Consumer showing concern of a data breach
Oct 2022 | Fraud Prevention
By Posted by Jim Steven

Consumers must be at the heart of any crisis response plan

When any business is hit by a crisis, it sends shockwaves throughout the organisation. The impacts of a cyber-attack, health emergency or data breach can be devastating for the business, both financially and reputationally. But the greatest impacts are often felt by consumers or service users.

Emotional and financial impacts

Think about the stress of discovering that your confidential data, for example, has been lost or stolen. The financial impacts on individuals can be significant, but the emotional strain can be even more damaging. The theft of confidential data can lead to identity fraud, financial loss and damaged credit ratings – with implications for many aspects of life. When the health and well-being of your customers is at stake, you can’t afford to cut corners in the way you plan for and respond to a crisis.

That’s why it’s so important to ensure that your crisis response plan addresses consumer expectations, protects their finances and supports their emotional well-being. We know from experience that regular, clear communication is one of the most important ways to help minimise stress and uncertainty for consumers impacted by a crisis. Customers understand that any organisation can suffer a crisis, but they do expect businesses to be open and transparent with them, and to keep them informed about the recovery process and any consequences that affect them.

Understanding consumer expectations

In recent surveys of crisis preparedness, response and recovery among businesses and consumers, we asked more than 2,000 members of the public about their experiences and expectations. Respondents told us that if their confidential data was compromised by an incident, they would expect to be notified quickly. More than half (55%) expected to be informed within 24 hours. On average, people expected to be informed within five days of such an incident.

Businesses falling short

Consumers also expect businesses to provide services to help them recover from a crisis and minimise its impacts. These services include identity theft and fraud protection (49% of respondents), contact centre support to answer queries (42%), compensation (44%) and credit file monitoring services (42%).

But when we asked business leaders what support they could actually provide to customers in the event of a crisis, they responded with the following:

Identity theft protection - 42%

Identity theft protection / credit file monitoring and repair

Call centre support - 43%

Call centre support

Compensation - 41%

Compensation

This suggests that many businesses are likely to fall short of customer expectations in the aftermath of a crisis.

Businesses that had experienced a data breach were also asked how quickly they were able to inform customers. Less than one in 10 (7%) had informed customers within 24 hours. On average, respondents said they had informed affected customers within eight days. Again, it seems many businesses would be unable to provide the rapid notification most consumers expect.

Download the full whitepaper

You can read a detailed summary of the findings in our whitepaper: Crisis Response: Assessing the readiness of UK organisations to manage the impacts of a consumer crisis.

Download whitepaper

Communication key to successful response

Another concerning finding was that 42% of business respondents said their organisation had no notification process in place to inform customers. And 38% said they didn’t have processes in place to cleanse customer address data. Without accurate information on customer contact details and preferences, any emergency communication programme would be severely hampered.

Any delay or disruption to notifying customers is likely to result in greater emotional distress and financial harm. That’s likely to exacerbate reputational damage and erode the hard-earned trust you have built up with customers.

Careful and detailed planning for a crisis response in advance is the way to avoid delays, ensure you have the necessary resources in place, and ensure everyone involved in the response understands their role. If a crisis strikes, you will be grateful for the level of thought and detail you have put into your plan. That plan should include setting out the messages you wish to convey to affected parties and the channels you will use, as well as having templated communications ready to deploy. By keeping customers well informed in a timely manner, you deflect many incoming queries and generate positive feelings of trust towards your business – demonstrating your expertise and efficiency in dealing with the unexpected.

Plan for a positive resolution

The consequences of an effective crisis response can be beneficial for your business. The consumers we surveyed said they would feel positively towards a business that handled a crisis situation professionally and kept them well informed. Our survey findings were as follows:

Continue to be a customer - 46%

Continue to be a customer

Think favourably of the organisation - 43%

Think favourably about your business

Recommend the organisation to others - 31%

Recommend your business to others

Post about it on social media - 16%

Post about it on social media

Most people will be sympathetic to a business responding to a crisis, as long as they are kept informed about what’s happening and supported through the recovery process. Ensuring a positive outcome to any crisis means having a detailed plan. The time to draw up that plan is now, before the next crisis disrupts your business.

To find out more about crisis response planning, please visit our Data Breach page and contact one of our specialists to ask about our crisis response services. Feel free to also connect with me on LinkedIn.