Crisis Communication Plan for Associations and Nonprofits

At 6:40 p.m. on a Friday, the treasurer of a youth soccer club calls the president: $18,000 is missing from the tournament account, and a parent has already posted about "irregularities" in the club's Facebook group. By 9 p.m. there are 40 comments, two local reporters have sent messages, and four board members have each replied to different parents with different answers. Nothing about the missing money has been decided yet, but the club's credibility is already taking damage.

A crisis communication plan decides, before anything goes wrong, who leads, who speaks, what you say in the first hour, which people hear from you first and how you keep everyone updated. It turns a chaotic evening into a checklist. For clubs, associations, chambers, booster clubs and other member organizations, the plan also has to work when most of the team are volunteers with day jobs.

This guide explains the crisis types member organizations face, the parts of a plan, team roles, holding statements you can adapt, the order in which to notify people, how to handle social media and how to review what happened afterward.

What Counts as a Crisis for a Member Organization

A crisis is any situation that threatens people's safety, members' trust, your finances or your ability to operate, and that needs faster, more coordinated communication than your normal approval process allows. Most organizations will face at least one of these over a decade:

Set severity levels

Not every complaint is a crisis. Defining levels in advance keeps you from overreacting to a bad review or underreacting to a safety issue.

The Parts of a Crisis Communication Plan

A useful plan is short enough to use under stress: usually six to ten pages plus appendices. Keep a printed copy and an offline digital copy with each crisis team member, because the crisis may start with a locked email account.

Include these components:

1. Purpose and activation: what counts as a crisis, the severity levels and who can activate the plan.
2. Crisis team: names, roles, backups and 24/7 phone numbers.
3. Decision rights: who can approve statements quickly, and what the board has delegated in advance.
4. Stakeholder map: every group you may need to reach, with contact lists and channels.
5. Channel access: who can post to the website, send email, update social media and change voicemail, with backup access.
6. Holding statements: pre-approved templates for likely scenarios.
7. Spokesperson and media rules: who speaks publicly and who does not.
8. Legal and notification checklist: authorities, insurer, attorney, regulators and any required notifications.
9. Documentation: a log of decisions, messages and timings.
10. Recovery and review: how you close the crisis and learn from it.

Ready.gov's guidance on crisis communications plans recommends pre-scripting messages as templates with blanks to fill in, and getting them approved in advance so they can be released quickly. That is the core of the plan.

Get advance authority from the board

In a crisis you rarely have time to call a board meeting. Have the board adopt the plan by resolution and delegate authority: for example, the president and executive director together may approve holding statements and updates, while any statement that admits liability, names an individual or commits funds needs the board chair and legal counsel. An executive committee with authority to act between board meetings is useful here. Record the delegation in your meeting minutes.

Build Your Crisis Team

Assign roles, not just people, and give every role a backup.

A small volunteer club can combine these into three roles: a lead (president), a communicator and a liaison who calls affected families. Everyone else agrees not to speak publicly until the lead approves a statement.

Keep the contact sheet current. Review it every quarter and whenever officers change.

Holding Statements You Can Adapt

A holding statement is the first message you release, often within an hour or two, before you know all the facts. Its job is to show that you know, you care, you are acting and you will update people. It buys time without speculation.

Every holding statement should:

• Acknowledge what happened in plain words
• Put people first: safety, care for those affected
• Say what you are doing right now
• Say when and where the next update will come
• Avoid speculation, blame, names of individuals involved, legal conclusions and promises you can't keep

Have your attorney review these templates once in calm times. Then fill in the brackets when you need them.

General holding statement

We are aware of [brief, factual description of the situation] and are taking it seriously. Our first priority is [the safety and well-being of our members / the people affected]. We are [specific actions: working with the venue, reviewing records, cooperating with authorities] and will share an update by [time and date]. Updates will be posted at [web address]. Members with questions can contact [name, role] at [email or phone].

Safety incident at an event or practice

During [event] on [date], [a participant was injured / a medical emergency occurred]. Emergency services responded and [the person is receiving care]. We are in contact with the family and are respecting their privacy. [The event will continue with additional safety measures / The remaining program is canceled.] We will share more information when we can.

