Digital Brand Risk, Crisis, and Resilience

Introduction

A brand’s reputation is an intangible strategic asset, but it is exposed to highly visible and rapidly changing risks. Digital platforms allow customers, employees, activists, journalists, competitors, bots, and malicious actors to influence public interpretations of a brand within minutes. A single complaint may remain local, or it may become a global controversy through algorithmic amplification, influencer commentary, screenshots, and news coverage.

Digital brand risk refers to the possibility that online events, behaviours, technologies, or communications will reduce stakeholder trust, weaken brand associations, disrupt relationships, or create legal and financial consequences. Crisis management is the coordinated process of preparing for, responding to, and learning from events that threaten an organisation’s legitimacy or continuity. Resilience is the capability to absorb disruption, respond effectively, adapt operations, and recover or improve after the event.

For brand managers, crisis management is not limited to writing a public statement. It involves risk sensing, governance, evidence verification, decision rights, stakeholder communication, platform management, employee coordination, customer support, legal compliance, and long-term reputation repair.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain major categories of digital brand risk and their reputational effects.
2. Distinguish an emerging issue, a reputational incident, and a full crisis.
3. Analyse how virality, misinformation, platform algorithms, and stakeholder networks intensify risk.
4. Design a crisis protocol, response team, scenario plan, and holding statement.
5. Evaluate ethical, legal, technological, and governance considerations in crisis communication.
6. Recommend post-crisis recovery and resilience measures.

1. The Nature of Digital Brand Risk

Digital risk is not simply the presence of negative content. It is the interaction between an event, stakeholder interpretation, organisational conduct, and the communication environment. A technically minor incident may become severe if it confirms an existing belief that the organisation is careless or dishonest. Conversely, a serious operational failure may cause less reputational damage when an organisation responds quickly, transparently, and fairly.

A useful conceptual relationship is:

This is a conceptual model, not a validated predictive equation. Event severity concerns actual or potential harm; stakeholder salience concerns the importance and influence of affected groups; amplification potential concerns the likelihood of rapid distribution; and response weakness concerns delay, inconsistency, denial, or lack of corrective action. The model is useful for prioritisation, but the variables are not necessarily measured on identical scales and should not be interpreted as a precise probability.

Issue, incident, and crisis

An issue is a developing concern that may affect stakeholder perceptions but has not yet caused substantial disruption. An incident is a specific event requiring coordinated organisational attention. A crisis is an event or set of events that threatens important stakeholders, organisational legitimacy, operations, or strategic objectives and requires decisions under significant time pressure.

The distinction is managerial rather than purely numerical. A complaint from one customer may be an issue. Evidence that the complaint reflects systematic discrimination may become an incident. National media attention, regulatory investigation, employee protest, and customer withdrawal may constitute a crisis.

Risk categories

2. How Digital Crises Escalate

Digital crises develop through interactions among people, platforms, media, and organisations. Four mechanisms are especially important.

Network amplification

Online information spreads through networks rather than through a linear sequence. A post may be viewed by a small audience, shared by a prominent account, embedded in a news article, and then discussed by employees and customers. Visual content, moral outrage, humour, and personal testimony often travel rapidly because they are easy to understand and emotionally engaging.

Algorithmic visibility

Recommendation and ranking systems may increase the visibility of content that attracts attention or interaction. This does not mean that algorithms always promote false or negative content, but it does mean that emotionally intense material can receive disproportionate exposure. Brand managers cannot assume that the amount of online discussion equals the number of affected customers. They must distinguish reach, engagement, unique individuals, credible allegations, and actual harm.

Context collapse

A message intended for one audience may be interpreted by many others. An employee’s personal post, a humorous advertisement, or an internal communication may be viewed by customers, regulators, investors, and journalists without its original context. Context collapse increases the risk that ambiguous language will be interpreted as insensitive or deceptive.

Trust transfer and confirmation

Stakeholders interpret new information through prior beliefs. If an organisation is already associated with poor labour practices, a new allegation may be believed quickly. If it has a strong record of transparency, stakeholders may allow time for investigation. Reputation therefore acts both as a protective resource and as an accountability standard.

3. Major Threats to Digital Brands

Viral criticism and legitimate complaint

Viral criticism should not automatically be treated as an attack. It may reveal a genuine product defect, inaccessible service, discriminatory experience, or misleading claim. The first managerial task is not to suppress visibility but to assess validity, harm, evidence, and urgency.

