A risk communication strategy is your plan for telling the people affected by a hazard what is happening, what it means for them and what they can do about it, before and during the moment it matters. The goal is not to look calm. The goal is to give people what they need to make their own sound decisions. The US EPA says risk communication should be meaningful, understandable and actionable, and that is a good test for every message you write.
This guide walks through how to build that strategy, how to talk about what you don't yet know, and how real agencies have done it well. The examples come from public agencies, but the discipline applies equally to a casino, a hospital, a law firm or a nonprofit.
TL;DR
- Risk communication is a two-way exchange, not a press statement. Listen to your audiences first, then decide what to say.
- Build the strategy before you need it: goals, audiences, a spokesperson, pre-approved messages and answers to the toughest questions.
- Say what is known, what is unknown and when the next update will come. Silence and spin both do more damage than an honest, incomplete answer.
- Keep messages short, specific and repeatable, and tell people exactly what to do.
- Measure whether the message reached people and helped them. Revise.
Table of Contents
- What a Risk Communication Strategy Actually Is
- Start With the Audience, Not the Message
- Build the Plan Before You Need It
- Anatomy of a Message That Works
- Communicating Uncertainty Without Losing Trust
- Risk Communication Examples Worth Studying
- How to Tell Whether It Is Working
- Our Perspective
- Putting This to Work With Mark Brown Strategies
- FAQ
- Sources
What a Risk Communication Strategy Actually Is
The World Health Organization describes risk communication as the real-time exchange of information, advice and opinions between experts or officials and the people who face a hazard. Two words in that definition deserve attention: exchange and real-time. The exchange means you are not only broadcasting. The real-time part means the strategy has to work while facts are still changing.
The EPA's SALT framework gives a useful shape to the planning side. Strategic risk communication means taking stock of what you already know, setting goals that fit your organization's mission, and then matching specific platforms and tactics to those goals. In plain terms: know your starting point, decide what success looks like, then pick the channels.
Public Health Ontario adds a point many corporate teams miss. Effective risk communication is iterative and planning-based. It builds understanding and credibility, and it promotes the right level of concern, neither panic nor shrugging. You will not write it once and file it.
Risk communication versus crisis communication
The two overlap, but they are not the same job. Risk communication often starts earlier, when a threat is possible but has not yet landed: a pending regulatory finding, a product concern, a data vulnerability, a construction project that worries the neighbors. Crisis communication takes over when the event is under way. A good strategy treats them as one continuum. If you already have a crisis plan, this is the layer that sits underneath it, and our guide to what to include in a crisis communication plan covers the response side in more depth.
Start With the Audience, Not the Message
Most weak risk communication fails before a word is written, because someone assumed they knew what people were worried about. University of Florida researchers stress that because risk communication is two-way, organizations have to listen rather than assume, and they have to acknowledge people's emotions explicitly.
An EPA guide on air pollution makes the same point from another angle: different audiences arrive with different levels of understanding, so a good communicator is first a good listener, working out what is relevant to them before deciding how to present it.
In practice, map your audiences by what they are afraid of losing. Customers worry about safety and money. Employees worry about their jobs and what to tell their families. Regulators want evidence of control. Neighbors want to know whether to stay or go. Investors want to know whether the problem is contained. One set of facts, several different messages.
Questions to ask about each audience
Who are they, and who do they already trust? What do they believe about us today? What decision are they facing? What would they need to hear to make it well? The CDC's guidance on partnerships recommends building connections with organizations that serve disproportionately affected populations, to improve how information travels and how much it is trusted. The corporate version is simple: identify who your audiences already listen to, and build those relationships before you need them.
Build the Plan Before You Need It
The University of Florida's extension guidance is blunt about preparation. An organization's crisis plan should put significant time and effort into the communication piece: a chain of command, a designated spokesperson, and a list of the tough questions you expect. Here is what that looks like in a working strategy.
Goals and ownership
Write down what you want people to understand, feel and do. Then name who approves messages, how fast, and who can speak. Approval delays are where most plans quietly die. If a message needs five sign-offs and two of those people are unreachable on a weekend, you do not have a plan.
A spokesperson who is ready
Choose one voice, and a backup. Train them. Speaking with empathy under pressure is a skill, not a personality trait, and it improves with rehearsal. Our piece on spokesperson training explains how to prepare leaders to speak when the cameras are on.
Pre-approved messages
FEMA's planning guidance says pre-scripted, pre-approved messages are critical for timely, consistent communication in the chaos of an emergency, and that they help reduce confusion and maintain public trust. You cannot script everything, but you can draft holding statements, templates for each audience and a bank of answers to the hardest questions. Fill in the specifics on the day.
FEMA also suggests relating a protective action to something people already know, such as sheltering from a tornado, because familiarity improves understanding and compliance. The same trick works in business: compare the unfamiliar step to a routine people already follow.