Allegation involving a volunteer, coach or staff member

We have received a report concerning [a volunteer / a staff member] and have [removed the person from all activities pending a review / reported the matter to the appropriate authorities]. The safety of [our members / the young people in our programs] comes first. Because the matter is under review, we can't share details, and we ask members not to speculate. Anyone with information or concerns can contact [name] confidentially at [contact].

Financial irregularity

During a review of our accounts, we identified [transactions we cannot yet account for / a discrepancy in the tournament account]. We have [engaged an independent accountant / notified our insurer / contacted law enforcement] and have added controls on all accounts while the review continues. We will report the findings to members by [date].

Data or account incident

On [date], we learned that [our email account / a member list] may have been accessed without authorization. We have [secured the account / engaged a specialist] and are working to understand what information was involved. If your information was affected, we will contact you directly with specific steps. Until then, please be cautious of unexpected messages asking for payment or passwords.

Event cancellation or postponement

We have [canceled / postponed] [event] scheduled for [date] because [reason]. All registrants will receive [a full refund / a credit toward the rescheduled date / the choice of either] by [date]. [The new date is ___ / We will announce a new date by ___.] Questions can go to [contact].

Impersonation or scam warning

A [Facebook page / website] using our name and logo is [selling tickets / asking for donations]. It is not affiliated with us. Our official accounts are [list]. We never ask for payment by [method]. We have reported the account and ask you to do the same.

Notify People in the Right Order

The people most affected should never learn about a crisis from social media or the news. Plan the sequence before you need it. The exact order depends on the situation, especially where safety or legal duties come first.

Tell staff and volunteers before members so they can answer questions consistently. Give them a short script and a list of frequently asked questions; Ready.gov recommends the same for anyone fielding calls.

Reaching members quickly depends on having current contact data and the right segments ready. If you use campai, you can send an update to a saved segment, such as everyone registered for the canceled event or all parents of one team, and check delivery status to see who received it. Our guide to member communication explains how to keep those lists current in calm times.

Know your legal duties

Some crises come with obligations that take priority over communication. These vary by state and situation, so check with an attorney, but know the basics:

• Suspected child abuse or neglect: every state has mandated reporting laws, and who must report differs by state. The Child Welfare Information Gateway's mandated reporting resources link to each state's rules. Report first; communicate second.
• Data breaches: the FTC's Data Breach Response guide notes that all states, the District of Columbia, Puerto Rico and the Virgin Islands have laws requiring notification of certain breaches. The guide also recommends designating one point person for releasing information, posting plain-language answers to top questions on your website and avoiding misleading statements. Our guide to association data security covers prevention.
• Embezzlement or theft at an organization that files Form 990: the Form 990 instructions ask whether the organization became aware during the year of a significant diversion of its assets, and if so, to explain it on Schedule O without naming the person responsible. A diversion counts as significant when the total exceeds the lesser of 5% of gross receipts, 5% of total assets or $250,000. Your accountant can advise on reporting.
• Insurance: most policies require prompt notice of claims or potential claims. Call your insurer before you make public statements about liability.

Cancel or Postpone an Event Without Losing Trust

Event disruptions are the most common crisis for member organizations, and the easiest to plan for. Decide in advance who can call off an event and on what basis: an official weather warning, the venue's decision, a safety threat, the loss of a keynote or a public health directive.

When the decision is made:

1. Stop new registrations immediately so nobody pays for something that won't happen. In campai, that means closing the event's booking page.
2. Decide the offer: full refund, credit toward a future event or renewal, or transfer to a new date. Give people a choice where you can afford it.
3. Notify registrants first, then speakers, sponsors, exhibitors and vendors, then the public.
4. Offer an alternative if one exists: a virtual session, a recording, a smaller gathering.
5. Give a timeframe and a contact: when refunds will arrive, when a new date will be announced and whom to ask.
6. Update every place the event appears, including the website, social posts, partner calendars and pinned posts.

Handle Social Media During a Crisis

Social media is where a crisis usually becomes visible and where it can escalate fastest.

