This article previews a Showcase CLE program at the American Bar Association Business Law Section’s upcoming Fall Meeting in Chicago, Illinois. Register now to attend the program, “When the Alarm Sounds: Boardroom Crisis Management in Real Time,” on Wednesday, September 2, 2026, 12:00–1:30 p.m. CT.
Corporate crises rarely arrive at a convenient time, in a neat package, or with a complete set of facts. Lawyers cannot control when the alarm sounds. A ransomware attack locks key systems before dawn. A whistleblower complaint alleges executive misconduct on the eve of an earnings call. A regulator sends an urgent inquiry that suggests the government already knows more than the company does. A financial restatement threatens market confidence, investor relations, and board credibility all at once.
In those moments, lawyers (both outside counsel and in-house counsel) are asked to do far more than answer legal questions. They must help a company think clearly under extreme pressure—and do so in a way that holds up to real-time and post-hoc scrutiny from regulators and judges. They must also help directors and officers identify problems, preserve privilege, and satisfy fiduciary duties, all without creating new legal or ethical problems of their own along the way. The first hours matter, but so do the decisions made in the days, weeks, and months that follow.
When the Boardroom Becomes a Crisis Command Center
When a serious crisis emerges, one of the very first questions is who should take charge. The answer can be surprisingly hard to pin down. Management often has operational control and access to information, but the board may have independent oversight obligations, particularly when the allegations involve senior leadership, internal controls, financial reporting, regulatory compliance, or enterprise risk management.
The board’s role often has to be worked out in real time, and counsel needs to be ready for it. Should the full board handle this directly, or does it call for a special committee and independent counsel? Whatever the answer, directors need enough information—properly documented—to know when to defer to management and when to take a harder stance. These decisions can shape the company’s legal position, affect privilege, and determine whether later scrutiny views the company’s actions as thoughtful governance or reactive damage control.
Preserving Privilege While Finding the Facts
Internal investigations are often central to corporate crisis response. But an investigation that is poorly structured at the outset can create avoidable risk. Counsel must consider (1) who the client is; (2) who is directing the investigation; (3) who should conduct interviews; (4) how documents should be collected; (5) how findings should be reported; and (6) whether any report should be written, oral, privileged, or shared with third parties.
To complicate matters, there is a practical tension between learning the facts quickly and preserving legal protections. In a crisis, business leaders want answers immediately. Regulators may expect cooperation. Auditors, insurers, lenders, investors, and counterparties may demand information. Employees may be anxious or confused. The media may ask questions before the company has completed its own review. Lawyers must help the company gather reliable information without sacrificing privilege, waiving protections unnecessarily, or creating a record that is inaccurate, incomplete, or damaging.
Communications, Candor, and Control
Every corporate crisis is also a communications crisis. Silence can create suspicion, but premature statements may create liability. Public companies may face disclosure obligations. Regulated entities may have reporting duties. Private companies have their own audiences to manage, from employees and customers to lenders and business partners. And in nearly every significant crisis, someone will be watching: regulators, plaintiffs’ lawyers, the media, competitors, stockholders, consumers, and/or the court of public opinion.
Shaping communications that are accurate, disciplined, and consistent with the company’s legal obligations is its own kind of advocacy. That does not mean turning lawyers into public relations professionals. It means understanding how communications strategy, litigation risk, regulatory exposure, and corporate governance intersect. Counsel must also be sensitive to the danger of inconsistent messaging. What the company tells employees should not undermine what it tells regulators. What it says publicly should not conflict with what the board has been told privately. What appears in a press release may later appear in a complaint, deposition, enforcement action, or judicial opinion. Good crisis management requires coordination, judgment, and restraint.
Ethics in the Pressure Cooker
Crisis conditions can magnify ethical risk. Lawyers may face difficult questions about organizational representation, conflicts, confidentiality, reporting obligations, document preservation, witness communications, and interactions with government agencies. In-house counsel may be asked to serve simultaneously as legal adviser, business strategist, investigator, and institutional memory. Outside counsel may be asked to move quickly while still maintaining independence and professional judgment. But many fundamental and difficult questions arise quickly:
- Whom does counsel represent?
- What happens when the interests of the company and individual executives diverge?
- How should counsel communicate with employees during internal interviews?
- What must be done to preserve documents and electronically stored information?
- When does zealous advocacy become obstruction, overstatement, or concealment?
These issues matter not only to corporate lawyers but also to judges and government lawyers who later evaluate whether a company acted responsibly. A crisis response that is ethical, organized, and well-documented can affect regulatory credibility, settlement posture, judicial perception, and litigation outcomes.
A Practical Framework for the Full Life Cycle of a Crisis
Crises tend to unfold in phases, but the planning for them has to happen long before any crisis exists. What counsel needs is a practical framework for advising boards and companies through the full life cycle of a corporate crisis. This framework must be built well in advance, not improvised under pressure.
The first phase is preparation, which includes refining governance structures, setting escalation protocols, drafting crisis playbooks, addressing privilege issues, training incident response teams, and educating the board, long before any of it is actually needed. That groundwork pays off in the first critical hours, when counsel must help identify the problem, convene the right decision-makers, preserve evidence, retain necessary advisers, and control communications.
From there, the response widens: internal investigations, regulatory engagement, public disclosures, employee communications, insurance coordination, remediation, litigation strategy, and board oversight, often running at the same time.
And once the immediate crisis passes, the work is not finished. Counsel must turn to identifying lessons learned, effectuating governance reforms, implementing compliance improvements, and, where needed, the slower work of rebuilding trust.
Conclusion
Corporate crises test institutions. They also test the lawyers and public relations professionals who serve those institutions, often before key audiences—boards, regulators, judges, juries—who will judge the process as closely as the outcome.
When the alarm sounds, the lawyer’s role is not simply to say what the law requires. It is to help the organization make careful decisions under intense pressure, protect the integrity of the process, and guide the client from the first frantic phone call to whatever resolution eventually follows. The lawyers who do this well are usually the ones who did the unglamorous work months or years earlier—the playbook, the trained team, the privilege protocols already worked out—long before anyone could have guessed which crisis would actually occur.
Program attendees will leave with guidance on the following:
- How to organize the first forty-five minutes to an hour after a crisis is identified.
- How to determine who should lead and who should be informed.
- How to preserve privilege while gathering facts.
- How to navigate legal ethical dilemmas.
- How to coordinate legal and communications strategies without increasing liability.
- How to advise boards through difficult governance decisions under time pressure.
- How to recognize common mistakes that often worsen a crisis.
