Public relations holding statement placeholders
Overview
Holding statements buy time while facts solidify. Pre-fill placeholders in the IR folder—legal approves before use.
Internal staff template
“We are investigating a security matter involving [systems]. Employee and customer safety/data are priorities. Please direct media to [spokesperson]. Do not speculate on social media.”
Customer/partner template
“We are aware of [service disruption / potential unauthorized activity]. Our team is working with [forensics/counsel] to determine scope. We will update you within [timeframe] or as required by law.”
Media template
“We have initiated response procedures and are cooperating with [authorities if applicable]. We will share more when responsible to do so.”
Placeholders list
[DATE], [SCOPE], [CONTACT], [REGULATORY_REFERENCE], [NO_COMMENT_AREAS].
Refresh
Quarterly red team edit for tone and accuracy—outdated phone numbers embarrass under stress.
Training
Comms lead practices reading aloud—pace reduces panic on camera.
Evidence
Store approved PDFs versioned; track which variant went to whom—discovery later rewards discipline.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...