The Plan You Need, But You Hope You Never Use

It was a Friday at 4:51 p.m. when the call came in. A mid-market manufacturer, 380 employees, a former contractor had just posted internal Slack messages on Reddit. The CEO was on a plane. The general counsel was at her daughter's recital. The head of HR was already on her second glass of wine. And the COO, the only person in the building with both the authority and the cell numbers to act, did not have a plan.

He had a five-year plan, a quarterly plan, and a Monday morning plan, but he didn’t have the one plan that mattered at 4:51 p.m. on a Friday.

If you’re a COO, build the crisis plan now - while nothing is wrong.

A crisis plan isn't a press release in a drawer. It's the operating system you switch on when the building is figuratively, or literally, on fire. It tells the team what to do, what to say, and who decides. It defines the first 60 minutes, 48 hours, and two weeks after a crisis before it ever occurs. As the COO, you own this - not marketing or legal.

Here's what a real one looks like.

Start with an honest risk map. Pull your leadership team into a room for two hours. Put eight categories on the whiteboard: operational, reputational, regulatory, cyber, personnel, financial, environmental, political. Under each one, force yourselves to name three specific scenarios. Not "data breach." Something like "a former IT contractor posts internal Slack on Reddit at 9 p.m. on a Friday." Then rate each scenario on two axes: how bad it'd be, and how likely. The High-High row gets a written response plan this quarter. The middle gets a one-page playbook. The bottom gets documented and parked. Most of your real exposure lives in the boring middle, which is exactly why most companies miss it.

Name the team before you need them. When the phone rings, the first ten minutes get burned figuring out who's in charge. Buy those minutes back today. You need a crisis lead, almost always the COO. A spokesperson, rarely the same person. A legal liaison. An internal communications lead. A social monitor. A customer-facing lead. Each one gets a card with their responsibilities, their decision authority, and the cell numbers of the other five. Print it. Tape it inside a desk drawer. Email and Slack go down at the worst possible moments. Paper doesn't.

Build the four-phase timeline. Immediate, zero to four hours. Short-term, four to forty-eight. Medium-term, one to two weeks. Recovery, ongoing. For each phase, write specific actions with names and deadlines. "Draft holding statement" is an action. "Manage the narrative" isn't. If you can't assign it to a person and a clock, it's not in the plan.

Pre-write what you can. Draft a generic holding statement today for the three most likely scenarios on your risk map. Three to five sentences. Acknowledges the situation. Signals seriousness. Promises more information. Commits to nothing you're not sure about. Then pre-write the internal email to employees. They should never learn about a company crisis from a screenshot a friend texts them at dinner.

Decide your escalation triggers. What'd cause you to call the CEO at 2 a.m.? What'd cause you to call outside counsel? What'd cause you to call a PR firm and put them on retainer by morning? Write those triggers down now, while you're calm. In the moment, your judgment will be compressed by adrenaline and incomplete information. A pre-agreed trigger list is how good leaders avoid bad calls under pressure.

The objection I hear most: we're too small. We're not a public company. Nobody's going to write about us. That's the same logic that says you don't need a smoke detector because the house hasn't caught fire yet. The smaller the company, the fewer hands available to absorb the shock. The plan matters more, not less.

The companies that handle a crisis well aren't lucky. They aren't media-savvy. They're prepared. They drilled. They had the documents, the roles, and the relationships in place before the phone rang.

A crisis plan is the cheapest insurance policy you'll ever buy. It costs you one afternoon with your leadership team and a folder on a shared drive. The day you open it, it's worth more than every other plan you wrote this year combined.

Put it on this quarter's list. Build it before you need it. Then hope you never do.