June 1, 2026

Cyber breaches. Fraud. Employee misconduct. Regulatory enforcement. Escalating customer complaints. Every one of these has made front-page news in Australia in the past two years. If your organisation operates under an Australian Financial Services Licence and you don't have a crisis communications playbook you are exposed.

The Australian Securities & Investments Commission (ASIC) has made its position unambiguous. The regulator has escalated enforcement against financial services who fail to manage crisis and cyber risks. Evidenced through large firm crackdowns (Optus, Medibank etc), ASIC has made it clear that boards, not just management teams, must take ownership.

Crisis preparedness is no longer a line item in an operational risk register, but a compliance obligation with legal consequences for those who fall short.

The uncomfortable truth

In our experience advising wealth managers, licensees and others through crisis events, we notice the same pattern repeats; the organisation has a risk framework. It may even reference crisis communications somewhere in a policy document - but when the phone rings, a journalist is on the line, a regulator issues a notice, or social media turns hostile, there is no set plan or process and often no one who has ever practiced what to do next.

The most common failures we see are remarkably consistent:

·      Failing to recognise that an operational issue is escalating into a reputational crisis

·      Having no structured process to address and coordinate handling of the response

·      Little to no practice: no simulation, no tabletop exercise, no media response training, no in-house expert

·      Mishandling the response through delayed, inconsistent or dishonest communication

Any one of these is enough to turn a manageable incident into a story that can be devastating for the organisation.

‍

What a proven crisis tool kit actually looks like

Capital Outcomes has developed a comprehensive Crisis Communications Toolkit and Playbook built specifically for Australian financial services licensees. It is an operational manual, designed to be activated under pressure, by real people, in real time.

It covers key critical areas:

·       Regulatory context and definitions: what ASIC expects from licensees, what constitutes a crisis in financial services

·       Wand why your first response often defines your reputation.

·       Assessment and activation frameworks: structured decision matrices and severity classifications that tell your crisis management team exactly when and how to activate, removing ambiguity in the critical first hours.

·       Response operations: a complete operational sequence from first alert through to post-crisis review, including roles, governance structures, regulatory notification protocols and stakeholdercommunications.

·       We meet with you to develop a ready-to-deploy communications toolkit: staged messaging frameworks, pre-drafted holding statements, media and employee templates - and a set of golden rules that should be visible to every member of your crisis team.

‍

A sneak peek: Three rules that change how you respond

The playbook includes 10 golden rules for crisis communications. Practical, battle-tested principles that should be printed and pinned to the wall the moment a crisis is declared.

Here are three:

“Never say ‘no comment.’ It reads as guilt. Use the holding statement instead.”

This is one of the most common mistakes in Australian financial services. When a journalist calls and the default response is silence, the narrative is written for you. And it won’t be the one you wanted.

“Tell employees first. Ensure your people hear it from you before they read it online.”

Internal trust collapses fastest. If your staff learn about a crisis from social media before they hear it from leadership, you have lost your most important audience, and your most visible one. Employees talk. They post. They are your brand in the community.

“Respond fast but respond accurately. Speed matters, but wrong information kills credibility permanently.”

Social media has compressed crisis timelines from days to minutes. The pressure to say something, anything, is immense. Yet speculation,half-truths and premature statements do more damage than the crisis itself. With a structured toolkit, process and playbook, a dilemma becomes an opportunity to get your message out first. Your team moves quickly without moving recklessly.

‍

Crisis communications in the real world

A case study in effective crisis management is what the AFR called the nation’s “largest financial failure of 2024 that no one heard about”, the ASX CHESS crisis. On December 20, 2024, the ASX Clearing and Settlement process, known as T+2, failed. The reason it qualifiesas a success is in that headline. Almost no one knew about it.

As David Ferrall, CEO of FinClear, wrote in the AFR, the communicationitself helped divert the crisis: “...members (brokers) of ASX Clear all took ASX’s advice over the course of Friday afternoon that services would resume by close of day. As a result, they ensured all their clients were paid from their own internal funds. Each should be applauded for insulating the ASX from the reputational damage and fallout that would have occurred if end investors, the mums and dads, had been unable to go Christmas shopping. The ASX operational staff should be applauded for stepping up and engaging proactively.”

‍

Stakeholders judge your organisation on how you respond, not necessariliy on the incident itself.

Your tailored crisis communications playbook is not a document you create because a consultant told you to. It is the document that stands between a controlled response and reputational damage. It tells your team who decides, who speaks, who listens and in what order. It providespre-approved language so you are not drafting statements under duress. It maps your stakeholders, your regulators and your obligations before you are under the spotlight.

‍

Get your toolkit

Capital Outcomes’ Crisis Communications Toolkit is available to Australian financial services licensees – and is tailored to your organisation, your licence conditions and your stakeholder landscape - as a generic template is not a crisis plan.

We also run executive workshops designed to get yourleadership team crisis ready, because a toolkit and playbook is only as strong as the people trained to use it.

‍

To request a toolkit and/or book a workshop, contact:

‍

Guy McKanna

Account Director, Capital Outcomes

0430355 985 |  guy@capitaloutcomes.co

LinkedIn: Guy McKanna

‍