Rehearse it
A plan that has never been tested is a draft. A tabletop exercise exposes the missing phone number, the unclear approval path and the answer nobody wanted to write. We have collected tabletop exercise scenarios you can run with your leadership team.
Anatomy of a Message That Works
The CDC's outbreak-communication guidance lays out the elements of an effective message in a sequence worth borrowing. It begins with empathy, identifies who is at risk and what causes the risk, gives actions people can take, acknowledges uncertainty, explains what officials are doing, and says when the next update will arrive.
Translated for an organization, a message answers six things:
We understand this is worrying. Here is who is affected and why. Here is what you should do. Here is what we do not know yet. Here is what we are doing about it. Here is when you will hear from us again.
The last element is the one people forget, and it may be the most valuable. A promised update time turns an anxious wait into a schedule.
Keep it short and repeat it
CDC's review of the H1N1 response describes effective messaging for stressed audiences as simple and short, organized around three key messages and repeated at least three times. People under stress take in less than you expect. Choose your three messages deliberately and resist the urge to add a fourth.
The familiar "five Cs" of communication, usually given as clear, concise, concrete, correct and complete, work as a final checklist here, though lists differ slightly from one source to another. Before a message goes out, ask whether a worried stranger could act on it without calling you.
Be specific about what to do
A U.S. Fire Administration evaluation of wildland-fire evacuation planning found that warnings shape behavior through five qualities: source credibility, official status, content specificity, few contradictory messages and adequate forewarning. Warnings also need to say what people should do, where and within what time. A vague caution gets a vague response.
Communicating Uncertainty Without Losing Trust
This is where leaders get nervous. If we don't have the answer, shouldn't we wait until we do? The guidance says no. FEMA's best practices tell communicators to accept uncertainty, explain how conditions may change, describe what is being done to close the knowledge gaps, acknowledge public concerns and communicate honestly, candidly, openly and promptly.
The CDC's CERC principles are a compact version of the same idea: be first, be right, be credible. They tell communicators to say what is known and unknown, and they note that rumors are more damaging than hard truths. The same CDC document describes trust as the natural result of promises kept, built by pairing expert knowledge with ethics and values.
There is a practical wrinkle. FEMA experts caution that decision-makers must manage uncertain information carefully so it does not undermine stakeholder trust, while still giving as much information as possible about response goals. And the H1N1 review recommends putting numerical estimates next to explicit statements of uncertainty rather than hiding the range.
A peer-reviewed review of U.S. environmental-health cases adds a human note: people often care more about whether exposure is happening and how to stop it than about precise-sounding probabilities. Lead with the action, then give the numbers.
A quick illustration
Imagine a hospital learns that a billing system was briefly exposed and cannot yet say whose records were touched. A weak statement says the matter is under review. A stronger one says what happened in plain language, who might be affected, what patients can do today, what the hospital does not yet know, who is investigating, and that the next update will come at a stated time. The second version admits more and protects more. It is also the one patients are likely to believe. Our guide to healthcare crisis communications goes deeper on this sector.
Risk Communication Examples Worth Studying
These are public-sector cases, and each shows one principle clearly.
Ask first: EPA's flooded-homes project
In its Flooded Homes case study, EPA asked affected residents what they wanted to hear instead of only telling them what to do. The team then used short how-to videos, infographics, human-centered design and usability testing to explain safe re-entry, cleanup and repairs. The lesson: audience research is not a delay. It is how you avoid writing the wrong thing.
Be unmistakable: Hurricane Katrina
The National Weather Service's New Orleans office issued a stark impact statement nearly 24 hours before landfall, including the possibility of "certain death" for people who stayed. The case study credits the statement with helping prompt evacuation, with at least 90% of people in the danger zone seeking safety inland. The lesson: when stakes are severe and the facts support it, plain and forceful language earns attention that careful hedging does not.
Be memorable: Turn Around, Don't Drown
FEMA's flood-safety campaign shows the value of a short, memorable protective-action message, and FEMA reports that repeated delivery raises the chance people will heed it. Five words did what a paragraph could not.
Be fast and direct: Jackson County, Texas
After Hurricane Rita, Jackson County replaced word-of-mouth warnings with an automated geographic telephone-notification system. During Hurricane Ike, officials used it first for a voluntary evacuation and then for a countywide mandatory evacuation, finishing the task in less than two hours. The lesson: the channel is part of the strategy, and it has to be chosen and tested before the storm.
Use every channel: Iowa's Cyclospora outbreak
During Iowa's July 2013 outbreak, health officials combined electronic alerts to providers, news releases, social-media posts and daily updates. CDC's report says awareness and testing increased, with providers diagnosing cases that might otherwise have been missed. Different audiences, different channels, one consistent story.
