Every leader will face a crisis. The question is not whether it will happen, but how you respond when it does.
Most leaders get crisis management wrong because they overcomplicate it. Their instinct is to minimize, delay, lawyer up, or go quiet. Every one of those instincts makes the crisis worse. The crisis doesn't shrink while you're figuring out your response. It grows. And the narrative gets written without you.
Scott Galloway, NYU marketing professor and one of my favorite thinkers on business strategy, simplifies crisis management into three steps. And the best crisis response in corporate history proves exactly why they work.
The Three Steps
Step 1: Acknowledge the problem. Say it plainly. Don't minimize, don't spin, don't hide behind legal language or corporate jargon. The longer you wait to acknowledge what happened, the more the narrative gets written by everyone except you. Silence doesn't protect you. It convicts you in the court of public opinion before you've even shown up.
Step 2: The CEO needs to speak. Not the PR team. Not a spokesperson. Not a carefully worded written statement buried on page three of your website. The top person takes responsibility publicly. This signals to every stakeholder, your employees, your customers, your board, your market, that the organization takes the crisis seriously enough for the person in charge to stand up and own it.
Step 3: Over-correct in your response. Don't do the minimum. Don't do what's proportional. Do more than anyone expects. Disproportionate action in the right direction rebuilds trust faster than any measured, calculated, committee-approved response ever will. When in doubt, do more. The cost of over-correcting is almost always less than the cost of under-correcting.
That's the entire playbook. The challenge isn't understanding them. It's having the discipline to follow them when your instincts are screaming at you to do the opposite.
The Gold Standard: Johnson & Johnson, 1982
In the fall of 1982, seven people in the Chicago area died after consuming cyanide-laced Tylenol capsules. At the time, Tylenol held 35% of the over-the-counter pain reliever market and represented a significant share of Johnson & Johnson's profit growth. This wasn't a minor product issue. It was a company-defining crisis and people were dying.
What Johnson & Johnson did next became the gold standard for crisis management. And it maps perfectly to Galloway's three steps.
Acknowledge. J&J went public immediately. They issued mass warnings through national media, established a 1-800 consumer hotline, created a toll-free media line with recorded updates, held press conferences at corporate headquarters, and set up live satellite feeds. There was no hiding, no minimizing, no waiting to see if the story would blow over. They got in front of it and stayed there.
Own it. James Burke, J&J's CEO, led the response personally. He was visible, accessible, and direct. He made the decision that public safety came first, period. This is critical: J&J was not responsible for the tampering. Someone else had poisoned their product. Burke could have deflected, pointed to the criminal, and positioned J&J as a victim. Instead, he took full ownership of the response because the product bore his company's name and the public's trust was his responsibility.
Over-correct. J&J recalled 31 million bottles of Tylenol from every shelf in America. Not just the affected batches in Chicago. Every bottle, everywhere. The cost exceeded $100 million. They halted all production and advertising. Then they went further: they redesigned their entire packaging, introducing a triple safety seal (foil seal, plastic neck seal, glued box) that became the pharmaceutical industry standard. They replaced two-piece capsules with solid caplets that were far harder to tamper with. They didn't just fix the problem. They made sure it could never happen the same way again.
The result: within a year, Tylenol rebounded to its previous market share. In 1983, Congress passed the "Tylenol bill" making product tampering a federal offense. In 1989, the FDA established tamper-proof guidelines for all consumer products. J&J didn't just survive the crisis. They came out of it with more trust than they had going in, and they changed an entire industry's safety standards in the process.
Why Leaders Get This Wrong
Our instincts under crisis are fight or flight. Fight looks like getting defensive, blaming external factors, pointing fingers, and lawyering up. Flight looks like going quiet, issuing a vague statement, and hoping the news cycle moves on.
The leaders who handle crises well are the ones who override those instincts. They move toward the problem, not away from it. They speak when every advisor is telling them to stay quiet. They over-correct when the finance team is calculating the cost of doing too much. The short-term cost of over-correcting is real. The long-term cost of under-correcting is almost always greater.
The Bottom Line
Crisis management is not complicated. It's three steps: acknowledge the problem, the top person takes responsibility, and over-correct in your response.
The companies and leaders who follow this playbook don't just survive crises. They come out of them stronger, with more trust and more credibility than they had before the crisis hit.
The ones who hide, hedge, and hope for the best? They turn a crisis into a catastrophe.