march2021 - 17

MARKETING YOUR FIRM

Developing a Social Media
Crisis Communication Plan

By Becky Livingston

WHEN IT COMES to social media risk, you might think about hacking and incorrect/
inaccurate company page posts. But, that's not the only kind of social media risk. Here
are some others.
■ Automated posts with a thirdparty tool gives hackers the ability
to corrupt the automation and
send out messages that look like
yours. The remedy? Monitor the
application(s) often.
■ Weak passwords are especially
important for corporate accounts.
The remedy? Use a combination of
numbers and letters, both upper
and lower cases, and change them
every 90 days.
■ Who actually has access to your
accounts? Be cautious about how
you log in to accounts, e.g., use
my Google account, because if the
third-party app is compromised,
t hose credent ials could also
be compromised. The remedy?
Quarterly, check admin authorization for any changes and avoid
logging in with another account,
e.g., Facebook, Google, etc.

RISK MANAGEMENT
It is hard to define risk, especially if
you are a person who plays by the
rules. I often recommend clients do
the following activity with a group
of people.
1. 
Create a Risk Matrix Chart,
where the left side represents the
likelihood the event will occur.
The top represents the severity
or impact the action will have
on the firm.
2. Think about potential risks your
firm faces and the measures
to put in place to prevent it or
address it when it happens. This
is the fun part! Brainstorm ideas
with other people. No idea is too
trivial. Outline the list of threats

or vulnerabilities.
3. Identify the systems you have in
place to address those threats or
vulnerabilities.
4. Define a measurement or likelihood (the left side bar in the
chart) of the risk occurring.
5. Choose the level of severity the
threat's impact has on your
brand/company.

Would that have a greater impact
on your firm? How would you
remedy that situation?
When you're drafting your risk
assessment, try to imagine each
of the potential variations. List
them in the matrix, along with
the controls, its likelihood, and the
potential impact on the firm.

EXAMPLE

Once you've identified the risks,
now's the time to identify remedies.
Consider remedy combinations to
use in your plan.
For example, in the risk
example an employee posted client
names, the remedies might include
items 4 and 6. But, if additional
information was posted, including
PII, then a more aggressive remedy
is needed, such as 4, 6, 7, 9, 11, 13,
14, and/or 10 and 16.
Identify the remedies, including some of those below, and place
them in a Crisis Response Grid.
1. Stay silent (in some cases this is
the right thing to do)
2. Social media manager responds
(vs. the posting / junior staff)
3. 
Blocking the offender on the
platform
4. Removing the offending content

An employee accidentally releases
a small number of client names on
Facebook, but no other information
was shared.
■ Likelihood is high since it already
occurred. Vulnerability is lack of
training.
■ The sever it y is neglig ible to
marg inal depending on your
firm and/or if the clients are in a
regulated industry, think medical
or legal.
■ Actions to take could range from
making note of the error and moving on, to contacting clients, and/
or adjusting workflows as needed.
Now consider if that person
released first name, last name,
email, address, and/or personallyidentifiable information (PII). Would
that increase the risk's severity?

REMEDIES

MARCH 2021 ■

5. Official statement is made.
6. 
C ompliance is notified and
responds.
7. E xecutive team is notified and
responds.
8. Blog post or a video is created
addressing the issue.
9. C
 reation of a dedicated phone
number and/or email address
for those impacted.
10. A PR firm is consulted.
11. 
S end an email blast to all
customers notifying them of
the incident.
12. Issue a public apology.
13. Create a crisis FAQ.
14. Create a dedicated customer
complaint page, forum, or
phone number.
15. Take the conversation offline.
16. Pause all scheduled content.