How to Tell Whether It Is Working
EPA-sponsored workshop proceedings say evaluation is critical and should happen at every stage of the process, from pre-testing to what happens after delivery. Their question is simple: did the intended audience get the message, and did it help them understand or act?
EPA's air-pollution guide lists practical methods: audience analysis, pre-testing messages with focus groups, assessing how the communicator performed, and outcome checks such as reaction forms after meetings. During a live event, the CDC recommends media monitoring and communication surveillance to spot misinformation and disinformation as it appears.
Los Angeles County's "Done with Menthol" campaign shows measurement done well. It began with audience research, used creative modeled on styles its audience already knew, and linked directly to free or low-cost help. During its run it produced more than 66 million impressions and about 56,000 clicks, with higher quitline calls among African American and Latino subgroups. A message that points to a next step is a message you can measure.
One caution from the research literature: success is defined by whether audiences respond as intended, whether that means calming down or taking protective action. Reach alone is not the result.
Our Perspective
Over three decades of advising organizations, I have noticed that leaders treat risk communication like a fire extinguisher: something to find in an emergency. I would rather see it treated like a relay race. The baton is passed long before the finish line, and the team that has practiced the handoff is the one that doesn't drop it.
What we see again and again is that the organizations that come through a difficult moment with their reputations intact did their hardest thinking early. They knew who would speak, they knew who they were speaking to, and they had already decided to tell people what they knew and what they didn't. That is why we pair preparation with real-time response. A plan written in calm helps only if someone experienced is beside you when the facts start moving.
We also believe the message is half the work. Credible action is the other half. People forgive an organization that says, "Here is what happened, here is what we are doing, and here is when you'll hear from us next." They rarely forgive one that sounds polished while doing nothing. Rebuilding trust is a matter of promises kept, and communication is how you make those promises visible.
Mark
Putting This to Work With Mark Brown Strategies
If your organization is looking at a risk that might become a headline, such as a pending regulatory action, a product issue, a leadership change or a community dispute, the most useful time to get help is now. We offer crisis readiness assessments, tailored crisis communication plans, real-time crisis response, reputation management and recovery, corporate communications, community relations and litigation support, backed by more than 30 years of experience and a network of experts.
If you want a second set of eyes on your plan, or a partner on call when something breaks, you can talk to Mark Brown Strategies. Our related guides on a crisis management framework and reputation risk mitigation are good next reads for leadership teams.
FAQ
What is an example of risk communication?
The National Weather Service's pre-landfall Hurricane Katrina statement is a clear one. It stated the threat plainly and the potential impacts, and it told people to leave, and the case study credits it with helping prompt evacuation. A corporate equivalent is a plain-language notice to customers about a product issue that says who is affected, what to do and when the next update will come.
What are the main parts of a risk communication strategy?
A workable strategy has clear goals tied to your mission, mapped audiences, a designated spokesperson, a chain of command, pre-approved messages, chosen channels and a way to evaluate results. Each of these appears in the EPA and University of Florida guidance cited above. Rehearse it with a tabletop exercise so the gaps show up before an event does.
How do you communicate risk to the public when you don't have all the facts?
Say what is known, say what is not, explain what you are doing to find out, and give a time for the next update. FEMA and CDC guidance both advise accepting uncertainty openly and communicating promptly. Pair any numbers with a statement of how uncertain they are, and lead with what people can do now.
What is the difference between risk communication and crisis communication?
Risk communication begins before an event, when a hazard is possible, and aims to help people understand it and prepare. Crisis communication guides what you say once the event is under way. A strong strategy treats them as one continuous effort, with the same trust-building principles throughout.
Sources
- The SALT Framework, US EPA
- Risk communication and community engagement, WHO
- Fundamentals: Risk Communication, Public Health Ontario
- Risk and Crisis Communication: When Things Go Wrong, University of Florida IFAS
- Air Pollution and the Public: a Risk Communication Guide, US EPA
- PHEP Risk Communication Supplemental Guidance, CDC
- Advance Preparation of Messages, FEMA
- Communicating During an Outbreak or Public Health Investigation, CDC
- H1N1 Risk and Crisis Communication, CDC
- Evaluation of Evacuation Planning in Wildland-Urban Interface, US Fire Administration
- Best Practices for Communicating Risk in an Emergency, FEMA
- Zika Crisis and Emergency Risk Communication, CDC
- Risk Communication, FEMA
- Information needs, approaches, and case studies in human health risk communication, PMC
- Flooded Homes Risk Communication Case Study, US EPA
- NWS Impact Statements and Hurricane Katrina
- Turn Around, Don't Drown, FEMA
- Computerized Warning System Replaces Word of Mouth, FEMA
- Electronic Messaging and the News Media, CDC MMWR
- Evaluation and Effective Risk Communications Workshop, US EPA
- Done with Menthol campaign, Preventing Chronic Disease, CDC