How Australian Law Firms Can Prepare for a Crisis Before It Happens

Building a Communication Plan That Protects Reputation When It Matters Most

No law firm is immune to a crisis. A high-profile case can suddenly attract unwanted media attention. A cybersecurity incident can expose sensitive client information. An allegation involving a partner can spread across social media before the firm has had time to understand what happened. A regulatory investigation can put years of carefully built reputation under scrutiny.

For law firms, the consequences of a crisis can extend far beyond negative headlines. Clients may question whether their matters are being handled appropriately. Prospective clients may reconsider whether they want to work with the firm. Employees may become concerned about the firm's stability or leadership. Referral partners may seek clarification. In some cases, regulators, courts and professional bodies may also become part of the conversation.

What separates firms that recover quickly from those that experience lasting reputational damage is often not the crisis itself, but how prepared they were to respond.

A well-designed communication plan does not eliminate risk. It gives a firm a framework for communicating accurately, consistently and responsibly when pressure is at its highest. It also helps lawyers avoid making decisions in the middle of a crisis that could create additional legal, ethical or reputational problems.

Identify Likely Risk Scenarios in Advance

The first step in building a crisis communication plan is understanding what could realistically go wrong.

Every firm should identify the situations most likely to affect its reputation, operations and client relationships. These risks will vary considerably depending on the firm's size, practice areas, client base and public profile.

A large litigation practice may face intense scrutiny surrounding a major case or allegations concerning one of its lawyers. A family law firm could face complaints from a dissatisfied client who believes their matter was handled improperly. A conveyancing practice may be more concerned about fraud, financial loss or a data breach. A corporate law firm advising high-profile businesses may encounter media attention connected to a client's regulatory or commercial dispute.

Potential scenarios could include:

A cybersecurity or ransomware incident.
Unauthorized access to confidential client information.
A disgruntled former client making public allegations.
An allegation of professional misconduct.
A conflict-of-interest complaint.
A partner or senior lawyer becoming the subject of an investigation.
A significant court matter attracting media attention.
An employee dispute becoming public.
A regulatory investigation or disciplinary proceeding.
A social media post about the firm going viral.
A journalist requesting comment about a sensitive matter.
A mistake involving confidential or privileged information.

The purpose of this exercise is not to assume that every potential crisis will happen. It is to make sure the firm has considered the most realistic scenarios before it is under pressure.

A generic crisis plan may provide broad guidance, but a firm-specific plan is much more useful. The risks facing a 50-lawyer litigation practice are unlikely to be identical to those facing a small suburban practice specializing in wills and estates.

Once the likely scenarios have been identified, the firm can develop a response framework for each one.

Designate a Single Point of Contact

One of the fastest ways to create confusion during a crisis is to have too many people speaking publicly on behalf of the firm.

Journalists may contact individual lawyers. Clients may ask their usual solicitor for information. Employees may post comments on social media. Partners may have different interpretations of what happened.

Without clear internal rules, the firm can quickly end up with inconsistent messages.

A crisis communication plan should identify a primary spokesperson before an incident occurs. This may be the managing partner, chief executive, senior partner or another lawyer specifically designated by the firm.

A secondary spokesperson should also be identified in case the primary contact is unavailable.

The spokesperson should work closely with the firm's leadership and, where appropriate, its external communications advisers and legal counsel. Their role is not necessarily to answer every question immediately. In some circumstances, the most important responsibility is making sure that the right information is gathered and approved before it is released.

Employees and lawyers should also know where to direct media inquiries.

A simple internal rule can prevent considerable confusion:

If a journalist contacts you about a sensitive matter, do not provide an informal response. Refer the inquiry to the designated spokesperson.

That does not mean lawyers should ignore clients or colleagues. It means external communication should be coordinated so that the firm presents one accurate and consistent position.

Mixed messages, even when well-intentioned, can damage credibility. A statement from one lawyer that later conflicts with a statement from the firm's leadership can become a story in itself.

Prepare Holding Statements in Advance

During the first hours of a crisis, the firm may not know all the facts.

That is normal.

What can create problems is feeling pressured to say something definitive before those facts have been established.

Holding statements can help bridge that gap.

A holding statement is a short initial response that acknowledges the issue without speculating about facts that have not yet been confirmed. It can communicate that the firm is aware of the situation, is taking it seriously and is working to establish the relevant facts.

For example, a firm might use language along the lines of:

"We are aware of the matter and are currently reviewing the circumstances. We take the concerns seriously and are working to establish the relevant facts. We will provide further information when appropriate."

The exact language should be tailored to the circumstances and reviewed in advance.

The objective is not to create a generic statement that can be used for every crisis. It is to establish a starting point that can be adapted quickly.

Firms should consider preparing draft statements for several scenarios, including data breaches, regulatory investigations, allegations against employees or partners and major litigation-related media inquiries.

Having draft language available reduces the temptation to write a statement hastily while senior lawyers are simultaneously dealing with the underlying crisis.

Train Lawyers on What Not to Say

Crisis communication is particularly challenging for law firms because lawyers are accustomed to explaining complex issues, defending positions and providing detailed answers.

Those instincts can sometimes work against effective crisis management.

Confidentiality obligations, legal professional privilege, privacy requirements, professional conduct rules and ongoing court proceedings can all limit what a lawyer can safely disclose.

A lawyer responding to a journalist may believe that providing additional context will make the firm's position clearer. However, even a seemingly harmless comment can potentially reveal confidential information, prejudice proceedings or create an unnecessary dispute about the firm's conduct.

Training should therefore focus not only on what lawyers should say, but also on what they should avoid saying.

