\n

Deconstructing crisis messaging<\/h3>\n\n\n\n

A cyber crisis involves two simultaneous challenges: the technical fix and the public perception. Often, the latter has the longest-lasting impact.<\/p>\n\n\n\n

Transparency matters<\/h3>\n\n\n\n

Generic statements like \u201cWe take cybersecurity seriously\u201d no longer cut it. Stakeholders need clarity, specificity, and timely updates.<\/p>\n\n\n\n

Framing is everything<\/h3>\n\n\n\n

Compare \u201cWe regret this incident\u201d with \u201cHere\u2019s what we\u2019re doing to protect you.\u201d One is vague, the other builds trust.<\/p>\n\n\n\n

Own your narrative<\/h3>\n\n\n\n

In a vacuum of information, misinformation thrives. The faster and more clearly a CEO steps forward, the more stability they signal.<\/p>\n\n\n\n

Key takeaways:<\/h3>\n\n\n\n