WAYS TO EDUCATE STAFF
Now that you've identified risks,
created an action plan, and written
a process, now's the time to share
it with staff and consultants. Here
are a several ways to accomplish
that.
1. Host lunch-n-learns
2. Post social media office hours
3. Send social media " amplification "
emails
4. Create a social media channel
within the company
5. Send updates to employees &
post on the intranet
6. Develop training videos
In the end, your goal is to create
a social media crisis communication plan that's right for your firm.
If you'd like a step-by-step plan,
download the Risk Management
Primer. ■

www.CPAPracticeAdvisor.com

17


http://www.CPAPracticeAdvisor.com

march2021

Table of Contents for the Digital Edition of march2021

From the Editor: What Do You Hear When You Listen to Your Clients?
4 Tips for Firm Cyber Security in the Cloud
Get Off the Hackers' Hit List: Evolving Competencies for Finance Firms Today
From the Trenches: Client Experience for Today – Portals or Something More?
7 Tips to Prevent Tax Season Burnout
The Leadership Advisor: Security for a Work-From-Home World
The ProAdvisor Spotlight: Discover Two Key New Features in QuickBooks Online
The Labor Law Advisor: The Covid-19 Pandemic and Worker Mental Illness
The Millennial Advisor: Stop Selling: Who Needs Help?
The Staffing & HR Advisor: Finance Employment Trends in the Covid-19 Era
Apps We Love: Games
5 Reasons to Conduct a Retreat in 2021
Stay 3 Steps Ahead: Actionable Tips to Help You Prepare for a Turbulent Tax Season
AICPA News
Bridging the Gap: 4 Keys to Successful Technology Planning
march2021 - 1
march2021 - 2
march2021 - 3
march2021 - From the Editor: What Do You Hear When You Listen to Your Clients?
march2021 - 4 Tips for Firm Cyber Security in the Cloud
march2021 - Get Off the Hackers' Hit List: Evolving Competencies for Finance Firms Today
march2021 - 7
march2021 - From the Trenches: Client Experience for Today – Portals or Something More?
march2021 - 9
march2021 - 7 Tips to Prevent Tax Season Burnout
march2021 - 11
march2021 - The Leadership Advisor: Security for a Work-From-Home World
march2021 - The ProAdvisor Spotlight: Discover Two Key New Features in QuickBooks Online
march2021 - The Labor Law Advisor: The Covid-19 Pandemic and Worker Mental Illness
march2021 - The Millennial Advisor: Stop Selling: Who Needs Help?
march2021 - The Staffing & HR Advisor: Finance Employment Trends in the Covid-19 Era
march2021 - 17
march2021 - Apps We Love: Games
march2021 - 19
march2021 - 5 Reasons to Conduct a Retreat in 2021
march2021 - Stay 3 Steps Ahead: Actionable Tips to Help You Prepare for a Turbulent Tax Season
march2021 - AICPA News
march2021 - Bridging the Gap: 4 Keys to Successful Technology Planning
march2021 - 24
https://www.nxtbook.com/endeavor/cpapracticeadvisor/december2022
https://www.nxtbook.com/endeavor/cpapracticeadvisor/octobernovember2022
https://www.nxtbook.com/endeavor/cpapracticeadvisor/august2022
https://www.nxtbook.com/endeavor/cpapracticeadvisor/june2022
https://www.nxtbook.com/endeavor/cpapracticeadvisor/april2022
https://www.nxtbook.com/endeavor/cpapracticeadvisor/december2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/november2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/october2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/september2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/august2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/july2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/june2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/may2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/april2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/march2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/february2021
https://www.nxtbook.com/endeavor/cpapracticeadvisor/december2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/CPA_Practice_Advisor_November_2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/october2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/september2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/august2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/CPA_Practice_Advisor_July_2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/CPA_Practice_Advisor_June_2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/may2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/CPA_Practice_Advisor_April_2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/CPA_Practice_Advisor_March_2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/february2020
https://www.nxtbook.com/endeavor/cpapracticeadvisor/december2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/november2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/october2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/september2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/august2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/july2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/june2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/may2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/april2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/march2019
https://www.nxtbook.com/endeavor/cpapracticeadvisor/february2019
https://www.nxtbookmedia.com