A practical triage sequence is:

1. Identify what is being alleged.
2. Preserve the original content and relevant records.
3. Determine whether people face immediate harm.
4. Verify facts with operational, legal, technical, and customer-service teams.
5. Contact affected individuals through an appropriate channel.
6. Decide whether public acknowledgement is required.
7. Correct the underlying problem, not merely the online narrative.

Misinformation and disinformation

Misinformation is false or inaccurate information shared without necessarily intending to cause harm. Disinformation is false or manipulated information distributed deliberately to deceive or damage. The distinction may be difficult to establish in real time, so response teams should focus first on the content’s consequences and evidential status.

Effective responses avoid repeating false claims unnecessarily. They identify the specific falsehood, provide verifiable evidence, explain what is known and unknown, and direct stakeholders to an authoritative source. Overconfident claims can create a second crisis if later evidence changes.

Impersonation and counterfeit activity

Fake social-media profiles, fraudulent customer-support accounts, counterfeit websites, and phishing messages exploit brand recognition. They can cause direct financial loss and make victims blame the legitimate brand. Prevention includes verified account information, domain monitoring, staff training, reporting procedures, and prominent warnings about official communication channels.

A response should coordinate platform reports, cybersecurity investigation, customer notification, law-enforcement or regulatory engagement where appropriate, and search visibility for accurate instructions. It should not expose victims’ personal information while attempting to prove authenticity.

Cyber incidents and data breaches

Cyber incidents create both technical and reputational challenges. A data breach may involve personal information, payment data, credentials, confidential business information, or operational systems. The organisation must establish facts before making public claims, but investigation must not become an excuse for avoidable delay.

Crisis communication should be aligned with incident-response and privacy teams. It should state what happened, when it was detected, what information may be involved, what protective steps people should take, and how to obtain support. Applicable data-protection and breach-notification requirements vary by jurisdiction; legal counsel and competent authorities must be consulted.

Deepfakes and synthetic media

Deepfakes are artificially generated or manipulated audio, video, or images that can make a person appear to say or do something that did not occur. A convincing fake can create market confusion, trigger public outrage, or undermine trust in authentic evidence.

Verification should consider source history, file provenance, timing, inconsistencies in speech or imagery, independent eyewitness evidence, and technical analysis. However, technical detection tools are imperfect and may produce false positives or negatives. The organisation should communicate the evidential basis for its assessment and avoid making unsupported claims about the identity or motives of the creator.

Preventive measures include executive media protocols, secure publication channels, watermarking or provenance systems where appropriate, rapid access to authentic reference material, and employee awareness training. The deeper social problem is the “liar’s dividend”: once synthetic media is common, genuine evidence may also be dismissed as fake.

Employee misconduct and internal culture

Employees can create reputational risk through harassment, discrimination, corruption, unsafe conduct, abuse of customer data, or public statements that conflict with organisational values. A response that focuses only on removing the employee may appear performative if the organisation ignores structural causes.

The organisation should protect complainants from retaliation, preserve evidence, ensure procedural fairness, and investigate independently where appropriate. Public statements should respect privacy and employment law. Brand management must not replace human-resources, safeguarding, compliance, or legal processes.

Brand safety failures

Brand safety concerns arise when an advertisement appears beside content involving hate, extremism, graphic violence, misinformation, or other material inconsistent with the brand’s values. The issue may result from automated placement, weak supplier controls, or inadequate exclusions.

A responsible response includes pausing or adjusting placements where necessary, investigating the media supply chain, reviewing suitability standards, communicating with affected partners, and reporting corrective actions. Brand safety is not identical to brand suitability: a placement may be technically lawful but still inappropriate for a particular brand or audience.

4. Crisis Governance and the Response Team

Crisis response fails when responsibility is unclear. A crisis protocol should identify who can detect, classify, escalate, approve, communicate, investigate, and close an incident.

A cross-functional crisis team commonly includes:

• Crisis lead: coordinates decisions, records actions, and maintains the operating rhythm.
• Brand or communications lead: develops stakeholder messaging and media responses.
• Legal and compliance lead: assesses liability, disclosure obligations, evidence preservation, and privacy.
• Cybersecurity or technical lead: investigates digital compromise and containment.
• Operations lead: addresses products, services, logistics, and customer impact.
• Human-resources lead: manages employee conduct, welfare, and due process.
• Customer-experience lead: coordinates support scripts, refunds, complaints, and vulnerable customers.
• Executive decision-maker: approves major trade-offs and accepts accountability.

