Risk management


The web is now the medium of choice for campaign groups like Greenpeace, Oxfam and the WWF to raise funds, expand their networks, and mobilise supporters. Little wonder: online pressure played no small part in Shell exiting its longstanding partnership with Lego, Nestlé reconfiguring its palm oil supply chain, SeaWorld halting its breeding of captive orcas, and the collapse in shark fin consumption in Hong Kong. Then UK Culture Secretary Jeremy Hunt admitted that online pressure had ‘significantly influenced’ his decision on the Rupert Murdoch’s 2010 bid to take full control of BSkyB.



But it is not just the big campaign groups that have benefited. Once the preserve of students, tree huggers and political dissidents, activism is now the opium of suburban housewives and white collar workers across the world. It is particularly evident in the huge popularity of online petition sites:

  • counts over 140 million members in 196 countries
  • Avaaz boasts some 43 million members in 194 countries
  • Care2 has almost 35 million members
  • A UK member of parliament recently told me she receives dozens of emails every day supporting various causes from the 3 million+ members of 38 Degrees, all of which she feels compelled to respond to.

People power has never felt so real, or so daunting. And in an age in which business is increasingly expected to play the role of a concerned and actively engaged ‘citizen’, the numbers involved and the sheer unpredictability of public opinion raises real challenges and risks, as firms supporting ostensibly mainstream causes have discovered.

Drawing on discussions and interviews with Greenpeace, the WWF and high profile individual activists, I argue in my book Managing Online Reputation that online activism is now mainstream, activist networks are becoming more amorphous, and campaign groups are deliberately making their lines of attack less predictable, before going on to detail three current and emerging strategies and tactics used online in the ongoing battle for public support.

The relevant chapter – on the social and environmental threats of the web – is now available online as a free sample:


With propaganda swirling online, a petition fast escalating and Greenpeace all over your Facebook page, an online activist attack can feel terrifying and remorseless. But while some activist campaigns meet or even exceed their objectives, most fail to convince the public of their merits, or simply succumb to slacktivism.

How you choose to respond requires a close understanding of your detractors’ playbook, a smart reading of the public mood, and an appreciation of your tolerance for business and reputational risk – factors I’ll explore shortly.

Image courtesy of WWF Hong Kong.



Drawing on my experiences in journalism, government, IPO-ing one of Europe’s top digital agencies, and working at WPP, I had the pleasure earlier this week of talking to early stage entrepreneurs and assorted others at Paperclip Hong Kong about the importance of building trust from the get-go.

The second half of the talk focused on online reputation, specifically how companies should handle threats on the internet and social web and draws on my book Managing Online Reputation. A single negative review, badly handled, can be disastrous for a small company so it is all the more important that business owners have a decent understanding of the many options, tools and techniques available to help them evaluate and respond to common problems.

Here’s the deck:

Hong Kong

Caution, shameless self-promotion: my book Managing Online Reputation launches today.

You might ask – perfectly legitimately – why I have taken the trouble of writing 60,000+ words about something that should now be well understood. Surely it hardly needs saying that Google, Twitter and Weibo make it harder to manage a company’s name and image, opening it to the whims, prejudices and ulterior motives of disappointed customers, aggrieved employees, malicious competitors, enraged activists and recalcitrant algorithms?


Yet it remains the case that many organisations (and individuals) remain unclear how best to insulate themselves from trouble online, and continue to mess up their response when things go public.

It has not helped that there remains a dearth of practical, common sense advice in this area. There are many reasons for this, from a tendency to see social media as a business and marketing Holy Grail while overlooking the hazards of the conquest, to the fact that most existing guidance is written from a social media marketing, public relations, technology or legal perspective when effective online reputation protection and defence is about all of these working together. Things have also not been helped by a cottage industry of  ‘online reputation management’ specialists selling puffed-up search engine solutions.

Managing Online Reputation draws on what I have learned over many years as a communications strategist, PR practitioner and digital marketer mining the seam where communications and reputation, and the internet and social media meet. Accordingly reputation is tackled primarily from a communications perspective – albeit a broad one – and I make no apologies for this: if issues are left to fester long enough they will almost inevitably become reputational – and hence PR – problems and must be tackled as such.

However, to understand more clearly the risks to reputation posed by social media, and to appreciate the many different response options, I talked with experts in fields such as media and IP law, social and environmental activism, IT security, digital forensics, crisis management,  emergency response, social media monitoring, search engine marketing and Wikipedia management.

Given that the social web impacts so many areas of an organisation it should come as little surprise that online reputation is a complex topic. However Managing Online Reputation tries not to over-complicate or over-sell the issue. You’ll find it avoids talk of ‘social media crises’ and other hyperbolic marketing phraseology, just as it makes no grand claims about what the many social media business and listening tools now available can do for you. Rather it looks at social media in a broader context, and offers practical, realistic, common-sense advice in plain English.

