--- title: "How to Build an Online Reputation Crisis Plan | BRANDprotecto" description: "Prepare roles, escalation levels, approvals and holding statements before an online reputation crisis, act well in the first hour and learn from it afterward." url: https://brandprotecto.com/blog/reputation-crisis-plan updated: 2026-10-28 publisher: BRANDprotecto (info@brandprotecto.com) --- # How to Build an Online Reputation Crisis Plan (With a Template Outline) [Home](https://brandprotecto.com) / [Blog](https://brandprotecto.com/blog) / Brand monitoring Brand monitoring # How to Build an Online Reputation Crisis Plan (With a Template Outline) A practical plan for before, during and after an online reputation crisis, with escalation levels, a first-hour checklist and a template outline you can adapt to your business. By the BRANDprotecto editorial team · Published October 28, 2026 · Last reviewed October 28, 2026 · 6 min read ## In short - Write the plan before you need it: roles, escalation levels, approvals, platform access and contacts. - In the first hour, establish facts, open one internal source of truth and publish a short holding statement only if needed. - Keep public replies consistent, factual and free of personal data. - Never hide legitimate criticism or threaten reviewers; fix the cause instead. - After the incident, review what happened, fix root causes and update the plan. An online reputation crisis plan is a short written document that says who does what when negative attention about your business suddenly spikes: who leads, how issues are escalated, who approves public statements, which platforms to contact and what to say first. Prepare it before you need it, then use it to act quickly, consistently and honestly during an incident. The plan does not need to be long. A few pages that people have actually read beat a binder nobody can find. This guide covers what to prepare, what to do in the first hour, how to handle the following days, and how to learn from the incident. A template outline is at the end. ## What counts as a reputation crisis A single negative review is not a crisis. It belongs in your normal reply routine. A crisis is a situation where the volume, reach or seriousness of attention goes beyond what that routine can handle, for example: - A sudden wave of reviews on one or more profiles, sometimes from people who were never customers. See [what to do about review bombing](https://brandprotecto.com/blog/review-bombing-what-to-do) . - A social media post about your business that spreads widely. - A news story, an inspection result or a legal claim. - A safety incident, a data exposure or an allegation about staff conduct. - An outage or service failure that affects many customers at once. ## Before: roles, escalation and approvals ### Roles Name one person for each role, plus a backup: - **Incident lead:** makes decisions and keeps the timeline. - **Spokesperson:** the only person who speaks for the business publicly. - **Monitoring lead:** watches reviews, social media, search results and news and reports changes. Our guide to [brand monitoring](https://brandprotecto.com/blog/what-is-brand-monitoring) explains what to cover. - **Platform administrator:** has access to every business profile and social account. - **Advisors:** legal, HR, insurance and, if relevant, data protection contacts. - **Location managers:** provide facts from the ground and follow the agreed wording. ### Escalation levels Level Example Who is involved Response 1 Routine Individual negative review or comment Location manager Normal reply process 2 Elevated Several similar complaints, a staff member named, a local post gaining attention Location manager and incident lead Check facts, agreed reply, watch closely 3 Crisis Review wave, viral post, media inquiry, safety, legal or data issue Incident lead, spokesperson, advisors, leadership Full plan, holding statement, regular updates Write your own thresholds. The point is that everyone knows when to stop handling something alone. ### Approval chain Decide who approves which kind of statement and how fast. A Level 2 reply might need only the incident lead. A Level 3 public statement might need the owner and a legal advisor. Agree in advance how long approval may take, so a draft does not sit in an inbox for a day. ## Before: access, statements and contacts ### Platform access Check access now, not on the day of a crisis. Keep a register of who owns and manages each profile, and make sure at least two trusted people have the access they need. On Google Business Profile, owners can add and remove users and remove the profile, while managers can do most other tasks, including replying to reviews and editing business information. Google also notes that new owners and managers must wait 7 days before they can transfer primary ownership, according to its [help