Most organizations can cope with straightforward bad news, and so can most people. We absorb the shock, and move on. But what happens when we don’t know how bad the news actually is?
The Art of Communicating Risk
Sometimes during a crisis we don’t know how bad the situation really is. Consider the following scenario involving a data privacy violations: A company discovers that sensitive data about a user is exposed in an unencrypted database for 24 hours. Has anyone accessed it? If so, what, if anything, can they glean from it? Firms facing the question of whether and how to communicate risk often err too far in either direction. When organizations alert their customers to every potential risk, they create notification fatigue. When firms wait too long to communicate in an effort to shield users from unnecessary worry customers interpret time lags as incompetence, or worse, as obfuscation. The answer is to trust that customers can process uncertainty, as long as it’s framed in the right way. Using techniques from behavioral science, the authors suggest better ways to communicate uncertain risks in way that will protect customers and foster trust.