The team should operate with a documented incident log, secure communication channel, decision register, approval matrix, media protocol, and escalation thresholds. A small organisation may combine roles, but it should not eliminate the functions.

Detection and escalation

Monitoring should combine automated alerts with human judgement. Useful signals include unusual increases in mentions, repeated allegations, employee reports, customer-support patterns, regulatory contact, suspicious account activity, and changes in sentiment or search behaviour. Sentiment analysis is only an indicator; sarcasm, coordinated activity, cultural differences, and false positives limit its reliability.

Escalation criteria may include immediate safety risk, personal-data exposure, legal or regulatory significance, involvement of vulnerable groups, executive or employee misconduct, rapid cross-platform spread, credible evidence of systemic failure, or sustained mainstream-media attention.

Figure: The digital brand crisis management cycle. Resilience is continuous rather than limited to the moment of public response.

5. Scenario Planning and Crisis Protocols

A scenario plan converts general concern into rehearsable action. It should describe plausible events, warning signals, affected stakeholders, first decisions, communication needs, operational dependencies, and recovery criteria.

A useful scenario template includes:

Scenarios should include cyber compromise, product safety failure, employee misconduct, deepfake content, impersonation, discriminatory service, misinformation, and advertising adjacency. Tabletop exercises should test ambiguity rather than merely rehearse ideal performance. For example, teams may be given incomplete evidence, conflicting stakeholder demands, or a second false allegation during the first response.

Holding statements

A holding statement is a short, initial communication issued before a full investigation is complete. It should acknowledge awareness, demonstrate concern, state what is being verified, identify immediate protective action, and promise a clear update. It should not speculate, assign blame without evidence, minimise harm, or promise a result that has not been authorised.

A generic structure is:

“We are aware of reports concerning [issue]. We are investigating urgently and have [immediate protective action]. The safety and privacy of [affected stakeholders] are our priority. We will share verified information through [channel] as soon as it is available. Customers needing support should contact [support route].”

The wording must be adapted to the event. A data incident requires practical protective instructions; a product safety matter may require a stop-use or recall instruction; an employee allegation requires care for affected people and respect for due process.

6. Response Principles and Communication Choices

Protect people before protecting image

The first priority is preventing or reducing harm. If a product is unsafe, the organisation should act before defending the brand. If personal data is exposed, support and containment matter more than favourable headlines. Reputation is more likely to recover when stakeholder welfare is visibly prioritised.

Be fast, but not reckless

Speed matters because silence creates an information vacuum. Accuracy matters because a false denial damages credibility and may create legal exposure. The practical objective is not to publish every fact immediately, but to communicate verified facts, uncertainty, actions, and next update times.

Match the response to the evidence

Organisations should distinguish verified fact, preliminary assessment, allegation, and speculation. This distinction supports credibility and reduces the risk of amplifying harmful falsehoods. Corrections should be specific, accessible, and repeated through channels used by affected stakeholders.

Use appropriate channels

A public post may be suitable for broad awareness, but it cannot replace direct support for affected customers. A regulatory notification, employee briefing, press conference, website notice, customer email, and platform report serve different purposes. Channel selection should consider accessibility, privacy, urgency, language, and the risk of further exposure.

Demonstrate accountability

An apology is credible when it identifies the harm, accepts responsibility where appropriate, explains corrective action, and provides remedy. “We are sorry you feel this way” often appears to avoid responsibility. Conversely, an organisation should not make legal admissions or blame individuals before facts are established. Accountability requires both moral seriousness and procedural discipline.

7. An Illustrative Case: The Deepfake Executive Announcement

Background

This fictional case concerns Northstar Mobility, a regional electric-scooter company. The brand’s chief executive is known for short online product announcements. During a weekend, a realistic video appears showing the executive announcing that the company’s scooters contain a battery defect and will be recalled immediately. The video spreads across social platforms and is reported by two technology blogs.

Problem

Customers begin returning products, retailers pause orders, and investors ask whether the company concealed a safety problem. The executive is travelling and unavailable for several hours. The video uses authentic office backgrounds and a convincing voice. At the same time, a separate customer complaint about battery overheating is circulating.

Analysis

The incident combines synthetic media, a potentially genuine safety allegation, financial risk, and a leadership-availability problem. The company cannot dismiss the video merely because it appears manipulated. It must investigate the underlying safety claim independently. The most urgent questions are whether there is an immediate hazard, whether the video originated from a compromised account, and how to provide trusted information.