on managing owners and managers](https://support.google.com/business/answer/3403100?hl=en) . ### Holding statements Prepare short, pre-approved templates that acknowledge an issue without guessing at facts. Example (illustrative): We are aware of reports about [issue] at [location]. We are looking into it now and will share an update by [time]. If you were affected, please contact us at [contact email or phone] so we can help you directly. ### Contact list List support routes for every platform you use and bookmark them. For Google Business Profile, Google's [guidance for agencies](https://support.google.com/business/answer/9199701?hl=en) recommends filling out the support form completely, adding screenshots or videos with timestamps where possible, not submitting duplicate requests and quoting the case ID when you follow up. Add your lawyer, insurer and any PR contact to the same list. ## The first hour - **Confirm the facts.** What happened, where, when and who is affected. Separate what is confirmed from what is assumed. - **Activate the incident lead** and open one internal document or channel as the single source of truth. All facts, decisions and approved wording go there. - **Pause scheduled posts and ads** that could look careless next to the issue. - **Decide whether to say something now.** If people are asking, a short holding statement is usually better than silence. Say only what you know. - **Protect people and privacy.** Never include customer or staff personal data, health information or internal details in public replies. - **Start an evidence log.** Save links and timestamped screenshots of reviews, posts and articles before anything changes. ## During the incident: replies and statements - **Keep replies consistent.** Use the approved wording from the source-of-truth document, adapted to each person. Our [negative review response examples](https://brandprotecto.com/blog/negative-review-response-examples) help with tone. - **Do not rely on review replies alone.** Google checks replies before they appear; it says this usually takes up to 10 minutes but can sometimes take up to 30 days, in its [help on managing customer reviews](https://support.google.com/business/answer/3474050?hl=en) . Publish your main statement on your own website and channels as well. - **Give updates when you promised.** Even if there is nothing new, say so at the agreed time. ## During the incident: platforms and listings - **Report only what breaks the rules.** Google says review evaluation typically takes several days, that you can track a report in the Reviews Management Tool, and that a review that does not qualify for removal can get a one-time appeal, according to its [help on reporting inappropriate reviews](https://support.google.com/business/answer/4596773?hl=en) . Keep your evidence log ready for that. - **Moderate comments with care.** Hiding spam or abuse is different from hiding criticism. See [how to handle negative comments on social media](https://brandprotecto.com/blog/negative-comments-social-media) . - **Update your listings.** If the incident changes your hours, Google suggests special hours for closures of up to 6 days in a row and marking the business temporarily closed for 7 or more days or an unknown period, in its [help on setting special hours](https://support.google.com/business/answer/6303076?hl=en) . Do not delete or bury legitimate criticism and do not pressure reviewers. In the US, the FTC's rule on reviews bans unfounded legal threats, intimidation and certain other tactics used to prevent or remove negative reviews, as summarized in the [FTC's announcement of the rule](https://www.ftc.gov/news-events/news/press-releases/2024/08/federal-trade-commission-announces-final-rule-banning-fake-reviews-testimonials) and our [guide to the FTC fake reviews rule](https://brandprotecto.com/blog/ftc-fake-reviews-rule) . This article is general information, not legal advice; consult a qualified lawyer in your jurisdiction about your situation. ## After the incident - **Hold a short review** while memories are fresh: timeline, decisions, what worked and what did not. - **Fix the root cause.** If the crisis exposed a real problem, change the process, training or product, and tell customers what changed. - **Measure recovery.** Compare review volume, rating and recurring topics per location for the weeks before and after. Our guide on [how to analyze customer reviews](https://brandprotecto.com/blog/how-to-analyze-customer-reviews) shows a simple method. - **Update the plan.