Lawyers should understand the importance of:

Not speculating about unconfirmed facts.
Not discussing confidential client information.
Not commenting on privileged communications.
Not criticizing clients, opposing lawyers or judges publicly.
Not making statements about ongoing proceedings without appropriate approval.
Not responding emotionally to criticism on social media.
Not assuming that an "off the record" conversation will remain private.
Not providing personal opinions when speaking about the firm.

The phrase "no comment" also deserves careful consideration.

A blunt "no comment" can sometimes appear evasive, particularly when repeated without explanation. In other circumstances, however, declining to comment may be entirely appropriate.

A more constructive response might explain that the firm cannot comment on a confidential matter or an ongoing proceeding, while making clear that the firm takes its obligations seriously.

The important point is that lawyers should not have to improvise this language during a stressful event.

Move Quickly, But Not Carelessly

One of the most difficult decisions during a crisis is determining how quickly to respond.

There can be pressure to issue a statement immediately, particularly when a story is gaining traction online. Social media can make a developing situation feel urgent even when the underlying facts remain unclear.

At the same time, prolonged silence can create its own problems.

The solution is not necessarily to respond instantly with a complete explanation. Instead, firms should aim to acknowledge the issue promptly while taking the time necessary to establish the facts.

This might mean issuing a short holding statement while a more detailed response is prepared.

The principle should be:

Respond quickly enough to show that the firm is engaged, but carefully enough to ensure that what it says is accurate.

Speed should never come at the expense of accuracy.

A premature statement may later need to be corrected. A correction can attract additional attention and potentially undermine confidence in the firm's original response.

Establish an Internal Approval Process

A crisis communication plan should clearly explain who has authority to approve public statements.

In a small firm, that may involve the managing partner and one senior lawyer. In a larger organization, the process could include the executive team, general counsel, external communications advisers and other specialists.

The plan should establish:

Who gathers the facts.
Who determines what information can be disclosed.
Who drafts the response.
Who reviews it for legal and professional issues.
Who approves the final statement.
Who communicates with employees.
Who communicates with clients.
Who responds to media inquiries.
Who monitors social media and online coverage.

The objective is to eliminate uncertainty.

During a crisis, people should not be asking, "Who is responsible for this?"

They should already know.

Communicate With Employees and Clients

External media coverage is only one part of crisis communication.

Employees and clients can be equally important audiences.

Employees may learn about an incident through social media or news reports before management has formally communicated with them. If the firm provides no internal guidance, speculation can fill the information gap.

A communication plan should therefore include an internal employee message and a process for responding to staff questions.

Clients may require a different approach.

Where a crisis directly affects a client's matter, the firm should consider communicating with that client promptly and explaining what the situation means for them. The appropriate response will depend on the circumstances, confidentiality requirements and legal obligations.

The central principle is simple: People who are directly affected should not have to learn about a significant development involving their legal representation from a news headline.

Monitor the Conversation

A crisis does not end when the first statement is released.

Stories can develop quickly. A journalist may publish new information. A social media post may gain traction. Former clients or employees may begin discussing the matter publicly.

Someone should therefore be responsible for monitoring relevant media coverage and online conversations during an active crisis.

Monitoring allows the firm to identify misinformation, emerging questions and changes in public sentiment.

Not every criticism requires a response. In fact, responding to every social media comment can sometimes make a situation worse.

The purpose of monitoring is to understand what is being said and determine when a response is actually necessary.

Test the Plan Before a Crisis Happens

A crisis plan sitting in a drawer is only marginally better than no plan at all.

The most effective firms test their plans.

Senior lawyers and key staff can conduct tabletop exercises based on realistic scenarios. For example, the firm could simulate a data breach at 8 a.m. on a Monday morning and ask:

Who is notified first?

Who contacts the affected clients?

Who speaks to the media?

Who determines what can legally be disclosed?

What happens if a journalist publishes an allegation before the firm has completed its investigation?

What happens if an employee posts about the incident on social media?

Walking through these questions exposes weaknesses before a real crisis does.

The exercise may reveal that no one knows who has authority to approve a statement, that contact details are out of date or that the firm has no process for communicating with affected clients.

Those are problems that can be fixed when there is no immediate pressure.

Review the Plan Regularly

Crisis communication plans should evolve with the firm.

A merger can change the organization's structure. A new practice area can introduce new risks. A change in leadership may require a new spokesperson. New technology can create additional cybersecurity concerns.

Firms should review their plans periodically and update contact details, scenarios, approval procedures and draft statements.

After any actual incident, the firm should also conduct a post-crisis review.

What worked?

What caused delays?

Were clients adequately informed?

Did employees know what to do?

Did the media response remain consistent?

Were there statements that should have been handled differently?

A candid review can turn a difficult experience into a stronger crisis preparedness strategy.

Reputation Is Built Before the Crisis

The strongest crisis response does not begin when a journalist calls.

It begins months or years earlier, through the firm's reputation, relationships, internal culture and communication practices.

Law firms cannot control every allegation, investigation, data breach or unexpected event. They can control how prepared they are to respond.

A thoughtful communication plan gives lawyers a framework for acting with discipline when emotions are high and information is incomplete. It establishes who speaks, what can be said, how quickly the firm should respond and how clients and employees will be kept informed.

Most importantly, it helps the firm avoid turning one difficult event into a larger reputational problem.

When a crisis arrives, there may be little time to decide what to do.

The firms that have already made those decisions are in a much stronger position to respond with clarity, accuracy and confidence — protecting not only their public reputation, but also the trust of the clients who depend on them.