Approach and solution

Northstar activates its crisis team. The technical team verifies that the executive’s official account was not compromised and analyses the video’s provenance. Operations and engineering review incident reports and identify one isolated overheating event under investigation. Legal and compliance teams assess notification requirements. Customer service receives a temporary script instructing customers to stop using a device only if they observe specified warning signs, while directing all customers to the official safety page.

The company publishes a holding statement stating that the circulating video is not an authorised company announcement, that a separate battery report is being investigated, and that customers should rely on the official website and support line. It does not claim that the video is definitively generated by artificial intelligence until evidence is sufficient. The company later publishes an authentic video, a technical update, retailer guidance, and a timetable for the investigation.

Outcome

The investigation determines that the video was manipulated and that the isolated overheating case resulted from unauthorised modification. Northstar nevertheless changes its charging instructions, offers inspections to affected customers, improves executive account security, and establishes a verified emergency-announcement page. Some short-term sales are lost, but the company avoids a broader loss of trust by treating the underlying safety concern seriously.

Learning points

1. Synthetic media should trigger verification, not automatic dismissal.
2. A false communication may coexist with a genuine operational issue.
3. Official channels and executive authentication procedures are resilience assets.
4. Stakeholders need practical instructions, not only a denial.
5. Recovery depends on corrective action and evidence, not message volume.

8. Post-Crisis Recovery and Resilience

Crisis closure should not be declared merely because online mentions decline. Recovery involves restoring safety, service, trust, and organisational capability.

Immediate recovery

The organisation should continue customer support, refunds or remediation where appropriate, employee assistance, regulator engagement, and regular updates. It should correct inaccurate information without repeatedly exposing sensitive details. Search results, FAQs, help pages, and support scripts should remain aligned.

Organisational learning

A post-incident review should examine:

• What was detected and when?
• Which assumptions proved wrong?
• Were decision rights clear?
• Did any team delay escalation?
• Were vulnerable stakeholders adequately supported?
• Did monitoring distinguish genuine concern from coordinated manipulation?
• Were legal, privacy, and ethical obligations met?
• Which controls, training, suppliers, or policies require change?

The review should avoid scapegoating. Individual accountability may be necessary, but systemic learning is essential.

Reputation repair

Reputation repair is demonstrated over time through consistent conduct. Measures may include independent audits, product improvements, compensation, leadership changes, transparent progress reporting, community engagement, and credible third-party validation. Advertising alone rarely repairs a trust failure caused by operational misconduct.

Brand managers can monitor recovery using a balanced set of indicators: complaint resolution time, repeat incidents, customer retention, trust research, employee confidence, media framing, support satisfaction, regulatory outcomes, and completion of corrective actions. These measures should be interpreted carefully because public sentiment is not a direct measure of truth or harm.

Building resilience

Resilient brands develop capabilities before crisis occurs. These include:

• clear values translated into operational standards;
• strong privacy, cybersecurity, and access controls;
• verified official channels;
• media and social-media training;
• supplier and advertising-platform governance;
• accessible complaint and whistleblowing systems;
• scenario exercises and after-action reviews;
• crisis budgets and delegated authority;
• relationships with regulators, experts, communities, and journalists;
• a culture that rewards early escalation rather than concealment.

9. Ethical, Legal, and Governance Considerations

Digital crisis management creates ethical tensions. Organisations may wish to monitor employees, remove criticism, identify anonymous accounts, or use automated systems to detect threats. Such actions can threaten privacy, freedom of expression, due process, and legitimate whistleblowing.

Monitoring should have a defined purpose, lawful basis where required, proportionality, access controls, retention limits, and human oversight. Brand managers should distinguish criticism from abuse and should not label inconvenient but legitimate reporting as misinformation. Content removal requests should be evidence-based and directed through appropriate platform or legal processes.

Personal-data incidents require special care. Public statements should provide useful information without disclosing additional personal data. Organisations must coordinate with privacy officers and competent authorities, and they should follow applicable data-protection, consumer-protection, employment, advertising, and sector-specific laws.

Artificial intelligence introduces further governance concerns. Automated sentiment tools, deepfake detectors, chatbots, and content-generation systems can accelerate response, but they may hallucinate facts, reproduce bias, expose confidential information, or generate inappropriate language. Human approval is essential for high-impact statements. Crisis teams should maintain records of evidence, model outputs, decisions, and corrections.

