← Back to blog

Crisis Message Map: How to Build One Before You Need It

November 8, 2026
Crisis Message Map: How to Build One Before You Need It

A crisis message map is a one-page set of prepared answers to the questions a specific audience will ask when something goes wrong. For each audience and each concern, it holds three key messages and three supporting facts under each. You build it before the crisis, so that when the phones start ringing, your leaders are choosing words from a plan instead of inventing them under pressure.

This guide walks through how to build one, what to put in a message map template, and how to keep the map useful once events start moving.

Markbrownstrategies
Prepare Clear Messages Before a Crisis
Mark Brown Strategies helps organizations prepare tailored crisis communication plans and manage responses when public scrutiny arises.
Explore crisis communications

TL;DR

  • A message map answers one stakeholder question or concern with three key messages, each backed by three supporting facts.
  • Start with the audience, not the message: list who is affected, who is influential, and what each group is likely to ask.
  • Keep the full set of key messages short enough to say aloud in about nine seconds, roughly 27 words, in plain language.
  • Test the draft with subject-matter experts, then with real audience representatives and partners, before anyone speaks publicly.
  • Treat the map as a living document: update it whenever the facts change, and say what is known and what is not.

Table of Contents

What a crisis message map is, and the problem it solves

Think of a crisis as a relay race run in the dark. The baton is the message, and it passes from your CEO to your general counsel to your front-desk staff to a reporter. Every handoff is a chance to drop it. A message map is how you make sure everyone is carrying the same baton.

The EPA describes a message map as a detailed, hierarchical set of answers to anticipated stakeholder questions and concerns in a disaster, crisis, or alarming situation. The same guidance says it brings focus and clarity, builds and maintains trust and credibility, and helps partners speak with one voice.

That last point matters more than most leaders expect. The CDC notes that inconsistent facts or actions across partner organizations increase anxiety and undermine credibility. If your communications lead says one thing, your operations chief says another, and your lawyer says nothing, the audience fills the silence with its own story.

The CDC's Agency for Toxic Substances and Disease Registry frames the benefit practically: a map helps communicators prepare accurate, articulate answers to potential questions before they meet stakeholders. Notice the word "before." The map is a preparation tool first and a response tool second.

Start with the people, not the words

Most first attempts at a message map begin with a blank page and a headline. That is backward. Begin with a list of the people who will care.

The EPA's first construction step is identifying interested, affected, or influential stakeholders. Its examples include the public, health workers, public-health officials, at-risk people, responders, media, businesses, government, and vulnerable populations. For a company, translate that into your own world: customers, employees and their families, regulators, investors, board members, insurers, vendors, local officials, and the reporters who cover your industry.

Then profile each group. The EPA recommends rating stakeholders by their ability to affect outcomes, their credibility with other stakeholders, and their likely stance: apathetic, neutral, supportive, opposed, adversarial, or undecided. A neutral regulator with real power deserves more of your preparation time than a loud but marginal critic.

This profiling step is where interviewing your own people pays off. The staff who answer customer calls, handle complaints, and process claims know which questions come up first. If you want a model for pulling that knowledge out of them, these interview questions that catch gaps show how staged questioning surfaces the exceptions and reasoning that never make it into a written procedure. Those exceptions are often exactly where a crisis question hides.

For a Las Vegas hospitality company, the list might look different than it would for a Phoenix health system or a Salt Lake City university. A casino's stakeholders include gaming regulators and union representatives. A hospital's include patients' families and state health officials. Build your list for your organization, not from a generic template.

Find the questions behind the questions

Once you know the audiences, ask what each will want to know. The EPA describes three kinds: overarching, informational, and challenging questions. Gather them from research, expert input, records, media and social-media monitoring, focus groups, surveys, and community feedback.

You will soon notice repetition. Covello observes that case studies tie most public-health issues to 8 to 15 primary underlying concerns. Dozens of surface questions usually collapse into a handful of real worries: Is it safe? Who is responsible? What are you doing about it? Can I trust you? Will this happen again?

Group your questions into those recurring concerns. Then build a grid with stakeholders down one side and concerns across the top. The EPA's water-security workshop report suggests rating each cell high, medium, low, or not applicable, and using the highest-concern or most crowded cells to decide where your effort goes. You will not write a map for every cell. You will write one for the cells that can hurt you most.

