A workplace violence incident — whether an active threat, an assault, or a situation that forces a lockdown — is the highest-stakes crisis a business leader will ever face. Unlike a data breach or a social media firestorm, there is no time to draft messaging, convene a team, or weigh your options. The decisions you make in the first minutes determine whether your people are safe, whether your organization responds with credibility, and whether your team trusts you in the aftermath.
Before anything else: build the plan in advance
A workplace violence communication plan cannot be written during a crisis. It has to exist before one. The single most important thing a business leader can do is document — in advance — who does what, what gets said, and through which channels, so that when a situation develops, the response is a matter of execution rather than improvisation.
Your plan needs three things at minimum: a designated crisis team with clear roles, an offline copy of every employee's emergency contact information, and pre-approved communication templates ready to activate immediately. Each of those is covered below.
Step 1: Assign your crisis team before you need one
As with all crisis comms plans, three roles are essential.
The Spokesperson
This is the single individual authorized to communicate externally — with media, with families, with the public. One voice. All external inquiries are directed here without exception. If anyone outside the organization asks what is happening, the answer is always the same — "Please contact [Name] at [contact information]."
The Internal Safety Liaison
Typically your HR lead or a senior operations manager, this person is solely responsible for the safety and communication of your staff during an incident.
The Operations Lead
Responsible for pausing all scheduled external communications the moment an incident is confirmed — marketing emails, social media posts, automated campaigns. Nothing damages a brand's credibility during a tragedy faster than a promotional message going out while an incident is actively unfolding. This should be someone's explicit, pre-assigned responsibility.
Step 2: The first minutes — internal alert
In a life-safety event, internal communication takes absolute priority over everything else, including external messaging. Your employees need to know what is happening before anyone else does — and they need clear, specific instructions, not a call for calm.
Use every available channel simultaneously: SMS, email, any internal communication platform your team uses. The message should be brief, directive, and immediate.
The U.S. Department of Homeland Security recommends a three-option response framework for active threat situations: Run. Hide. Fight. — in that order of preference. If your organization has not already trained employees on this framework, that training should be a separate priority alongside your communication plan.
What your internal alert should include:
- A clear statement of what is happening and where
- Specific instructions for employees who are on-site
- Specific instructions for employees who are off-site
- A commitment to provide updates and the channel through which they will come
- A clear instruction not to use the main office phone line
What it should not include: speculation about the cause, unconfirmed details about injuries or casualties, or any language that could escalate panic. Send only what you know to be confirmed.
Step 3: The external holding statement
Within the first hour of a public incident, reporters will be calling, family members will be searching for information, and your organization's social media will begin receiving direct messages and comments. You do not need a complete account of what happened to respond. You need a holding statement — a brief, factual acknowledgment that signals your organization is present, aware, and cooperating with authorities.
Three rules govern the holding statement:
Never speculate
Do not estimate the number of casualties, identify a suspected motive, or characterize what happened beyond what law enforcement has publicly confirmed. Speculation that proves incorrect becomes a second story — and it is a story about your organization getting the facts wrong during a crisis.
Acknowledge and commit to an update
State that you are aware, that emergency services have responded, and that the safety of your people is the organization's only priority. Commit to a specific time for your next update. "We will share additional information at 3:00 PM" is meaningfully more credible than "we will update you when we have more information."
Do not say "no comment"
It reads as evasion and signals to the media that there is something to hide. Instead: "We are working closely with local authorities to gather accurate information and will share a full update at [time]." That is a complete, professional response that says nothing you are not certain of.
Step 4: Managing communication after the immediate threat has passed
Once the immediate danger is resolved and law enforcement has cleared the scene, your communication responsibility shifts from safety to support. This phase is where many organizations lose the credibility they built during the acute response.
