# The first hour of an incident decides the next six months

> What to say when you do not know yet — and the three statements that make everything worse.

*IPSM — the trading name of Mobius Planet LLC (Nevada, USA).*
*Canonical HTML: https://ipsm.ai/insights/first-hour-of-an-incident/*

---

*Crisis · 5 min read · written from incident rooms*

In the first hour you will not know what happened. You will be asked anyway. The purpose of your first statement is not to explain — it is to establish that a competent adult is awake and in charge.

Say three things and nothing else: what you have observed, what you have already done about it, and when you will next speak. A timestamped holding statement with a named human behind it buys hours. Silence buys nothing and costs the narrative, because someone else will fill it within minutes.

The three statements that make everything worse. "Funds are safe" before you have confirmed it — you may have to retract the only sentence anyone remembers. "No user impact" when you mean no impact you have found yet. And "we were targeted by a sophisticated attacker", which reads to everyone as an excuse and invites people to prove it was not sophisticated at all.

Split the room early. One group stops the bleeding, one group talks, one person decides. The people writing the statement must not be the people reading the logs, and the decider needs authority to spend money and pause the product without a meeting. Most incidents get worse because those three jobs sat in one overloaded founder.

Then, when it is over, publish the boring version: timeline, cause, what changed. A dull, specific post-mortem does more for credibility than any amount of reassurance during the event — and it is the document that gets quoted for years afterwards, so it is worth writing carefully.

> You are not trying to sound calm. You are trying to be the only source worth quoting.

---

## Contact

Start with one paragraph: what you're building, what's in the way, and when it
has to be done. Email **hello@ipsm.ai** — one reply, from someone who will be on
the work. No form, no funnel; answered within a day.

## Elsewhere on this site

- [Build](https://ipsm.ai/build/)
- [Position](https://ipsm.ai/position/)
- [Operate](https://ipsm.ai/operate/)
- [Insights](https://ipsm.ai/insights/)
- [Home](https://ipsm.ai/)

*IPSM · a dba of Mobius Planet LLC · Nevada, USA*