If you want a head start on the journalist side, the CDC publishes a list titled 77 questions commonly asked by journalists during a crisis on its message mapping index. It is written for public-health settings, but the pattern of questions travels well to any industry.

Spotting trouble earlier helps too. Our piece on early warning indicators covers the signals that should prompt you to dust off a map before a story breaks.

Build the map: three messages, three proofs

The structure is simple, and the simplicity is the point. The ATSDR template says to develop three main messages for a question or concern, with three supporting messages for each. The Mississippi State University Extension guide applies the same rule of three to crisis planning.

The standard map has three levels. At the top sit one audience and one concern or question. Beneath that go the key messages. Beneath those go the supporting facts, figures, examples, and sources. The Emergency Communication Preparedness Implementation Kit recommends one map per audience and a separate map per concern, so resist the urge to cram everyone into a single page.

Three-level crisis message map structure

Here is what a message map template should contain, in the order you fill it in. First, the scenario or issue. Second, the stakeholder. Third, the specific question or concern, phrased the way that person would phrase it. Fourth, the three key messages. Fifth, the supporting information for each. The ATSDR also suggests you consider the audience, the purpose, the delivery method, and any action you are asking people to take.

Who should be in the room? Covello recommends a team that includes a subject-matter expert, a communication specialist, a policy or legal expert, and a facilitator. The legal voice matters, and so does the communicator's. Neither should write the map alone.

A quick illustration

The following scenario is invented to show the mechanics. It is not a real client or a real event.

Imagine a regional hotel group learns that a vendor's system exposed some guest booking records. The audience is guests. Their concern: "Is my information at risk?"

The first key message might be: "We found a problem with a vendor's system and have shut it down." The second: "We are contacting every affected guest directly." The third: "Here is what you can do today to protect yourself."

Under the first message, you would place three supporting facts: when the issue was found, what was done to contain it, and who is investigating. Under the second, you would list how guests will be contacted, by when, and through which channel. Under the third, you would list concrete, specific steps and where to get help.

Now the same event needs a different map for employees, whose question is "What do I say when guests call?", and another for regulators, whose question is "When did you know, and what are you required to report?" Same event, different baton for each runner.

Compare that with the common alternative: one long statement written by committee, trying to answer everyone at once. It satisfies no one and gives reporters twenty sentences to quote instead of three.

Keep the messages short enough to be heard

People under stress do not process information well. The CDC notes that people in a crisis have difficulty processing and remembering extensive information, which is why it recommends concise first messages, repetition of the main message, plain language, and positive action steps where feasible.

Covello's guidance puts numbers on it: no more than three key messages, ideally under nine seconds and 27 words for the complete set, written at roughly a sixth- to eighth-grade reading level for the general public. The ATSDR checklist adds that individual sentences should average no more than 10 to 12 words.

That limit feels harsh the first time you try it. Your instinct will be to qualify, explain, and protect. Try this exercise: read each key message aloud and time it. If you run out of breath, cut a clause. The ATSDR checklist also recommends putting the most important information first and last, balancing bad news with constructive statements, avoiding absolutes, and dropping undefined jargon. "We have no evidence of misuse" invites a headline the day evidence appears. "Here is what we know right now" does not.

Tone belongs on the checklist as well. A message can be accurate and still land badly if it sounds cold. Empathy is not decoration; it is part of whether the audience believes you.

Adapt the map to each audience

Plain language is not one language. HHS guidance on culturally and linguistically appropriate crisis communication recommends learning each group's concerns, information barriers, communication preferences, cultural factors, and sources of mistrust, then involving community members and trusted messengers in developing and delivering the message.

In practice, that means asking who your audience actually believes. For employees, it may be their direct supervisor, not the CEO. For a local community, it may be a respected neighbor or a civic leader. For a patient population, it may be a physician. If your map names the messenger as well as the message, you have done more than most organizations do.

HHS also recommends testing drafts and translations with communities for accuracy, clarity, and trustworthiness, and offering plain language along with visual, video, or audio formats for people with limited literacy. Across the Southwest, where many of our clients operate, serving Spanish-speaking audiences well is often a practical requirement, not an extra.

If your organization is in healthcare, our guide to healthcare crisis communications covers the added pressures of patient privacy and clinical accuracy.