It is also intended to be interesting. Sprinkled amidst tried and tested ways to categorise, assess and respond to potential problems online, and detailed guidance on how to develop (or update) your crisis plan, you’ll find vignettes about the culture of smears in China and political protest in Hong Kong, the easy and pungent opium of online petitions, the perils of companies attaching themselves to social movements, and what a black swan looks like online. There are also detailed case studies of companies of all shapes and sizes responding successfully to and recovering from fast escalating negative incidents and bone fide crises.

Here’s more of a taster:


More than anything you should come away from reading Managing Online Reputation with the notion that, despite the scepticism in which companies and institutions are held today, and the innate tribalism and volatility of life online, your organisation’s reputation is eminently knowable, manageable and redeemable – as long as you prepare well, keep your head and play it straight.

Managing Online Reputation is available in paperback and as an e-book via Amazon, Barnes & Noble, 800-CEO-READ and other outlets.

You can find out more about the book and how to order it here.

We live in the age of the leaky corporation in which the wrong information slips easily into the wrong hands.

Some organisations think the best solution is to restrict access to the internet and/or social media. But at what cost to an organisation’s ability to communicate externally? I recently met with the regional communications lead at a major global bank who turned out to be the only person in Asia with access to Twitter. Little surprise that the individual felt restricted in what could be achieved online.

So it is good to hear IT exponents argue cutting internet access is not a realistic answer.

From the HBR.

This week I was fortunate to visit the Middle East to give a two-day workshop on ‘Reputation Risk and Communication’.

It was my first trip to Dubai for a number of years and it was a privilege to return and witness at close quarters the extraordinary flowering of the emirate and the optimism and drive of its people. It was also a welcome antidote to the shocking and numbing images of riots and massacres that so easily shape perceptions of the broader region.

Burj Khalifa, Dubai

Not a bad lunchtime view

The visit also provided a chance to hear direct from senior communications, marketing, risk management and legal professionals from the UAE, Bahrain, Egypt, Kuwait, Oman and Pakistan about their professional observations, experiences and challenges.

While the workshop focused on how organisations can mitigate and manage corporate reputation in a broad sense, including during crises, much of our discussion focused on social media, which is clearly a major concern, in part due to its role in the so-called Arab Spring.

Here are a few slides from the workshop outlining how companies and governments can safeguard corporate reputation in social media.


Fortunately, my take on this issue appeared to resonate positively with participants of the workshop.

But there’s always so much to learn.

It would be great to know your comments or suggestions.


According to a new survey into crisis communications by law firm Freshfields Bruckhaus Deringer 28% of crises are spreading internationally within an hour, and 69% within 24 hours.

Clearly, the onus is on companies to prepare to assess crisis threats and their likelihood of going global. They must make sure that social media are firmly embedded within crisis risk assessment, planning and response, not least during the critical first hour. In addition, multi-channel crisis simulation exercises should be conducted amongst teams in multiple locations.


Source: Freshfields Bruckhaus Deringer, November 2013

The accompanying report (pdf) goes on to state that there ‘is no longer such a thing as a national crisis’. This makes some sense in the context of a report on multinationals, yet despite the reach of CNN and other 24-hour news operations and the pervasiveness of social media, there are plenty of scenarios when crises do not go global. These include:

  • Footprint: if the company has no foreign operations, stakeholders or relevance and where its reputation is essentially local or national
  • Language: where the language in which the company operates is little spoken outside its domestic borders eg. Japan
  • Affinity: where potential for word of mouth is limited to due to local/small-scale or weak online affinity communities.

A case in point is Hoi Tin Tong, a herbal medicine retail chain based in Hong Kong that was recently hauled into the spotlight by a study finding that its turtle jelly – the firm’s signature product – has very little or no turtle shell, on the heels of a video purporting to show mouldy jelly being prepared for sale.

Covered in detail by the local press, including the venerable South China Morning Post, and the subject of considerable speculation in Hong Kong’s highly active online communities, the story has proved immensely damaging to the firm, whose founder is now talking of shuttering stores.

Despite the firm operating stores in mainland China and Macau, the story has failed to catch light in other markets. Why? Perhaps because the company is principally a local Hong Kong player and online/offline coverage has been principally in Cantonese, a language not understood even by most mainland Chinese.

Your thoughts? What else is stopping crises going global?

A recent report (pdf) by Forbes for Deloitte on risk management reveals social media to be the fourth largest vulnerability to companies over the next three years, on a par with financial risk.

This underscores the impact of social media for firms as a whole, and the necessity to approach social media as a company-wide as opposed to a marketing, PR or customer service initiative.

To quote the report: “Social media risk may magnify the threats from a diverse array of risks, including reputation, strategic, operations, and compliance. Confidentiality may be breached, corporate secrets spread or malicious rumors started that can put a company in a tailspin.”


As noted in a previous post, the impact of social media on reputation looms large, even if senior business leaders do not view it as potentially damaging as technology risks.

I was recently asked to talk at a conference in Hong Kong on the risks inherent in social media marketing. Here’s my ten cents – or 10 basic principles – on how to limit social media marketing risks.

Most of these principles require little more than careful business and campaign planning and governance. And, given the tendency for social media still be operated in siloes, some lateral thinking.

What do you think?