The clock behind the statement

How crisis communication buys time you must actually use

The clacks tower on Treacle Mine Road goes dark at three in the morning. By seven, the Watch patrol cannot reach the overnight duty officer on Filigree Street. By nine, the Guild of Merchants has received no reply to four urgent messages. By noon, the taverns are running their own investigations. The leading theory is plague. The second most popular is a coup. The Unseen University is mentioned frequently, as it tends to be when something goes wrong and nobody has a better explanation. The actual fault is a seized mechanism and one absent operator: three hours of work, if anyone knows where to send the engineer.

Nobody does, because nobody has said anything.

Moist von Lipwig, former confidence trickster and current Postmaster General of Ankh-Morpork, understands something about this situation that the Palace’s more cautious advisors do not. The problem is not the clacks tower. The problem is the story that is forming in the absence of any other story. And a story that has been forming for six hours without competition is very difficult to dislodge with facts.

His first act is to find out what narrative is hardening and tell a better one. Not a false one: the Patrician’s approach to truth is flexible but not broken. A faster one. A statement that acknowledges the failure, names an action, and gives a timeframe. That statement stops the rumour engine for approximately forty-eight hours.

Forty-eight hours. No more.

The mechanism

The press statement in a crisis functions as a time-limited brake on narrative formation. It does not fix the underlying problem. It does not restore trust. It purchases a window of reduced pressure during which a real response can be organised and communicated without competing against an already-hardened story.

The window exists because most people, confronted with an official acknowledgement that something has gone wrong, a named action in response, and a timeframe for resolution, will hold their judgment until the timeframe has elapsed. Not indefinitely: the tolerance is roughly two news cycles, which in a city running on a daily paper and persistent tavern gossip is about two days. Long enough, if used well. The pressure does not disappear during this window; it is suspended. If the timeframe passes without visible action, the suspension ends. What follows is not a return to the pre-statement situation. It is worse. The statement has become a broken promise. The narrative now incorporates both the original failure and the subsequent failure to deliver what was announced. The trust damage compounds.

This is the trap that most organisations fall into: they treat the statement as the response rather than as the opening move of a response. The communications team issues the statement. The crisis is declared managed. The window closes with nothing inside it. The contradiction between what was implied and what was delivered hardens into the dominant account of the incident, and that account is considerably more damaging than the original fault would have been.

The three components

Not every statement buys the window: The mechanism is specific. A statement that actually suspends narrative formation has three components, each of which is necessary and none of which can be substituted.

Acknowledgement without minimisation: The statement must confirm that something has gone wrong, clearly and without qualification. Hedged language (“we are aware of reports suggesting…”), passive constructions that avoid locating responsibility (“it has come to our attention that customers may have experienced…”), or minimising frames (“a minor technical issue affecting a small number of users…”) do not engage the brake. Audiences that have already noticed the failure read the hedge as confirmation that the organisation knows the real situation and is managing disclosure rather than communicating. This is often accurate. It is also the fastest way to convert a recoverable technical failure into a trust crisis.

A named action: The statement must commit to something concrete and verifiable. Not an intention to investigate, not a promise to “take this seriously,” not a reference to ongoing review processes. A specific action, named, that observers can check. The engineer has been dispatched. The affected accounts have been frozen. The supply has been quarantined. Vague commitments to process do not buy time; they invite scrutiny of the process. If no concrete action is yet available, the statement should not be issued until one is.

A defensible timeframe: The statement must say when. This is the component most often omitted, and its omission is fatal to the mechanism. A timeframe is what converts the 48-hour window from a pause in scrutiny into an appointment: the audience is being asked to wait until Thursday for a specific thing to have happened, at which point they will assess whether it did. This is manageable. “We will provide an update as soon as possible” is not a timeframe. It is an invitation to watch constantly and assign significance to every delay.

Remove any of these three components and the statement does not buy time. It fills space. Filling space is not neutral: it consumes the credibility that a properly constructed statement would have spent more productively.

When the brake works

Deutsche Telekom and the BSI (November 2016)

In November 2016, a variant of the Mirai botnet exploited a vulnerability in Deutsche Telekom customer routers and took approximately 900,000 German DSL connections offline. The information void filled immediately on social media: the cause was attributed successively to a cyberattack, to equipment failure, to foreign state actors, and back to a cyberattack, each version spreading faster than the previous one. Deutsche Telekom’s response was slow and technically opaque.

The German Federal Office for Information Security, the BSI, moved differently. Within 48 hours of the incident becoming public, the BSI had issued a clear advisory: it named the vulnerability a flaw in the TR-069 remote management protocol, provided a practical workaround that any router owner could apply immediately, and gave a timeframe for a permanent fix from the router manufacturer. The three components were present. The statement bought Deutsche Telekom the narrative space to manage the remediation without the political situation deteriorating further. The outage ran for three days; the narrative pressure that could have extended well beyond that was contained.