• Pause all scheduled posts the moment the plan is activated. A cheerful sponsor thank-you published in the middle of a crisis looks careless.
• Create one source of truth: a page on your website with time-stamped updates. Link to it from every post, email and reply.
• Post where the questions are. If parents are asking in the club's Facebook group, post the holding statement there and pin it.
• Reply, don't argue. Answer questions with the facts you can share and a link to the update page. Move individual cases to private messages or phone calls.
• Don't delete criticism. Hide or remove only what breaks your published rules: threats, harassment, personal data, spam. Screenshot and log anything you remove.
• Correct misinformation once, calmly, with the facts.
• Ask board members, staff and volunteers not to comment from personal accounts, beyond sharing the official statement.
• Monitor your organization's name, tagged posts and local community groups at set intervals, and log what you see.

If you haven't yet written house rules and a moderation process, our nonprofit social media guide covers both.

Talk to the Media

For a serious crisis in your community, reporters may call within hours. A few rules keep this manageable:

• One spokesperson. Everyone else refers inquiries to that person, politely and every time.
• Three key messages written down before any interview: what happened, what you're doing, what happens next.
• Respect deadlines. Ask for the reporter's deadline and respond before it, even if only with your holding statement.
• Avoid "no comment." Say what you can: "We can't discuss details while the review is underway. What I can tell you is..."
• Assume everything is on the record.
• Never guess. "I don't know yet, and I'll get back to you" is a complete answer.

Relationships with local reporters built before a crisis help; our guide to nonprofit public relations covers that work.

Practice the Plan Once a Year

A plan nobody has used will fail in its first hour. Once a year, run a 60- to 90-minute tabletop exercise: present a realistic scenario to the crisis team, reveal new information every 15 minutes, and have the team decide, draft and sequence messages as if it were real. Good scenarios include a coach accused of misconduct, a hacked email account sending fake invoices to members, or the venue canceling your conference three days out.

Afterward, update the contact sheet, fix gaps in channel access and revise any template that didn't fit.

After the Crisis: Review and Rebuild Trust

When the immediate situation is resolved, close the loop. Send members a final update that explains what happened as far as you can share it, what you have changed and where to direct further questions. If the crisis exposed weak controls, such as one person handling all funds, describe the fix. Our guide to nonprofit board responsibilities covers the oversight duties that prevent repeat problems.

Within two to four weeks, hold an after-action review with the crisis team. Keep it blameless and specific.

Report the review's conclusions to the board, update the plan and record the decisions.

Frequently Asked Questions

What should a crisis communication plan include?

Activation criteria and severity levels, a crisis team with backups, delegated decision rights, a stakeholder map with contact lists, channel access, pre-approved holding statements, spokesperson and media rules, a legal and notification checklist, a documentation log and an after-action review process.

What is a holding statement?

A holding statement is a short first message released before all facts are known. It acknowledges the situation, puts people's safety first, says what you are doing and tells people when to expect the next update, without speculating or assigning blame.

How quickly should an organization respond to a crisis?

Aim to notify directly affected people within hours and to publish a holding statement as soon as it is approved, ideally within the first hour or two of a serious incident becoming public. Speed matters, but accuracy matters more: never publish facts you haven't confirmed.

Who should be the spokesperson in a crisis?

One person with authority and composure, usually the president or executive director, with a trained backup. Everyone else, including board members, refers questions to the spokesperson.

Should we delete negative comments during a crisis?

Generally no. Hide or remove only comments that break your published rules, such as threats, harassment, personal information or spam. Reply to fair criticism with facts and a link to your update page, and document anything you remove.

Do we have to tell members about a data breach?

It depends on what information was involved and on the laws of the states where affected people live. All states have breach notification laws, so involve an attorney quickly. Even when notification isn't legally required, telling affected members what happened and what to watch for usually protects trust.

Next Steps

1. Name your crisis team and a backup for each role this month.
2. Write the contact sheet with 24/7 numbers and store it offline.
3. Have the board adopt the plan and delegate approval authority by resolution.
4. Adapt the holding statements above and have your attorney review them.
5. Confirm channel access: at least two people who can update the website, send email to all members and post on each social account.
6. Schedule a tabletop exercise within the next six months.