10. Professional Application: A Crisis Readiness Audit

Students or practitioners can assess a brand using the following audit questions:

1. Can the organisation identify its highest-impact digital risks?
2. Are monitoring responsibilities assigned across time zones and platforms?
3. Is there a current contact list for crisis-team members and alternates?
4. Are escalation thresholds written and understood?
5. Can the organisation publish an authenticated emergency notice?
6. Are customer-support teams prepared with accurate, accessible guidance?
7. Can cybersecurity, legal, privacy, communications, and operations work together securely?
8. Have deepfake, impersonation, employee misconduct, and brand-safety scenarios been rehearsed?
9. Are vulnerable stakeholders included in planning?
10. Does the organisation measure corrective action after an incident?

The audit should result in prioritised improvements, not a compliance document that is never used. A strong protocol is short enough to apply under pressure, detailed enough to prevent confusion, and flexible enough to accommodate uncertainty.

Challenges and Limitations

No crisis framework can eliminate uncertainty. Early information may be incomplete, manipulated, or contradictory. Public attention may shift faster than investigations. Stakeholders may demand immediate answers that cannot responsibly be provided. A transparent statement may be interpreted as an admission, while a cautious statement may be interpreted as evasion.

Monitoring tools also have limitations. Automated sentiment classification may misread irony or multilingual content. Engagement counts may include bots, duplicate posts, or low-relevance audiences. Detection systems may over-identify deepfakes or miss sophisticated manipulation. For these reasons, professional judgement, independent verification, and stakeholder dialogue remain necessary.

Finally, reputation is not fully controllable. Organisations can influence their conduct and communication, but they cannot dictate how people interpret events. Resilience therefore depends less on controlling every message than on earning trust through consistent behaviour, accountability, and preparedness.

Chapter Summary

Digital brand risk includes viral criticism, misinformation, impersonation, cyber incidents, deepfakes, employee misconduct, operational failures, and brand safety problems. A crisis develops when an event threatens stakeholders, legitimacy, operations, or strategic objectives and demands coordinated decisions under pressure.

Effective crisis management begins with detection, verification, triage, and clear governance. Cross-functional teams should include communications, legal, technical, operational, human-resources, customer-experience, and executive functions. Scenario plans, escalation thresholds, secure decision logs, and holding statements improve readiness. Communication should be rapid but accurate, evidence-based, empathetic, channel-appropriate, and focused on protecting people.

Deepfakes and misinformation require careful verification rather than automatic dismissal. Cyber and privacy incidents require close coordination with technical and legal specialists. Employee misconduct and brand safety failures must be addressed as governance and operational issues, not merely as public-relations problems. Post-crisis recovery requires remedy, transparent progress, independent learning, and measurable changes. Resilient brands build capabilities before crises occur and treat reputation as a consequence of trustworthy conduct rather than a substitute for it.

Key Terms

Digital brand risk: The possibility that online events or behaviours will damage trust, legitimacy, relationships, or business performance.

Reputational crisis: An event that seriously threatens stakeholder trust, organisational legitimacy, or strategic objectives.

Viral criticism: Negative commentary that spreads rapidly through digital networks.

Misinformation: False or inaccurate information shared without necessarily intending harm.

Disinformation: False or manipulated information deliberately distributed to deceive or cause harm.

Impersonation: The unauthorised representation of a brand, employee, or executive online.

Cyber incident: An event involving unauthorised access, disruption, compromise, or misuse of digital systems or data.

Deepfake: AI-generated or manipulated audio, video, or imagery that falsely represents a person or event.

Brand safety: The protection of a brand from appearing beside harmful, offensive, or unsuitable content.

Context collapse: The convergence of different audiences and interpretations around one message.

Crisis protocol: A documented procedure defining roles, actions, escalation, and communication during a crisis.

Holding statement: An initial, limited public message issued while facts are still being verified.

Scenario planning: The structured preparation for plausible future events and response requirements.

Escalation threshold: A defined condition requiring greater authority, resources, or coordination.

Stakeholder salience: The relative importance and influence of a stakeholder in a particular situation.

Resilience: The capability to absorb disruption, respond, adapt, and recover.

Post-incident review: A structured examination of what happened, how decisions were made, and what must improve.

Liar’s dividend: The ability of people responsible for genuine evidence to dismiss it as fabricated because synthetic media is widespread.

Review Questions

Short Answer Questions

1. Distinguish an issue, an incident, and a crisis.
2. What is the difference between misinformation and disinformation?
3. Identify four functions that should be represented on a digital crisis team.
4. What purposes does a holding statement serve?
5. Why should a deepfake allegation not automatically be dismissed?