Kaseya VSA Ransomware Attack (July 2021)

Compare this with the Kaseya VSA ransomware attack of July 2021. Several European managed service providers affected by the attack delayed disclosure to their customers for days while conducting internal investigations. The delay was commercially understandable: they wanted to understand the scope before announcing it. What the delay produced was a rumour environment that developed freely in the absence of authoritative information. When disclosures eventually arrived, they reached audiences that had already formed views about what had happened and why, and those views were in most cases less charitable than the facts warranted. The disclosure that would have been news became confirmation of a narrative that had formed without it. The statement that might have bought time arrived after the time had already been spent.

SolarWinds and CISA (December 2020)

In December 2020, the US Cybersecurity and Infrastructure Security Agency issued a public advisory within days of the SolarWinds supply chain compromise becoming known. The advisory did not fix the compromise: organisations that had been affected were still affected. What it did was name the threat with authority, provide practical guidance for organisations assessing their exposure, and establish an official voice before a worse account could dominate. Organisations that followed the guidance quickly were able to limit further damage. The advisory bought the coordination window that made a measured response possible. A delayed advisory, or one that hedged the scope of the compromise, would have allowed the narrative to form along whichever lines the most prominent speculation chose.

When the brake becomes an accelerant

Boeing 737 MAX Crashes (2018-2019)

The Boeing 737 MAX crashes of October 2018 and March 2019 are the most extensively studied recent example of what happens when the initial statement is not supported by subsequent action.

After the Lion Air crash in October 2018, Boeing issued statements emphasising the safety of the aircraft and the existing procedures for handling the Manoeuvring Characteristics Augmentation System. These statements implied that the situation was understood and manageable. They bought a window. The window closed in March 2019 when an Ethiopian Airlines aircraft crashed under conditions closely resembling the Lion Air accident. The narrative that had been suspended returned with the force of retrospective confirmation: not only had the original crash not been adequately addressed, but the statements issued after it had been actively misleading about the degree to which it had been understood. Each subsequent disclosure, each internal document released under litigation, each congressional hearing, extended the compounding damage. The second crash did not merely restart the narrative; it transformed the original statements into evidence. The brake had been applied without anything behind it, and it had failed in the most damaging way possible: by creating a specific promise that could be specifically broken.

Volkswagen Dieselgate (2015)

Volkswagen’s handling of the Dieselgate emissions scandal in 2015 followed the same anatomy. Initial statements that the discrepancy between laboratory and road emissions was a technical calibration issue bought a brief window. When the actual mechanism, software designed to detect and respond to test conditions specifically, became public, the prior statements became exhibits rather than communications. The gap between what had been implied and what was true was wide enough to transform a product scandal into a legitimacy crisis that took years and billions of euros in fines, settlements, and restructuring to partially resolve. The statement that should have opened a window had closed one instead.

The specific failure of “We Take This Seriously”

There is a form of words in corporate and institutional crisis communications that has been deployed so frequently in the absence of meaningful action that it now functions as a negative signal. Audiences with any experience of institutional crisis response have learned that “we take this extremely seriously and are committed to a thorough investigation” is the construction used when no action has yet been agreed and no timeframe is available. It is the placeholder statement. It is issued to satisfy the immediate demand for a response while buying time for the real response to be decided. It does not name an action. It does not give a timeframe. It acknowledges the failure in the most general terms available.

This statement does not buy 48 hours. In an environment where audiences have encountered it many times before, it accelerates scrutiny rather than suspending it. Observers who have seen the construction used as a delay tactic begin watching more closely, not less. The statement meant to buy breathing room consumes the credibility that breathing room requires.

The version that works acknowledges the failure specifically, commits to something verifiable, and says when. This requires having made a decision about what to do before issuing the statement. That is the hard part. The communication is easy. The prior decision is the work.

What Moist Knows

In Ankh-Morpork, Moist von Lipwig is not a particularly honest man. He is, however, a man who understands the difference between managing a narrative and winning an argument. You cannot win an argument with a rumour. You can only arrive before it does.

The statement he issues after the Treacle Mine Road clacks failure does not claim the situation is resolved. It does not promise perfection. It says, in plain language: something broke, we know what it is, the engineer is already there, it will be fixed by this evening. That is the whole statement. It takes ninety seconds to read aloud on the steps of the Palace. By the time the evening edition of the Times is typeset, the story is the repair, not the conspiracy. The window was used.

The thing Moist understands, and that most crisis communicators do not, is that the statement is not the response. It is a commitment to a response, made in public, in specific enough terms that failure to honour it will be visible. The commitment is what buys the time. The follow-through is what determines whether the time was well spent or whether the commitment becomes the new story.

Used without follow-through, the press statement is not a tool of crisis management. It is a promise written into the historical record.