Crisis Communications Writing Sample: A Three-Statement Arc

Corporate Communications Portfolio

Crisis Communications Writing Sample

A three-statement arc demonstrating crisis response, stakeholder communication, and resolution messaging

FICTIONAL SCENARIO NOTICE: The following statements are entirely fictitious and created for portfolio demonstration purposes only. Arcturus Defense Systems does not exist. All companies, individuals, events, contracts, and details described herein are invented. This sample was authored by Ian Roth to demonstrate corporate crisis communications competency.

Scenario Background

The Situation

Arcturus Defense Systems, a fictional mid-sized aerospace and defense contractor headquartered in Huntsville, Alabama, discovers unauthorized access to a server containing controlled unclassified information related to a DoD logistics support contract. A reporter from Defense News calls before the internal assessment is complete. The following three statements represent the full crisis communications arc: initial holding statement, mid-crisis update, and resolution statement.

Statement 01 — Hour One

Arcturus Defense Systems is aware of a potential cybersecurity incident involving one of our internal servers and is actively working to understand the nature and scope of the issue. Upon detection, we immediately engaged our internal security team and retained outside cybersecurity counsel to assist with the investigation.

We take the security of all information entrusted to us, particularly information related to our government partners, with the utmost seriousness. Out of an abundance of caution, the affected server has been taken offline pending a full forensic review.

We are in contact with the appropriate government authorities and are cooperating fully. We will provide an update as soon as our assessment is sufficiently complete to do so responsibly. At this time, it would be premature to characterize the scope or impact of this incident, and we will not speculate.

We understand the public and our partners will have questions. We are committed to communicating transparently as the facts become clear.

Statement 02 — Day Two

Arcturus Defense Systems is providing the following update on the cybersecurity incident we disclosed yesterday. Our internal security team, working alongside outside forensic specialists, has completed an initial assessment of the affected server.

The investigation has determined that unauthorized access occurred on or around March 3, 2026, affecting a single server containing controlled unclassified information associated with a Department of Defense logistics support contract. Approximately 4,200 records were potentially exposed. At this time, we have no evidence that any information has been misused or further disclosed, though our investigation is ongoing.

We have notified the relevant Department of Defense contracting office directly and are cooperating with all applicable oversight and reporting requirements. We have also retained a leading cybersecurity firm to conduct an independent forensic review and will implement their recommendations in full.

We recognize that controlled unclassified information carries real obligations and that the trust of our government partners is not something we take lightly. We are committed to accountability throughout this process. The affected server will remain offline until the independent review is complete and remediation measures are fully implemented.

We will provide a further update upon completion of the independent review. In the meantime, individuals or organizations with specific questions regarding their information may contact our dedicated response line below.

Statement 03 — Day Ten

Arcturus Defense Systems has completed the independent forensic review of the cybersecurity incident first disclosed on March 4, 2026. We are providing the following final public update.

The independent review confirmed that unauthorized access was limited to the single server identified in our initial assessment. The forensic analysis found no evidence that any controlled unclassified information was copied, transmitted, or further disclosed. The point of unauthorized access has been identified and closed. The affected server has been fully remediated and returned to service under enhanced security protocols.

In response to this incident, Arcturus has implemented a series of measures across our information systems, including enhanced access controls, mandatory multi-factor authentication for all systems handling government contract information, and an expanded third-party security monitoring program. We have also initiated a comprehensive internal security training program for all personnel with access to controlled information.

We have maintained open and continuous communication with the Department of Defense throughout this process and have received confirmation that our remediation steps satisfy applicable reporting and corrective action requirements.

We owe our government partners, our employees, and the public a straightforward account of what happened and what we have done about it. We believe this statement provides that. We are grateful for the patience extended to us during the review period and remain committed to the standards of security and accountability that this work demands.

This writing sample was created by Ian Roth to demonstrate corporate crisis communications competency for portfolio purposes. The scenario, company, and all details are entirely fictional.

Ian Roth is a U.S. Army Major and Public Affairs Officer for the 11th Airborne Division, where he serves as the division's primary spokesperson and crisis communications lead. He has managed real-world crisis communications situations involving national media outlets including The New York Times, The Wall Street Journal, CNN, and Fox News.

For additional writing samples and published work, visit ownthewatch.com or his DVIDS author page.