Long Answer Questions

1. Explain how network amplification, algorithms, context collapse, and prior reputation can intensify a digital brand crisis.
2. Discuss the main reputational and governance risks associated with a data breach.
3. Design a crisis protocol for a brand facing impersonation and fraudulent customer-support accounts.
4. Evaluate the ethical limits of monitoring online criticism and employee activity.
5. Explain why post-crisis recovery requires operational reform rather than advertising alone.

Analytical / Application Questions

1. A restaurant chain receives a viral video alleging discriminatory treatment. The video is incomplete, employees provide conflicting accounts, and an activist group calls for a boycott. Classify the immediate risks, identify the first five actions, and draft a suitable holding statement.
2. A fashion brand’s advertisement appears beside extremist content because of automated placement. Analyse the responsibilities of the brand, agency, and platform, and recommend a recovery plan.
3. An apparently authentic executive video announces a product recall, but the organisation suspects a deepfake while a genuine safety complaint is also under investigation. Apply the chapter’s framework to develop a response-team structure, evidence plan, stakeholder communication plan, and recovery measures.

Multiple Choice Questions with Answers

Question 1

Which condition most clearly distinguishes a crisis from a routine online complaint?

A. The complaint uses negative language

B. The complaint is posted on a social platform

C. The event threatens important stakeholders or organisational legitimacy and requires coordinated decisions

D. The complaint receives at least one reply

Correct Answer: C. The event threatens important stakeholders or organisational legitimacy and requires coordinated decisions

Question 2

What is the primary purpose of a holding statement?

A. To provide every detail of the completed investigation

B. To acknowledge the issue, state verified action, and communicate what happens next

C. To blame an individual before evidence is established

D. To prevent all discussion of the event

Correct Answer: B. To acknowledge the issue, state verified action, and communicate what happens next

Question 3

Which response is most appropriate when a brand discovers a possible data breach?

A. Delete all online comments about the incident

B. Publish an unverified estimate of affected people

C. Coordinate technical, legal, privacy, and communication responses while investigating and protecting stakeholders

D. Wait until media coverage ends before taking action

Correct Answer: C. Coordinate technical, legal, privacy, and communication responses while investigating and protecting stakeholders

Question 4

What is disinformation?

A. Any negative opinion about a brand

B. False or manipulated information deliberately distributed to deceive or cause harm

C. Accurate information shared privately

D. A technical system outage

Correct Answer: B. False or manipulated information deliberately distributed to deceive or cause harm

Question 5

Why should a brand investigate the underlying allegation in a suspected deepfake case?

A. Synthetic media can never contain any genuine issue

B. A manipulated communication may coexist with a real operational or safety problem

C. The brand must accept every online claim as true

D. Deepfake detection tools are always conclusive

Correct Answer: B. A manipulated communication may coexist with a real operational or safety problem

Question 6

Which role is primarily responsible for coordinating crisis decisions and maintaining the action record?

A. Crisis lead

B. Graphic designer

C. Influencer manager

D. External customer

Correct Answer: A. Crisis lead

Question 7

Which action best demonstrates post-crisis resilience?

A. Increasing advertising frequency without changing operations

B. Removing all criticism from company channels

C. Conducting an after-action review and implementing verified corrective measures

D. Changing the brand colours

Correct Answer: C. Conducting an after-action review and implementing verified corrective measures

Question 8

A fake customer-support account is directing users to a phishing website. What should the legitimate brand prioritise?

A. Ignoring the account to avoid giving it attention

B. Coordinating platform reporting, cybersecurity investigation, and clear customer warnings

C. Publishing victims’ names to prove the fraud

D. Offering unrelated promotional discounts

Correct Answer: B. Coordinating platform reporting, cybersecurity investigation, and clear customer warnings

Question 9

Which statement about sentiment analysis is most accurate?

A. It directly measures the truth of an allegation

B. It replaces human judgement in every crisis

C. It is an indicator that may be affected by sarcasm, bots, and false positives

D. It measures actual financial loss with certainty

Correct Answer: C. It is an indicator that may be affected by sarcasm, bots, and false positives

Question 10

Which principle should guide communication during an uncertain crisis?

A. Publish speculation quickly to appear confident

B. Communicate verified facts, explain uncertainty, and provide practical protective guidance

C. Deny all allegations until every investigation is complete

D. Use the same message for every stakeholder and channel

Correct Answer: B. Communicate verified facts, explain uncertainty, and provide practical protective guidance