Test the map before anyone uses it

A draft is a hypothesis. Covello recommends systematic testing, first by uninvolved subject-matter experts, then by representatives of target audiences and partner organizations, to validate technical accuracy and consistency. The first group catches factual errors. The second catches the sentence that sounds fine in a conference room and alarming on the street.

Testing with partners has a second benefit. Covello notes it helps ensure consistency and coordination, and that maps support consistent messages across channels. That is the relay race again: every runner has seen the baton before race day.

Coordination across departments is also an operational question, not just a wording one. A well-run response needs clear handoffs and a shared source of truth. This three-stage incident response playbook lays out how a security team structures a response in stages, and the same discipline of defined phases and clear owners applies when you decide who approves a message and who delivers it.

Then rehearse. A map that has never been spoken aloud is not ready. Our tabletop exercise scenarios give you nine situations to run your leaders through, with the map open on the table. Covello also recommends using trained spokespeople and staying on prepared messages rather than improvising, and the map can be used to bridge back to your main points during a difficult interview. His Triple-T pattern is to state the three key messages, give the supporting information, then repeat the key messages.

Keep the map alive as facts change

A crisis does not hold still. The map you approved at 9 a.m. may be wrong by 3 p.m. The CDC's guidance is to release confirmed information promptly, validate messages with subject-matter experts, state what is known and unknown, avoid speculation, and update and coordinate messages when facts change.

Assign someone to own version control. If three people hold three versions, you have rebuilt the problem the map was meant to solve. The same CDC guidance recommends monitoring media and social media for misinformation, common concerns, and information gaps, and using feedback and rapid message testing to refine messages for each audience segment. The questions people ask on day two are rarely the ones you planned for on day zero, so add them to the map as they appear.

Afterward, review. Which questions did you not anticipate? Which messages did spokespeople abandon because they did not work? Feed that back into the next version. And when the immediate crisis passes, the map becomes a bridge to the longer work of rebuilding public trust, where credible action matters more than any statement.

A message map is one piece of a larger plan. If you do not yet have that plan, start with our guide to what to include in a crisis communication plan, and see how the map fits within a wider crisis management framework.

Our perspective on message maps

After more than 30 years of advising leaders through difficult moments, I have seen the same pattern repeat. Organizations rarely fail because they lacked words. They fail because the words were written in the middle of the storm, by tired people, with no agreement on who the audience was.

A message map fixes that by moving the hard thinking to a calmer day. But I would add one thing the templates rarely say: a map is only as credible as the actions behind it. Three clean messages and nine supporting facts mean little if the facts are shaky or the organization does not follow through. That is why we pair preparation with real-time response, and why we treat rebuilding trust as part of the work, not an afterthought.

We also lean on a network of experts, because a good map needs a legal voice, a subject-matter voice, and a communicator's voice at the same table. Leaders who build that table before they need it tend to respond with steadiness. Leaders who do not tend to improvise. I would rather you were the first kind.

Mark

Get a map built for your organization

Generic templates get you started, but they cannot tell you which stakeholders matter most in your market or which concerns will surface first in your industry. At Mark Brown Strategies, we build tailored crisis communication plans, run crisis readiness assessments, and support organizations in real time when a situation breaks. Our clients include organizations across California, Nevada, Arizona, and Utah.

Markbrownstrategies

If you want a message map tested against your own scenarios, talk with our team about crisis management and communications. We can also help with reputation management and recovery, corporate communications, and litigation support when your situation calls for it.

FAQ

How many key messages should a crisis message map have?

Three per question or concern, with three supporting facts under each message. Covello recommends no more than three key messages, ideally delivered in under nine seconds and about 27 words in total. Limiting the number makes the messages easier to say, hear, and remember under stress.

What is the difference between a message map and a crisis communication plan?

A crisis communication plan covers the whole system: roles, approvals, channels, contacts, and timing. A message map is one tool inside it, focused on what you will say to a specific audience about a specific concern. You can build a map without a full plan, but the two work best together.

Who should write the message map?

A small team, not one person. Covello recommends a subject-matter expert, a communication specialist, a policy or legal expert, and a facilitator. After drafting, test the map with uninvolved experts and then with representatives of your audiences and partners.

How often should we update our crisis message maps?

Review them on a regular schedule and after any real incident or exercise, and update them during a crisis whenever the facts change. The CDC advises stating what is known and unknown and revising messages as new information arrives. Assign one owner so only one current version exists.

Sources