Maintain one external voice
Even after the threat has passed, all media inquiries should continue to route through your designated spokesperson. Brief every employee explicitly: "Please direct all media calls to [Name]. Our goal is to ensure that only confirmed, accurate information is shared publicly." This is not about controlling the narrative — it is about preventing well-intentioned employees from sharing unverified details that complicate the record.
Lead with empathy, not operations
The first communication after an incident resolves should be focused entirely on the people affected — employees, families, and the broader community. Operational updates (building closure timelines, return-to-work plans, project continuity) belong in a separate, subsequent communication. Combining them signals that the organization is more concerned with getting back to business than with the wellbeing of its people.
Tailor your message to each audience
Employees, customers, investors, and media contacts each need different information delivered in a different way. Your employees need to know they are supported and what happens next for them. Your clients or partners need to know how their ongoing work is affected and who their point of contact is. Your investors need a factual account of the situation and your response. Draft each communication separately, from scratch, for its intended audience.
Communication templates
Template 1 — Immediate internal alert (SMS or push notification)
URGENT — [Company Name] Emergency Alert
An active threat has been reported at [specific location]. This message is being sent to all employees.
If you are on-site: Follow emergency protocols immediately. Do not use the main office phone line. Await further instructions via this channel.
If you are off-site: Do not come to the building. Stay away from the area and await further instructions via this channel.
Your safety is our only priority. We will provide an update by [time].
[Time sent]
Template 2 — External holding statement (media and public)
Statement from [Company Name]
[Date] | [Time]
We are aware of an incident that occurred today at our [location] at approximately [time]. Emergency personnel and local law enforcement are on the scene, and we are cooperating fully with their response.
The safety of our employees, customers, and visitors is our only priority at this time. We are not in a position to share additional details until they have been confirmed by the appropriate authorities.
We will provide a further update at [specific time]. Media inquiries should be directed to [Name] at [phone number / email address].
Template 3 — Recovery update (employees and families)
Subject: Update from [Company Name] — [Date]
Dear [Team / Families],
I want to provide you with an honest update on where things stand following today's incident at [location].
What we know:
[Confirmed fact one — e.g., law enforcement has cleared the building.]
[Confirmed fact two — e.g., our office will remain closed through the end of the week.]
[Confirmed fact three, if applicable.]Support available to you:
- Grief and trauma counseling: Professional counselors will be available beginning [date] at [location or link]. This is available to all employees and their immediate family members at no cost.
- HR support: [HR Contact Name] is available directly at [contact information] for any immediate questions or concerns.
- Time and flexibility: We recognize that returning to a normal work schedule may not be possible for everyone right away. Please speak with your manager about what you need.
We will continue to share updates as new information is confirmed. Our next communication will go out by [specific time] on [date].
Thank you for the way you have supported one another today.
Sincerely,
[Your Name]
[Your Title]
Step 5: Long-term recovery and follow-through
A workplace violence incident does not end when law enforcement leaves. The reputational, operational, and human impact can extend for months or years. How your organization behaves in the weeks that follow will define how employees, clients, and the broader public remember your response — often more than the response itself.
Follow through on every commitment
If you stated publicly that you would increase security measures, provide counseling, or conduct a full review of your safety protocols, those commitments must be fulfilled and documented. Organizations that make public promises during a crisis and fail to follow through face a second wave of reputational damage that is often worse than the first. Show your team and your community the proof.
Conduct a post-incident review
Within two weeks of the incident, bring your crisis team together to evaluate the response honestly. Which communication channels worked and which did not? Where did the plan hold and where did it fail? What would you do differently? The goal is not to assign blame — it is to improve the plan before you need it again. Document the findings and update your templates accordingly.
The organizations that respond well are not the ones with the largest teams or the biggest budgets. They are the ones that built a plan before anything happened.
CrisisComs lets you build crisis playbooks for scenarios exactly like this — with step-by-step action items, pre-approved message templates, team approval workflows, and a clear record of every communication sent. Your plan is there when you need it, accessible to everyone on your team, even if systems go down.
Start building your plan free →
No agency required.