** Adjust thresholds, contacts, templates and access based on what you learned. ## Template outline - Purpose and scope: which brands, locations and channels the plan covers. - Roles and backups, with phone numbers. - Escalation levels with examples. - Approval chain and maximum approval times. - Platform access register: profile, owners, managers, last checked. - Monitoring sources and who watches each. - Holding statement templates. - First-hour checklist. - Reply rules: what to say, what never to say, privacy limits. - Evidence log format. - Platform support routes and external contacts. - Post-incident review template and the date of the next plan review. Review the plan at least once a year and whenever people, locations or platforms change. A short tabletop exercise, walking through one realistic scenario with the team, shows quickly where the gaps are. ## Frequently asked questions ### What should an online reputation crisis plan include? At minimum: named roles with backups, escalation levels with examples, an approval chain with time limits, a register of who has access to each business profile and social account, pre-approved holding statements, a first-hour checklist, reply rules covering privacy, an evidence log format, platform support contacts and a template for the post-incident review. Keep it short enough that people actually read it. ### Should we respond publicly during a reputation crisis? Usually yes, once you know the basic facts. A short holding statement that acknowledges the issue, says what you are doing and when you will update is often better than silence. Say only what is confirmed, never share personal data, and publish the main statement on your own website and channels as well as in individual replies. ### Can we delete negative reviews or comments during a crisis? You cannot delete reviews on platforms such as Google; you can only report reviews that break the platform's rules. On your own channels, hiding spam or abuse is different from hiding legitimate criticism, which usually makes things worse. In the US, the FTC rule on reviews also prohibits threats and intimidation intended to prevent or remove negative reviews. ### How often should we update the crisis plan? Review it at least once a year and after every real incident. Also update it whenever key people leave, new locations open, or you start using new platforms, because outdated contacts and missing profile access are common reasons a plan fails. A short tabletop exercise with one realistic scenario is a practical way to test it. ## Sources - [Manage your Business Profile owners & managers — Google Business Profile Help](https://support.google.com/business/answer/3403100?hl=en) (checked October 28, 2026) - [Overview for agencies — Google Business Profile Help](https://support.google.com/business/answer/9199701?hl=en) (checked October 28, 2026) - [Manage customer reviews — Google Business Profile Help](https://support.google.com/business/answer/3474050?hl=en) (checked October 28, 2026) - [Report inappropriate reviews on your Business Profile — Google Business Profile Help](https://support.google.com/business/answer/4596773?hl=en) (checked October 28, 2026) - [How to set Special hours — Google Business Profile Help](https://support.google.com/business/answer/6303076?hl=en) (checked October 28, 2026) - [Federal Trade Commission Announces Final Rule Banning Fake Reviews and Testimonials — Federal Trade Commission](https://www.ftc.gov/news-events/news/press-releases/2024/08/federal-trade-commission-announces-final-rule-banning-fake-reviews-testimonials) (checked October 28, 2026) Prepared by the BRANDprotecto editorial team with AI assistance and checked against the sources above. Platform rules and laws change: always confirm the current wording at the source. This article is general information, not legal advice. ## See how your business looks online Request a free reputation audit. We look at your Google Business Profile and your Google reviews and email you the summary with your Brand Health Score and the main problem areas within one business day. [Start free audit](https://brandprotecto.com/audit/start) ## Related articles [Brand monitoring Reviews on Apple Maps and Bing Places: What Business Owners Can Manage Apple Maps and Bing show ratings for your business too, but neither works like Google. Here is what you can claim, see, report and fix on each one. November 9, 2026 · 8 min read](https://brandprotecto.com/blog/apple-maps-and-bing-reviews-business-owners) [Brand monitoring How to Get Alerts for New Reviews Across Google, Yelp and Facebook A hands-on setup guide for new-review alerts on Google, Yelp and Facebook, plus a simple routing plan for who sees which alert and how fast they reply. November 5, 2026 · 7 min read](https://brandprotecto.com/blog/review-monitoring-alerts-setup) [Brand monitoring Social Listening vs Brand Monitoring: What's the Difference? Brand monitoring tells you what was just said about you so you can respond. Social listening looks at patterns over time. Here is how they differ and where to start. November 2, 2026 · 7 min read](https://brandprotecto.com/blog/social-listening-vs-brand-monitoring)